Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189337/4998BE9AA81611F08498AE70C4F9AE02/_WrtCj06ctaut_1HjqdiMTiBlKA.mft
File:                     _WrtCj06ctaut_1HjqdiMTiBlKA.mft (raw, json)
Hash identifier:          Zy+Due/TA+xM6xd1w+usoS2b4vzBU8iCNUnyDaqdBZ8=
Subject key identifier:   D2:38:CF:7F:52:2A:33:1F:54:C2:01:00:8A:D1:F5:97:FA:29:65:89
Authority key identifier: FD:6A:ED:0A:3D:3A:72:D6:AE:B7:FD:47:8E:A7:62:31:38:81:94:A0
Certificate issuer:       /CN=A9189337/serialNumber=FD6AED0A3D3A72D6AEB7FD478EA76231388194A0
Certificate serial:       71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_WrtCj06ctaut_1HjqdiMTiBlKA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189337/4998BE9AA81611F08498AE70C4F9AE02/_WrtCj06ctaut_1HjqdiMTiBlKA.mft
Manifest number:          6F
Signing time:             Wed 13 May 2026 07:57:37 +0000
Manifest this update:     Wed 13 May 2026 07:57:36 +0000
Manifest next update:     Wed 20 May 2026 07:57:36 +0000
Files and hashes:         1: _WrtCj06ctaut_1HjqdiMTiBlKA.crl (hash: tX8KYKKVC8qkSc/TKsCXp7ExOLiS9hF5z4466isQUjM=)
                          2: B4506158A8FB11F09EF52F87C4F9AE02.roa (hash: DdLLYx2lL6G3M6CO9K5PbK2Qo9NH6F9taSWfJMl1grE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189337/4998BE9AA81611F08498AE70C4F9AE02/_WrtCj06ctaut_1HjqdiMTiBlKA.crl
                          rsync://rpki.apnic.net/member_repository/A9189337/4998BE9AA81611F08498AE70C4F9AE02/_WrtCj06ctaut_1HjqdiMTiBlKA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_WrtCj06ctaut_1HjqdiMTiBlKA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 07:57:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189337, serialNumber=FD6AED0A3D3A72D6AEB7FD478EA76231388194A0
        Validity
            Not Before: May 13 07:57:36 2026 GMT
            Not After : May 20 07:57:36 2026 GMT
        Subject: CN=6a042ef1-6aaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:dc:14:6f:eb:cb:98:7b:16:9c:70:3a:e7:dd:
                    d8:6a:1e:1a:d0:ab:ac:af:8b:b8:b5:15:80:a2:4e:
                    c6:8e:35:fa:12:56:bd:c6:5c:fa:f3:50:9e:9c:e6:
                    27:fe:af:65:d7:2a:21:6f:71:46:4d:3f:ea:e3:26:
                    31:78:8c:39:e1:84:3e:c3:1d:b9:16:40:6a:3b:98:
                    a4:63:d6:30:44:27:49:40:b2:9e:61:b3:50:91:32:
                    dd:54:a6:60:33:02:30:ed:05:3b:32:83:66:a2:b6:
                    0f:bc:01:ad:2e:48:56:3c:90:2a:25:23:20:2d:55:
                    41:99:a8:0d:4d:07:a6:1d:2b:79:b3:d7:e7:ad:49:
                    5d:47:8d:dc:39:49:01:4a:c9:3e:03:f5:b8:76:49:
                    d8:a3:d2:19:6e:d4:16:a9:d6:1f:d6:e2:0d:79:75:
                    c7:b5:a9:62:d0:29:b1:54:99:30:e5:b9:1d:a8:24:
                    68:ab:25:10:23:a8:ca:31:53:3b:d7:6a:46:9b:d4:
                    d1:4b:60:43:a9:70:ae:52:9d:aa:e2:aa:09:1b:63:
                    22:e4:42:48:eb:19:35:7c:b2:f5:ad:59:66:1c:f6:
                    2b:ff:14:3e:a1:f2:05:77:36:5f:c6:f7:70:43:96:
                    b2:0e:45:3c:85:0e:3a:5a:05:eb:a7:5c:43:10:2a:
                    3f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:38:CF:7F:52:2A:33:1F:54:C2:01:00:8A:D1:F5:97:FA:29:65:89
            X509v3 Authority Key Identifier:
                keyid:FD:6A:ED:0A:3D:3A:72:D6:AE:B7:FD:47:8E:A7:62:31:38:81:94:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189337/4998BE9AA81611F08498AE70C4F9AE02/_WrtCj06ctaut_1HjqdiMTiBlKA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_WrtCj06ctaut_1HjqdiMTiBlKA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189337/4998BE9AA81611F08498AE70C4F9AE02/_WrtCj06ctaut_1HjqdiMTiBlKA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:f0:d1:b6:a6:1a:95:f8:6b:b7:00:16:dd:d8:8b:7c:43:04:
         01:4b:9e:95:c0:58:e8:55:ce:56:af:4d:98:2a:79:1c:55:2e:
         bd:4f:31:32:98:18:59:48:84:ac:7a:47:17:57:a9:92:f2:6b:
         06:fd:a9:e1:53:0d:3a:7e:aa:f7:29:70:62:e5:c6:df:ca:83:
         9e:c8:0d:be:68:f3:73:fa:85:37:50:60:75:13:6a:0a:16:ae:
         f9:9f:57:4f:2a:1b:4c:3e:3d:e1:85:cb:6d:fc:cb:31:8a:28:
         47:80:dd:6c:fe:81:5e:b9:ef:aa:59:25:99:95:70:9c:b2:14:
         a1:3b:1e:18:88:91:f8:12:5e:72:a2:03:6a:c9:d2:f7:b3:e0:
         05:08:fb:a9:fe:5e:33:fe:32:ea:b4:4b:90:26:b9:81:9c:aa:
         2b:e9:f7:6e:a7:f0:ad:57:df:e2:4d:7e:ad:8d:98:e6:9f:f7:
         28:46:c2:c3:78:34:3d:e0:56:d7:33:eb:14:ed:64:4e:7d:21:
         7e:d6:4c:68:f3:62:11:2b:bc:90:cc:7d:5b:d3:81:1f:95:09:
         d3:2e:f1:13:fa:a1:a3:58:15:25:14:27:20:4f:33:f1:e2:25:
         35:a1:7f:c8:cf:70:ff:a0:60:78:29:e2:0c:1b:d1:20:cd:2d:
         b8:be:c4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:34:29 2026 by rpki-client