Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft
File:                     6FKljehxn4vGvWSUmFS0dEe4nN4.mft (raw, json)
Hash identifier:          ibwmHYOU6wwjEC8w8qwsgv2J5RHkvl5vSBX2sc4Wvx4=
Subject key identifier:   16:67:69:18:5B:08:C7:BB:6B:72:8A:C6:E9:DB:B3:5C:A4:89:A6:C3
Authority key identifier: E8:52:A5:8D:E8:71:9F:8B:C6:BD:64:94:98:54:B4:74:47:B8:9C:DE
Certificate issuer:       /CN=A918F862/serialNumber=E852A58DE8719F8BC6BD64949854B47447B89CDE
Certificate serial:       121B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft
Manifest number:          1209
Signing time:             Wed 22 Jul 2026 17:16:15 +0000
Manifest this update:     Wed 22 Jul 2026 17:16:15 +0000
Manifest next update:     Wed 29 Jul 2026 17:16:15 +0000
Files and hashes:         1: 6FKljehxn4vGvWSUmFS0dEe4nN4.crl (hash: YqHFzfoA0ZAS0R0hZSpRfk4dKl0ZVij2Oe/+fEzSsWo=)
                          2: D1D7F9AE0FF911E9B45E3B10C4F9AE02.roa (hash: Q+MByc8T2XeogXXlhjKWwZOofAxDdME7Hv2flN/h3ts=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.crl
                          rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:16:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4635 (0x121b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F862, serialNumber=E852A58DE8719F8BC6BD64949854B47447B89CDE
        Validity
            Not Before: Jul 22 17:16:15 2026 GMT
            Not After : Jul 29 17:16:15 2026 GMT
        Subject: CN=6a60fadf-00d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e5:f9:91:c9:01:c5:f5:7a:e9:7f:70:3c:a9:
                    f6:98:8a:2f:f3:21:9d:e4:3c:21:32:13:de:9f:57:
                    28:01:1a:9f:5c:6d:0b:88:f3:95:2a:b7:41:6e:51:
                    0d:54:a0:77:b2:47:b7:11:e2:98:bb:14:9b:b4:ed:
                    9f:b2:7e:80:dd:c9:39:34:56:c9:cc:46:17:aa:f5:
                    27:d7:2a:b0:7e:ad:fd:cf:73:48:c3:79:ab:c9:c6:
                    15:bf:d1:07:11:cf:f6:09:ba:8a:d0:df:1f:5a:05:
                    f9:19:14:6e:64:d1:c8:7b:cb:96:3f:c8:2e:92:39:
                    7c:a0:ae:0d:0b:e2:82:47:03:95:a8:5c:f1:01:fe:
                    15:4b:5a:21:42:08:0e:ef:af:f5:54:dc:81:8a:70:
                    d4:50:66:af:f5:04:cf:20:48:86:0e:3c:aa:fe:21:
                    a3:42:d2:cd:c5:87:34:91:2f:7a:0a:93:58:fe:b1:
                    5e:38:52:7c:70:f7:31:36:4e:c7:b9:ab:04:cc:e6:
                    43:6a:f9:f7:a2:f3:8a:64:65:68:3f:dc:18:9e:b9:
                    59:c7:12:40:f5:cf:62:d4:8f:57:5d:63:09:02:3b:
                    1e:0a:8b:07:67:ed:a7:94:ab:41:9e:8c:c1:ca:1d:
                    20:57:06:a3:54:f8:cb:3b:f2:8f:a2:bf:50:23:d3:
                    70:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:67:69:18:5B:08:C7:BB:6B:72:8A:C6:E9:DB:B3:5C:A4:89:A6:C3
            X509v3 Authority Key Identifier:
                keyid:E8:52:A5:8D:E8:71:9F:8B:C6:BD:64:94:98:54:B4:74:47:B8:9C:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:17:e5:cb:f6:79:55:d1:96:be:e4:1d:eb:8e:de:f8:e5:d2:
         a4:ec:9b:0e:6e:91:c5:69:91:a6:5b:62:04:6e:a5:87:75:44:
         fa:fc:f3:c1:22:17:ad:ac:7a:26:c9:2a:07:e5:25:a7:c8:b3:
         5e:f0:bf:57:c1:c0:5b:3d:92:36:d2:39:d6:f6:3a:9c:d9:49:
         99:a8:50:55:18:7a:99:ee:9b:02:10:ea:8c:d9:c4:9f:e4:75:
         0b:83:a9:5d:3a:eb:e4:af:35:cd:ff:17:f9:b1:de:d9:41:d9:
         07:30:09:d3:e2:ef:16:32:36:e0:15:0d:e0:21:e9:cb:7f:dc:
         7b:97:ca:85:e8:7e:3f:67:be:a6:75:39:63:e5:6d:de:50:87:
         2b:42:29:a8:2e:2f:1e:f9:51:61:0b:a7:f2:37:d2:0a:50:a8:
         59:1e:2c:2c:be:a9:69:7e:5c:0c:bf:93:77:61:1b:bd:53:30:
         09:b8:1c:a7:6a:e1:41:e6:c9:d5:dc:16:c5:26:39:82:51:1b:
         35:e6:a4:6e:45:9a:07:48:42:96:5c:71:98:82:2f:28:75:d0:
         51:0d:fb:12:23:d7:19:f7:b6:a6:66:50:99:8a:2f:f6:c0:39:
         33:1c:04:54:fd:d6:d5:38:71:bb:09:fd:c9:55:95:32:1d:60:
         72:df:6a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:42:37 2026 by rpki-client