Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197650/D2B615700D9611F1942361D32B3D8C67/6B98qs6m95z87OFlMxRpL94sTpQ.mft
File:                     6B98qs6m95z87OFlMxRpL94sTpQ.mft (raw, json)
Hash identifier:          K+iz3hnqSI+clpaj3qHmR3QkQOIu+EWRbCz6M7KqXlI=
Subject key identifier:   E9:A0:86:92:68:10:C4:38:7E:2D:6F:14:55:66:D2:19:5F:89:1A:F7
Authority key identifier: E8:1F:7C:AA:CE:A6:F7:9C:FC:EC:E1:65:33:14:69:2F:DE:2C:4E:94
Certificate issuer:       /CN=A9197650/serialNumber=E81F7CAACEA6F79CFCECE1653314692FDE2C4E94
Certificate serial:       1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6B98qs6m95z87OFlMxRpL94sTpQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197650/D2B615700D9611F1942361D32B3D8C67/6B98qs6m95z87OFlMxRpL94sTpQ.mft
Manifest number:          16
Signing time:             Wed 25 Mar 2026 08:12:25 +0000
Manifest this update:     Wed 25 Mar 2026 08:12:24 +0000
Manifest next update:     Wed 01 Apr 2026 08:12:24 +0000
Files and hashes:         1: 6B98qs6m95z87OFlMxRpL94sTpQ.crl (hash: X7M02wye2B85KUz4kVovS3Z2oSRyD/SdsFYWpSEpdWk=)
                          2: F1550AF80D9711F198E5D2412C3D8C67.roa (hash: 3cG3KuaJ63N0g/ucQNpVQLysGS2l0hrNaxx97LdNuPU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197650/D2B615700D9611F1942361D32B3D8C67/6B98qs6m95z87OFlMxRpL94sTpQ.crl
                          rsync://rpki.apnic.net/member_repository/A9197650/D2B615700D9611F1942361D32B3D8C67/6B98qs6m95z87OFlMxRpL94sTpQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6B98qs6m95z87OFlMxRpL94sTpQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:12:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197650, serialNumber=E81F7CAACEA6F79CFCECE1653314692FDE2C4E94
        Validity
            Not Before: Mar 25 08:12:24 2026 GMT
            Not After : Apr  1 08:12:24 2026 GMT
        Subject: CN=69c398e9-6a38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ec:57:37:ec:43:58:c8:de:55:45:3c:8b:c9:
                    66:bf:18:6e:32:e7:ab:75:5f:e5:d5:88:f0:75:49:
                    54:e9:c0:7d:c6:eb:0f:c2:45:0d:9e:5a:ba:04:d8:
                    cd:05:7b:8d:41:37:06:67:f0:a9:0b:1f:98:0a:d0:
                    d1:7b:92:ca:17:5e:d4:f6:9b:52:59:78:fd:e5:4a:
                    93:03:07:cf:2c:4c:de:c0:22:b5:2a:b9:aa:99:59:
                    26:0e:d6:ce:d4:84:29:fd:c6:ec:60:89:6b:7f:f5:
                    f6:8b:63:f3:8d:fc:9d:31:59:41:9c:c2:75:ba:21:
                    29:5a:63:f2:ff:eb:49:db:19:be:0a:3c:73:ba:e6:
                    5c:97:fe:30:21:83:d7:c3:c9:3e:5a:8e:c3:b3:09:
                    f3:ee:e6:c6:47:1d:6a:c9:fc:71:49:c0:c9:ee:ff:
                    07:36:6f:11:d4:c6:6a:41:78:2e:47:0d:6d:67:7d:
                    9d:36:63:3b:3b:3a:18:c1:38:cb:74:ee:8c:66:b8:
                    30:ca:a2:03:22:5f:42:a9:80:4b:27:cd:e0:88:93:
                    77:89:0f:ff:bf:94:5b:88:6a:d1:e7:a9:78:3d:09:
                    91:dc:8a:b3:ab:d9:2f:e1:4c:c2:cc:d1:72:c3:12:
                    04:e9:fb:01:f7:b2:66:3d:da:57:db:e3:2c:5c:93:
                    a1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A0:86:92:68:10:C4:38:7E:2D:6F:14:55:66:D2:19:5F:89:1A:F7
            X509v3 Authority Key Identifier:
                keyid:E8:1F:7C:AA:CE:A6:F7:9C:FC:EC:E1:65:33:14:69:2F:DE:2C:4E:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197650/D2B615700D9611F1942361D32B3D8C67/6B98qs6m95z87OFlMxRpL94sTpQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6B98qs6m95z87OFlMxRpL94sTpQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197650/D2B615700D9611F1942361D32B3D8C67/6B98qs6m95z87OFlMxRpL94sTpQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ce:72:43:a2:17:b9:0d:57:81:31:40:99:a4:6c:0c:d7:36:
         a7:c3:78:39:77:de:88:4a:77:34:31:4d:ce:3b:a2:4c:09:ef:
         5e:51:fd:64:9e:98:ca:3a:2b:76:44:95:85:fa:31:50:99:07:
         97:63:cd:ee:3d:26:61:76:32:c3:8e:ec:70:15:60:75:88:d7:
         9b:3a:39:c1:73:a1:bc:4c:26:1a:2a:87:21:3e:0c:b0:04:e3:
         e7:be:ca:cb:80:13:6b:1d:63:24:2b:94:cc:86:89:8e:84:51:
         b1:fe:c7:a9:cc:1e:ed:8c:74:3b:ab:d1:b5:ba:a7:f4:c0:eb:
         d6:e6:29:d4:26:51:fd:63:f1:19:7d:08:b1:08:b7:18:eb:c5:
         83:49:9e:d2:39:a1:e1:6f:8c:b5:4d:4f:3d:bc:08:74:11:1f:
         1a:8c:c1:f4:21:ab:8a:9f:80:07:14:f9:0f:96:8e:c4:dd:22:
         ad:62:77:bb:82:8d:ad:f8:53:40:a5:86:c8:9d:37:86:ab:43:
         af:cb:fe:f1:61:1c:44:e9:e4:ba:ee:7d:3b:52:4a:11:f4:7e:
         d1:34:39:4b:60:0d:a3:42:bb:f8:16:09:4a:ba:26:41:f4:3c:
         27:37:c4:34:66:f1:85:29:ca:d3:e7:2f:4c:2d:2c:73:6e:3d:
         72:00:84:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:33 2026 by rpki-client