Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B59F/48156224C8F211F082FCD877C4F9AE02/6GsqCBtM_KgMqL3GYUjJVvp47nQ.mft
File:                     6GsqCBtM_KgMqL3GYUjJVvp47nQ.mft (raw, json)
Hash identifier:          DaImlSIbEDPbx9ppNVbHNH41/gI7yjzDXiXD1DtUVrI=
Subject key identifier:   21:C0:9C:EF:5E:55:01:A1:3E:F9:D6:DD:07:6F:AF:01:3E:9F:AD:40
Authority key identifier: E8:6B:2A:08:1B:4C:FC:A8:0C:A8:BD:C6:61:48:C9:56:FA:78:EE:74
Certificate issuer:       /CN=A919B59F/serialNumber=E86B2A081B4CFCA80CA8BDC66148C956FA78EE74
Certificate serial:       42
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6GsqCBtM_KgMqL3GYUjJVvp47nQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B59F/48156224C8F211F082FCD877C4F9AE02/6GsqCBtM_KgMqL3GYUjJVvp47nQ.mft
Manifest number:          40
Signing time:             Wed 25 Mar 2026 07:37:28 +0000
Manifest this update:     Wed 25 Mar 2026 07:37:28 +0000
Manifest next update:     Wed 01 Apr 2026 07:37:28 +0000
Files and hashes:         1: 6GsqCBtM_KgMqL3GYUjJVvp47nQ.crl (hash: oaAyuisa8goPDp5MDXj08XDZecQKFoAWvqA9b5RbtFw=)
                          2: 44AC4920C8F411F0B2A04129C4F9AE02.roa (hash: ZCYK+OMfucCWSUmvJyn+aEP/3WxYDb55XSzl4bwuHVs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B59F/48156224C8F211F082FCD877C4F9AE02/6GsqCBtM_KgMqL3GYUjJVvp47nQ.crl
                          rsync://rpki.apnic.net/member_repository/A919B59F/48156224C8F211F082FCD877C4F9AE02/6GsqCBtM_KgMqL3GYUjJVvp47nQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6GsqCBtM_KgMqL3GYUjJVvp47nQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:37:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B59F, serialNumber=E86B2A081B4CFCA80CA8BDC66148C956FA78EE74
        Validity
            Not Before: Mar 25 07:37:28 2026 GMT
            Not After : Apr  1 07:37:28 2026 GMT
        Subject: CN=69c390b8-c428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f4:c3:4e:d6:64:18:76:93:6e:2f:2f:77:52:
                    3c:d3:5b:df:61:70:91:06:17:16:d0:16:d9:f6:30:
                    31:34:a7:73:18:7c:57:b6:68:08:96:13:15:62:08:
                    3f:35:98:50:57:1b:c7:17:91:78:82:0b:49:d9:7d:
                    3e:4f:4f:25:f6:4d:92:71:f1:b0:61:bb:c7:1b:37:
                    89:82:85:10:ab:26:e5:7f:75:b5:5f:dc:d8:a3:fe:
                    c6:dd:bb:a6:85:bd:0a:ce:5d:14:e9:49:85:bd:8e:
                    5c:6e:99:d8:84:a1:6c:bf:d4:56:b6:16:f4:45:f5:
                    bd:1b:1f:5e:e8:27:fd:94:0e:c9:a1:a8:f4:14:44:
                    24:37:4a:26:b6:75:2b:ac:cb:fc:cd:e9:b6:2b:fe:
                    2b:e2:8d:b3:54:ae:5e:cf:dd:f0:7c:ed:0f:40:0e:
                    64:fa:67:c0:43:dd:71:c4:48:01:ca:d8:1b:50:ff:
                    6c:b4:ea:6c:8d:e7:fa:d3:c0:01:43:18:92:cd:8d:
                    4d:8e:9c:a1:42:00:44:db:c8:56:c5:30:ec:68:a5:
                    0e:6c:21:1f:e6:6b:86:75:b7:43:49:e8:b4:d1:6d:
                    3b:18:e7:b0:cc:7a:2d:33:23:94:bb:5a:f3:80:44:
                    f9:94:94:17:c4:1a:0a:f8:c1:59:99:62:8d:90:06:
                    a0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C0:9C:EF:5E:55:01:A1:3E:F9:D6:DD:07:6F:AF:01:3E:9F:AD:40
            X509v3 Authority Key Identifier:
                keyid:E8:6B:2A:08:1B:4C:FC:A8:0C:A8:BD:C6:61:48:C9:56:FA:78:EE:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B59F/48156224C8F211F082FCD877C4F9AE02/6GsqCBtM_KgMqL3GYUjJVvp47nQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6GsqCBtM_KgMqL3GYUjJVvp47nQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B59F/48156224C8F211F082FCD877C4F9AE02/6GsqCBtM_KgMqL3GYUjJVvp47nQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:58:58:f9:fd:02:22:1b:27:ff:66:7a:8d:e3:83:f6:ab:9e:
         00:a6:b7:a4:0a:e6:a9:74:d6:a8:70:52:ed:6d:b8:98:67:e5:
         4d:d6:e3:ab:28:8a:28:c0:31:99:c2:33:52:44:44:40:3a:f7:
         62:40:f7:7d:2b:d1:64:03:3b:d9:61:cb:e6:c7:56:af:96:ef:
         cf:70:08:b5:b0:19:29:63:5b:69:53:d9:7c:a8:d1:f8:bf:d5:
         d1:e6:47:df:f4:b6:48:3d:f1:e8:6a:be:79:fa:e6:6f:22:83:
         32:cd:a4:a0:ea:65:8d:a4:e0:75:17:e1:d5:38:a8:76:20:74:
         2b:a8:88:76:cd:45:a0:91:b8:0f:0e:cb:35:4d:70:73:dc:8e:
         23:e9:42:04:e7:19:15:57:6d:ac:43:e7:35:aa:37:66:a3:af:
         cb:28:5f:f6:c0:d2:9c:36:27:e3:97:3e:7c:95:ef:6b:e6:d1:
         45:ae:3d:9c:24:2d:5b:ea:63:47:24:f7:da:57:f9:0c:e1:6f:
         f0:13:77:81:25:41:4c:8e:7e:b5:3e:13:ad:3a:a0:98:8d:aa:
         a5:7c:47:f7:4e:f3:53:98:4e:23:5e:e4:ad:81:46:2e:6b:c7:
         61:51:e6:b3:8f:79:e8:ac:b3:b0:b9:df:a2:9f:66:f5:f0:16:
         89:70:52:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:45:55 2026 by rpki-client