Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft
File:                     6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft (raw, json)
Hash identifier:          X0+BKVJUyafbBEwev6QcDix5FHauwXGqpFxtsP7z3Do=
Subject key identifier:   4F:14:24:7B:A8:45:A6:A0:82:5B:9E:2C:A3:85:2E:E8:41:8E:C7:69
Authority key identifier: EB:2B:0C:6B:9C:8B:7F:09:47:71:82:67:46:AF:7D:46:0E:DC:47:AA
Certificate issuer:       /CN=A91A13C2/serialNumber=EB2B0C6B9C8B7F094771826746AF7D460EDC47AA
Certificate serial:       0560
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ysMa5yLfwlHcYJnRq99Rg7cR6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft
Manifest number:          0557
Signing time:             Tue 24 Mar 2026 23:06:35 +0000
Manifest this update:     Tue 24 Mar 2026 23:06:34 +0000
Manifest next update:     Tue 31 Mar 2026 23:06:34 +0000
Files and hashes:         1: 6ysMa5yLfwlHcYJnRq99Rg7cR6o.crl (hash: j6fCypb3m1bhlCk3Csyozg7NXU2ONC7bHkPsnNjeeAE=)
                          2: E11714EE89E711F0B91AE62DC4F9AE02.roa (hash: OIPAl0Bqgfl85H4MlL10ohXTIT0hCHN5qv5/jcubhwc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.crl
                          rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ysMa5yLfwlHcYJnRq99Rg7cR6o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1376 (0x560)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A13C2, serialNumber=EB2B0C6B9C8B7F094771826746AF7D460EDC47AA
        Validity
            Not Before: Mar 24 23:06:34 2026 GMT
            Not After : Mar 31 23:06:34 2026 GMT
        Subject: CN=69c318fa-d6a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b9:87:ab:9e:78:9a:10:e6:08:fa:16:ef:16:
                    fc:a3:15:13:d2:d0:73:4f:70:38:81:1d:fa:73:7f:
                    18:e0:cf:ed:a8:39:93:16:9b:b1:fd:62:2a:9f:b8:
                    8e:3d:4a:7b:72:92:3a:c1:15:d6:c5:e9:38:aa:27:
                    62:c4:02:75:c0:78:59:8d:62:09:31:17:1e:ce:5d:
                    f3:8a:75:dc:72:3f:37:68:d9:fa:6e:5e:21:58:8e:
                    34:33:27:cb:85:57:9e:28:37:dd:76:d1:b0:47:22:
                    46:bb:99:94:5d:d1:4c:e9:55:6a:07:cd:e5:8f:ab:
                    f2:d3:a7:74:bd:05:19:65:cd:6b:2a:33:e5:bd:53:
                    69:06:6f:df:e5:4b:24:cb:51:7e:10:00:3d:71:2a:
                    d2:39:d4:21:35:9a:e0:96:db:0c:9b:ec:d4:27:09:
                    ed:9c:ec:16:aa:f3:c7:b5:c2:a8:3a:0d:94:d4:23:
                    09:e6:e9:c0:ee:e1:6f:07:3e:6c:c6:ec:c2:7e:f6:
                    68:28:6f:a3:95:3d:12:e8:09:86:4a:fd:6e:78:93:
                    32:02:be:d2:f5:08:c9:7a:12:2e:57:ac:3c:c8:01:
                    67:50:1a:3d:35:3f:90:fb:a0:bc:ba:b4:9e:e8:3e:
                    f2:6e:4b:72:79:37:bc:1d:5e:36:7f:27:08:1d:2e:
                    64:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:14:24:7B:A8:45:A6:A0:82:5B:9E:2C:A3:85:2E:E8:41:8E:C7:69
            X509v3 Authority Key Identifier:
                keyid:EB:2B:0C:6B:9C:8B:7F:09:47:71:82:67:46:AF:7D:46:0E:DC:47:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ysMa5yLfwlHcYJnRq99Rg7cR6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:dd:ac:5d:9c:0c:75:6d:f7:19:67:96:2d:80:2f:ed:e1:ab:
         4f:f2:4d:a5:e8:10:14:23:89:ed:0d:8d:3d:6d:2f:e7:93:93:
         b9:41:10:58:da:df:af:f0:d5:2c:c2:cf:1c:85:66:a7:44:43:
         e9:2a:98:42:76:36:b3:77:63:9e:0f:a6:f5:46:f2:ed:1e:2f:
         3d:a8:69:76:6e:de:83:90:4d:37:23:cf:ef:76:0a:6d:a9:c8:
         f1:19:23:f7:dd:b6:63:4b:c2:69:20:dd:9c:dd:1c:7a:e5:ab:
         d5:8d:12:a7:13:0b:af:3a:a3:03:b3:29:8d:0e:70:b9:e8:40:
         11:29:69:3b:0c:58:78:be:7b:76:d4:08:91:c3:25:0a:37:d8:
         78:55:91:e3:bf:37:ed:57:bd:bc:5f:29:e6:78:fa:16:31:fd:
         e2:ed:9f:57:2a:4e:bd:f8:be:93:9c:9c:dd:2b:6c:02:e1:94:
         ce:cc:9e:a7:0b:0f:2e:99:b0:57:cb:ad:f8:32:e9:df:05:9e:
         a4:b5:40:83:97:17:a7:d8:a6:90:db:8a:37:be:17:fd:db:5d:
         7a:78:65:42:7e:98:a3:20:19:da:b1:22:14:08:5e:01:54:64:
         c2:85:0e:d4:01:85:87:5d:bc:89:a1:99:8f:78:c0:88:23:4d:
         9e:40:b7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:14 2026 by rpki-client