Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.mft
File:                     N6Zf20DoxlmxflAA-ommVoCXbVs.mft (raw, json)
Hash identifier:          0jttBT+CQgQj37aVdlF5EOa67GX6LK227HTnnwQypCg=
Subject key identifier:   8E:50:3C:32:4B:15:A5:0B:5C:AC:D0:52:8C:B5:CD:16:B7:55:3D:F2
Authority key identifier: 37:A6:5F:DB:40:E8:C6:59:B1:7E:50:00:FA:89:A6:56:80:97:6D:5B
Certificate issuer:       /CN=A91A6F56/serialNumber=37A65FDB40E8C659B17E5000FA89A65680976D5B
Certificate serial:       A0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N6Zf20DoxlmxflAA-ommVoCXbVs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.mft
Manifest number:          9A
Signing time:             Mon 11 May 2026 07:38:00 +0000
Manifest this update:     Mon 11 May 2026 07:37:59 +0000
Manifest next update:     Mon 18 May 2026 07:37:59 +0000
Files and hashes:         1: N6Zf20DoxlmxflAA-ommVoCXbVs.crl (hash: BqJyEWG1f8MzI5ooVy3AmttB/Htt9/Lvr17sUyyr5V8=)
                          2: 482874AE710E11F0B4CBA430C4F9AE02.roa (hash: Enrr3cuFwRAqoDocsM8n82Zm7sQ1w4sn1Dd/0z7i8QU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.crl
                          rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N6Zf20DoxlmxflAA-ommVoCXbVs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:37:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6F56, serialNumber=37A65FDB40E8C659B17E5000FA89A65680976D5B
        Validity
            Not Before: May 11 07:37:59 2026 GMT
            Not After : May 18 07:37:59 2026 GMT
        Subject: CN=6a018758-0e94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:95:9e:1e:a0:20:da:0f:54:90:19:cf:dc:c7:
                    fd:dd:1a:b5:58:28:be:35:48:97:eb:aa:e7:c0:62:
                    92:97:42:62:17:ec:86:71:51:48:9d:36:12:da:b2:
                    2d:81:f9:fb:13:9b:b4:b7:2b:5f:58:08:37:c6:36:
                    82:8a:da:af:5a:e4:c8:9b:63:ae:35:65:51:be:7e:
                    d0:9a:dd:01:cb:41:08:76:17:02:24:bc:a4:25:cf:
                    9c:d2:06:d6:17:1f:2b:21:16:49:da:90:9e:6c:29:
                    4e:28:89:6d:49:50:52:35:23:3a:22:23:2b:61:2c:
                    ce:7b:de:09:0e:91:9a:d4:60:ec:19:8f:5d:45:5b:
                    bc:10:28:1c:27:11:b6:b9:4a:ba:c3:36:75:a9:4e:
                    37:a8:78:92:b6:a9:bd:a6:f7:df:04:32:88:a6:3f:
                    6c:d5:a0:e7:45:6c:21:63:f1:af:0e:90:65:53:be:
                    a9:af:52:42:47:4f:20:f3:8f:df:e3:dc:49:c5:91:
                    46:61:7a:99:ac:90:83:d1:73:e0:ac:9f:4f:7a:8a:
                    a8:7a:10:fa:81:d0:c8:e9:95:b3:94:d0:fc:5c:ba:
                    a4:d2:14:31:ca:3d:6c:4c:14:59:3d:6e:b1:54:16:
                    18:ce:bf:fd:8f:5f:f1:e4:0a:97:f2:b1:4f:02:f5:
                    63:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:50:3C:32:4B:15:A5:0B:5C:AC:D0:52:8C:B5:CD:16:B7:55:3D:F2
            X509v3 Authority Key Identifier:
                keyid:37:A6:5F:DB:40:E8:C6:59:B1:7E:50:00:FA:89:A6:56:80:97:6D:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N6Zf20DoxlmxflAA-ommVoCXbVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:80:af:38:22:f1:9d:ec:0b:61:42:9c:d1:0b:b1:21:01:a0:
         95:22:71:09:ac:35:24:43:47:60:27:a3:ca:ec:52:b0:d1:0f:
         21:aa:e0:d1:d4:4b:32:85:2b:8e:b6:2f:97:35:b3:9c:de:57:
         0a:9c:93:a1:0e:33:f7:77:d7:5a:59:99:56:f3:ba:bd:31:d4:
         fe:5b:9f:fd:22:65:df:2c:58:23:d7:0c:f6:08:c3:84:b3:b8:
         3b:54:b3:ea:0b:f6:8a:bd:92:be:5d:f5:90:82:1f:8f:8d:ac:
         20:20:f3:3f:10:b8:29:1d:84:7c:35:fa:9d:1a:15:b3:e9:b4:
         4a:e7:c6:6d:3b:88:28:a2:e8:81:c4:33:fc:ec:50:cd:40:d8:
         38:2b:ca:07:fb:94:31:2a:df:aa:f2:42:48:8c:b6:1e:08:29:
         ba:c0:c4:b6:71:b7:0b:46:cf:41:97:9e:1f:9f:c6:e9:d1:d5:
         e2:f4:5c:7f:09:17:9f:51:79:2d:68:ca:0f:29:dc:53:bb:9d:
         65:13:aa:35:30:66:ab:b2:a7:3d:38:47:cc:ba:88:d2:3b:df:
         59:58:90:5a:e9:2a:71:44:d7:3a:ac:b4:af:d6:b0:49:67:87:
         b6:f5:0b:1f:96:0e:0c:b0:92:76:c6:60:74:91:35:74:15:bf:
         5b:81:70:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:52:00 2026 by rpki-client