Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/f6g_YgQEWnlWIvPt_gcVzJFYlIw.mft
File:                     f6g_YgQEWnlWIvPt_gcVzJFYlIw.mft (raw, json)
Hash identifier:          2fC5T8Y6LS8FQCZniCdpztlUMkM+t6D0LsOrf+WvD2U=
Subject key identifier:   1D:5C:B6:70:FE:BB:F8:12:97:F6:4E:F2:45:EC:CB:33:45:8D:13:24
Authority key identifier: 7F:A8:3F:62:04:04:5A:79:56:22:F3:ED:FE:07:15:CC:91:58:94:8C
Certificate issuer:       /CN=A91A7D50/serialNumber=7FA83F6204045A795622F3EDFE0715CC9158948C
Certificate serial:       0479
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f6g_YgQEWnlWIvPt_gcVzJFYlIw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/f6g_YgQEWnlWIvPt_gcVzJFYlIw.mft
Manifest number:          0471
Signing time:             Tue 24 Mar 2026 23:46:42 +0000
Manifest this update:     Tue 24 Mar 2026 23:46:41 +0000
Manifest next update:     Tue 31 Mar 2026 23:46:41 +0000
Files and hashes:         1: f6g_YgQEWnlWIvPt_gcVzJFYlIw.crl (hash: ZHfmEXDQayT78WEL8+C2y81jvGQ8BMpOVPBRCrmMAMQ=)
                          2: 95EE2A18A8C511EC8F560C42C4F9AE02.roa (hash: SPo8ipAhW6lpjxioarNmGLZJVbEMsGo47uZSpSgTG/M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/f6g_YgQEWnlWIvPt_gcVzJFYlIw.crl
                          rsync://rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/f6g_YgQEWnlWIvPt_gcVzJFYlIw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f6g_YgQEWnlWIvPt_gcVzJFYlIw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:46:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1145 (0x479)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7D50, serialNumber=7FA83F6204045A795622F3EDFE0715CC9158948C
        Validity
            Not Before: Mar 24 23:46:41 2026 GMT
            Not After : Mar 31 23:46:41 2026 GMT
        Subject: CN=69c32262-314f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:53:6c:48:14:2b:63:e7:e5:d0:4e:2f:dc:5d:
                    1b:c0:af:e5:ec:c4:6d:33:c2:da:b6:b5:d9:04:04:
                    01:cc:2c:c2:a1:68:7b:86:f6:9d:0d:da:a5:c6:f8:
                    ce:2f:58:4c:6e:da:cc:d9:39:dc:f4:71:c9:4a:fa:
                    75:e8:c3:65:78:a3:b7:35:ad:c4:c0:ba:ee:32:07:
                    3d:81:42:b7:00:d3:d9:75:76:73:76:6e:76:d4:83:
                    b8:b1:e1:9a:de:05:83:24:d6:6f:a7:46:b7:47:e3:
                    13:6c:14:0d:07:39:cb:ed:be:d7:4b:22:7f:79:1d:
                    05:7a:3f:5a:83:61:db:2b:0d:3f:ea:5e:f2:1b:32:
                    7b:95:f2:b2:24:a6:52:98:f3:5a:2b:fb:4c:19:bc:
                    eb:70:4e:06:f5:09:27:dc:22:0d:51:0c:ec:a7:09:
                    c7:d9:11:18:95:67:ba:ab:31:a3:8e:2d:ea:67:98:
                    cb:8f:cd:49:e3:dd:d0:7e:0b:1d:cd:81:a6:1c:e4:
                    08:b6:f5:bd:bc:0e:00:47:d7:be:45:47:7a:3e:69:
                    16:85:08:9a:18:21:7d:15:7b:d0:73:38:08:60:fc:
                    e7:6c:96:5c:4e:e3:f3:3a:65:a9:a5:2b:50:37:4f:
                    db:ba:b0:74:bd:c3:20:c4:6d:5a:e6:21:87:1d:e4:
                    63:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:5C:B6:70:FE:BB:F8:12:97:F6:4E:F2:45:EC:CB:33:45:8D:13:24
            X509v3 Authority Key Identifier:
                keyid:7F:A8:3F:62:04:04:5A:79:56:22:F3:ED:FE:07:15:CC:91:58:94:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/f6g_YgQEWnlWIvPt_gcVzJFYlIw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f6g_YgQEWnlWIvPt_gcVzJFYlIw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/f6g_YgQEWnlWIvPt_gcVzJFYlIw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:84:c2:98:a6:ad:c1:a3:e0:9a:a3:8f:8b:ba:3a:66:05:0d:
         04:bb:b8:29:74:b6:d7:17:6c:a4:bb:c9:55:a0:ef:d3:cb:ed:
         22:39:df:84:b7:44:be:9d:0b:03:62:d6:ef:67:47:14:7a:03:
         14:23:9b:2b:33:6a:85:4b:e7:36:ca:0e:fd:00:d6:18:6c:ac:
         66:0d:91:13:ae:73:29:14:4d:14:8c:79:ce:24:4d:d5:7e:bc:
         2c:01:b0:d4:52:23:a0:2a:a1:8c:65:0f:e6:da:a1:7c:1d:b3:
         34:4f:3f:6c:f8:0b:b5:3b:18:bc:ac:d4:0f:b7:58:cc:7e:2a:
         ea:12:39:d9:a2:a9:82:e0:ab:59:82:b3:8b:41:90:b6:68:40:
         38:03:4f:7c:49:1f:68:7b:df:80:74:34:45:1f:c2:78:f8:78:
         66:00:4c:9c:ca:e8:2f:d8:d0:e7:16:c6:4f:06:a1:8b:d2:1d:
         dc:ec:a7:ca:3e:63:2a:cd:1f:24:7a:26:61:68:1e:63:76:59:
         53:25:ba:8f:5a:06:aa:ec:ab:de:ff:cb:17:8b:9f:79:b7:22:
         be:ee:ad:7f:45:91:58:ae:c9:44:c8:44:0a:be:98:16:e9:52:
         28:43:ce:60:94:22:2d:67:3a:79:c1:59:c0:d2:cd:10:a7:cf:
         fd:8d:e8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:27:47 2026 by rpki-client