Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B18B5/94026F447E5311F18C5BDC2F85A30FBC/6iR100bqLYkBRNhvdfF6f7MnMaU.mft
File:                     6iR100bqLYkBRNhvdfF6f7MnMaU.mft (raw, json)
Hash identifier:          0mWIvSar6AJebAFwaGtR0QBYQI0hzBEzmf0O6RWAMRw=
Subject key identifier:   FA:04:38:A5:20:6F:C8:D9:CB:D4:C7:38:69:FE:E5:AB:39:79:D3:C9
Authority key identifier: EA:24:75:D3:46:EA:2D:89:01:44:D8:6F:75:F1:7A:7F:B3:27:31:A5
Certificate issuer:       /CN=A91B18B5/serialNumber=EA2475D346EA2D890144D86F75F17A7FB32731A5
Certificate serial:       08
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6iR100bqLYkBRNhvdfF6f7MnMaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B18B5/94026F447E5311F18C5BDC2F85A30FBC/6iR100bqLYkBRNhvdfF6f7MnMaU.mft
Manifest number:          07
Signing time:             Thu 23 Jul 2026 11:17:11 +0000
Manifest this update:     Thu 23 Jul 2026 11:17:11 +0000
Manifest next update:     Thu 30 Jul 2026 11:17:11 +0000
Files and hashes:         1: 6iR100bqLYkBRNhvdfF6f7MnMaU.crl (hash: yOuWHg8HrW/0FtvzUfhXYt8d81Hzb72Pt0xV2F5Uf3A=)
                          2: 60C2D3747E5511F18793AB4A85A30FBC.roa (hash: xEOFEWdyCaSag6v7rSqAM6JAdpfpEjBwIonAWfJZXtk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B18B5/94026F447E5311F18C5BDC2F85A30FBC/6iR100bqLYkBRNhvdfF6f7MnMaU.crl
                          rsync://rpki.apnic.net/member_repository/A91B18B5/94026F447E5311F18C5BDC2F85A30FBC/6iR100bqLYkBRNhvdfF6f7MnMaU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6iR100bqLYkBRNhvdfF6f7MnMaU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:17:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B18B5, serialNumber=EA2475D346EA2D890144D86F75F17A7FB32731A5
        Validity
            Not Before: Jul 23 11:17:11 2026 GMT
            Not After : Jul 30 11:17:11 2026 GMT
        Subject: CN=6a61f837-3ef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:41:7b:b6:df:f6:31:a8:88:26:b9:8c:49:cc:
                    36:bc:18:68:41:a1:c4:f3:82:2a:7e:b5:d0:d7:c3:
                    4c:f5:c6:f5:cb:2a:cf:d2:fb:8a:fe:c4:81:b0:c0:
                    17:07:1e:e8:32:36:26:9f:e4:d9:51:f4:ae:5d:62:
                    fd:4c:4e:2b:3d:ca:dc:88:a7:54:0e:97:ae:3c:4b:
                    e8:8a:3d:bb:c9:c6:09:5f:d4:2b:c4:0b:f9:a2:41:
                    b8:f8:be:36:e2:db:13:ae:f7:80:e3:11:fc:c8:ac:
                    74:d6:15:43:31:be:cd:ec:20:a8:b1:e6:5d:8d:5d:
                    c1:e2:15:4d:0b:e2:ed:0a:af:f8:d8:c4:71:24:2d:
                    67:42:dd:66:2e:b7:1c:58:50:de:f6:1a:31:eb:7f:
                    b3:6d:61:92:93:7f:5a:a8:cd:5a:62:14:b1:ac:f7:
                    08:7d:bb:fd:2a:ee:d8:2d:b4:e0:47:91:ed:87:3a:
                    d2:48:98:d8:65:b9:eb:67:12:e7:bd:97:e5:05:21:
                    78:bf:05:72:a6:3a:7b:bc:6e:c4:d8:d9:20:e4:69:
                    f0:2f:45:d0:6e:ef:65:6a:f6:60:22:53:58:97:6a:
                    2e:b9:f7:94:60:19:27:86:21:a7:0b:1a:75:c7:87:
                    00:78:36:6a:3a:30:98:83:fc:49:17:cc:a2:db:30:
                    87:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:04:38:A5:20:6F:C8:D9:CB:D4:C7:38:69:FE:E5:AB:39:79:D3:C9
            X509v3 Authority Key Identifier:
                keyid:EA:24:75:D3:46:EA:2D:89:01:44:D8:6F:75:F1:7A:7F:B3:27:31:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B18B5/94026F447E5311F18C5BDC2F85A30FBC/6iR100bqLYkBRNhvdfF6f7MnMaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6iR100bqLYkBRNhvdfF6f7MnMaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B18B5/94026F447E5311F18C5BDC2F85A30FBC/6iR100bqLYkBRNhvdfF6f7MnMaU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:57:14:6b:1b:a5:c8:15:03:c6:b9:1f:2e:57:e7:07:22:5e:
         b9:5a:c4:ff:b8:d9:e2:e8:9e:49:f0:61:a4:bb:0c:83:cb:96:
         e6:2e:b1:d0:c1:4f:dc:57:c1:df:9d:73:09:42:2a:9a:bb:3f:
         62:d9:11:af:f6:da:cb:63:b6:c5:d2:8a:c7:53:f3:5f:c0:43:
         3c:58:4b:1a:7a:5a:cb:e2:c9:99:ad:88:2c:51:94:26:fd:ea:
         57:15:fb:8e:3a:cc:d0:d0:28:ca:dc:ca:96:e6:df:36:05:36:
         09:32:79:ab:52:d1:33:a7:71:38:c0:a9:df:01:fb:a6:2a:59:
         32:32:6a:33:6a:de:0f:c5:16:aa:46:a4:5b:c2:8b:fa:37:c8:
         42:fc:1f:4a:bc:8f:1f:03:d9:9e:d3:ce:11:3c:35:d3:d6:0c:
         f6:e7:88:ad:97:94:7f:91:a2:35:89:c9:f7:40:5c:71:cc:27:
         bc:33:7c:65:f6:be:e1:9e:a7:06:0b:9c:b6:b3:50:bb:d5:12:
         a7:45:bf:a2:70:99:d3:8b:da:18:a8:c5:5d:60:b2:67:03:90:
         86:72:66:ee:b1:f9:f6:8b:59:cc:2d:69:fa:04:a8:39:cf:45:
         99:ae:da:cf:20:e7:26:b3:a6:f1:45:56:62:0d:10:6a:d0:ed:
         1b:2c:47:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:07:22 2026 by rpki-client