Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft
File:                     6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft (raw, json)
Hash identifier:          9dziHThINEvE+ctnwAkUwsVrKb1eXfNenR15W6UTo2c=
Subject key identifier:   1B:0C:23:92:85:FC:B8:9B:62:E3:AA:F8:17:89:4B:B4:C9:87:ED:B3
Authority key identifier: E9:F2:CE:48:3F:1B:06:D2:9D:5E:A2:AB:E3:75:BD:1D:22:A9:E1:C4
Certificate issuer:       /CN=A91C68AD/serialNumber=E9F2CE483F1B06D29D5EA2ABE375BD1D22A9E1C4
Certificate serial:       0135
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft
Manifest number:          012D
Signing time:             Mon 11 May 2026 05:40:26 +0000
Manifest this update:     Mon 11 May 2026 05:40:25 +0000
Manifest next update:     Mon 18 May 2026 05:40:25 +0000
Files and hashes:         1: 6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl (hash: YtELoGFt8ulTzBGUWCE3xeQX2kQWvx0PCRodY/t1hsg=)
                          2: FC3E29FC85E111EFB365E459C4F9AE02.roa (hash: VOtKNjMmkgJqiloUEhTwsaTLIqFH0cNEwhb31cZXP9s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 05:40:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 309 (0x135)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C68AD, serialNumber=E9F2CE483F1B06D29D5EA2ABE375BD1D22A9E1C4
        Validity
            Not Before: May 11 05:40:25 2026 GMT
            Not After : May 18 05:40:25 2026 GMT
        Subject: CN=6a016bca-08f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:11:ff:a0:5e:4f:6d:33:51:51:6d:d3:2d:d9:
                    dc:ac:22:59:c0:ae:f1:42:16:b8:87:95:e3:76:61:
                    ff:fd:e7:66:30:ed:ea:0d:5d:49:61:74:a7:d7:8e:
                    51:56:a5:34:65:a5:c1:22:05:27:4f:8e:7c:70:45:
                    ae:20:3c:0e:78:67:d6:e7:9b:a1:4a:0d:98:3c:b7:
                    68:1b:1b:7e:6f:12:a9:bd:63:07:ae:de:a5:cc:20:
                    9c:f8:7a:f0:52:67:ee:86:78:69:5c:fb:60:7c:00:
                    fe:f7:a1:6d:5b:a4:9a:b9:76:2e:75:2f:df:2b:6e:
                    95:ce:5f:52:c4:ea:48:42:a8:94:37:e9:51:83:41:
                    94:f3:cc:8c:e6:8a:5c:8b:67:32:0f:42:65:ba:47:
                    52:36:99:37:27:07:cb:56:d7:6d:d0:53:7a:a4:5e:
                    63:1a:e7:21:40:03:9a:6f:a2:bf:58:b1:a2:2e:94:
                    48:75:51:7d:ab:09:f4:b8:1c:e3:7c:ba:35:d6:19:
                    11:67:8e:8d:18:dc:6e:a7:1f:a4:6e:6f:1a:0c:86:
                    ad:9d:15:ce:2f:4e:0f:8b:6d:e7:78:01:6f:84:47:
                    a1:04:d3:ea:0e:a0:cb:20:fe:8e:0e:67:10:9c:d0:
                    2c:28:74:0e:21:cd:e4:7c:0c:f6:ea:cf:13:5f:05:
                    ed:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:0C:23:92:85:FC:B8:9B:62:E3:AA:F8:17:89:4B:B4:C9:87:ED:B3
            X509v3 Authority Key Identifier:
                keyid:E9:F2:CE:48:3F:1B:06:D2:9D:5E:A2:AB:E3:75:BD:1D:22:A9:E1:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:7a:40:11:a4:62:51:8c:17:27:13:68:77:f1:f6:95:47:35:
         cb:58:0e:52:0b:a4:34:96:36:5d:a8:68:4b:66:78:68:ea:92:
         4d:d9:5e:5d:3e:08:6c:2c:8d:f4:11:78:b2:7a:04:25:28:ee:
         19:2a:fe:2f:21:e1:ca:8c:2d:64:5d:23:24:dd:10:2f:5c:48:
         7c:65:ac:51:c1:af:74:64:77:1b:85:e8:fe:63:50:18:44:6c:
         0d:2d:66:7b:c3:7b:cd:ad:ed:0b:b2:cf:47:a3:7d:ac:15:75:
         d9:75:3c:53:51:72:61:fd:dc:8a:7f:e1:a6:ed:14:ac:b2:9f:
         21:45:39:8b:9f:e8:9e:bc:10:9d:20:c0:38:c6:35:08:4c:94:
         4b:33:bf:8c:7c:25:94:93:a9:9f:34:9d:fa:d2:11:bc:46:20:
         b5:97:9e:1a:4d:f8:b2:56:c3:0f:0b:ef:43:a0:7f:0f:c2:ba:
         96:ca:5f:a8:51:4c:65:9e:29:01:ae:7e:11:8f:40:dd:d8:0a:
         5d:b0:e1:8f:f1:c6:f8:4c:28:c6:73:47:55:45:20:b1:01:2d:
         82:c3:7e:83:d4:eb:0d:db:b2:1e:3b:8c:e5:9e:e5:b9:b6:22:
         2d:dc:d6:7c:c8:17:5e:cb:ae:8c:6e:f0:0b:fa:25:c2:62:60:
         3b:24:58:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:34:27 2026 by rpki-client