Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft
File:                     sK6GHB6-i61uZW1AH391BglAdKA.mft (raw, json)
Hash identifier:          R8LRTSwU1aGiGHGTpS2CqwtQUbofIrHEXKv8NwGlToY=
Subject key identifier:   BD:5C:8F:E9:D0:A9:37:C9:A8:9F:E3:20:0D:CE:29:5D:D0:59:B3:43
Authority key identifier: B0:AE:86:1C:1E:BE:8B:AD:6E:65:6D:40:1F:7F:75:06:09:40:74:A0
Certificate issuer:       /CN=A91D322A/serialNumber=B0AE861C1EBE8BAD6E656D401F7F7506094074A0
Certificate serial:       0DBC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft
Manifest number:          0DB2
Signing time:             Tue 24 Mar 2026 17:46:31 +0000
Manifest this update:     Tue 24 Mar 2026 17:46:31 +0000
Manifest next update:     Tue 31 Mar 2026 17:46:31 +0000
Files and hashes:         1: sK6GHB6-i61uZW1AH391BglAdKA.crl (hash: eje5s4B5o5xUbX7X1QGFQfMLcVaSTbPGRpXWKcV+bic=)
                          2: 98B4FB32DB9011E996483B2BC4F9AE02.roa (hash: 5ZMmyMryQucfNp+56gWj7IUfWmQlJppiEYV0jS6pkCc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.crl
                          rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:46:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3516 (0xdbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D322A, serialNumber=B0AE861C1EBE8BAD6E656D401F7F7506094074A0
        Validity
            Not Before: Mar 24 17:46:31 2026 GMT
            Not After : Mar 31 17:46:31 2026 GMT
        Subject: CN=69c2cdf7-d668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:60:51:85:ff:a6:1b:a7:b1:26:74:fe:d2:a2:
                    7d:30:13:16:02:ce:6e:40:ed:c5:28:a0:36:c6:94:
                    3d:25:52:76:5b:7c:1f:d1:55:28:e8:c6:b2:3f:26:
                    de:48:74:e5:1b:b4:8b:93:c6:f8:ce:ea:ef:ee:fb:
                    54:b4:f4:5c:20:e9:17:d4:85:e2:b7:ac:47:0d:4d:
                    67:a4:7f:d3:1f:fa:2d:6c:71:dd:28:75:95:86:ad:
                    2f:16:85:97:a9:e3:11:e8:74:92:72:8d:48:09:34:
                    af:d6:27:c1:b6:ea:a8:72:4c:c8:51:58:bd:7d:39:
                    12:89:17:09:12:9a:65:56:33:56:08:d2:10:35:0a:
                    a7:c6:db:04:74:40:a0:11:2d:5e:0c:0a:6a:1f:7f:
                    c1:3b:e7:3b:9c:48:3c:56:c9:97:0c:76:94:0d:8c:
                    59:78:db:de:99:f4:c6:07:52:9f:e0:f8:32:f9:60:
                    09:6b:f1:6c:66:57:8b:72:e1:ce:a5:4c:98:5f:b3:
                    82:f2:51:37:2c:93:de:27:82:23:0c:36:7f:30:31:
                    c2:83:7e:d7:41:b8:84:52:d7:99:f9:5d:0d:bb:b9:
                    97:92:c2:8a:47:6a:c9:38:fc:a2:b9:c6:33:e1:8d:
                    04:68:53:db:ca:d0:e0:18:8c:65:c0:fd:6d:fa:82:
                    8f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:5C:8F:E9:D0:A9:37:C9:A8:9F:E3:20:0D:CE:29:5D:D0:59:B3:43
            X509v3 Authority Key Identifier:
                keyid:B0:AE:86:1C:1E:BE:8B:AD:6E:65:6D:40:1F:7F:75:06:09:40:74:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:4f:a0:ad:1c:d4:05:32:d7:e4:fc:d6:4c:33:8b:f3:ec:3d:
         67:36:ed:98:53:fd:39:ac:12:90:10:52:bc:92:a0:90:89:12:
         47:3a:92:6b:79:b1:79:01:4a:54:17:e5:13:7f:fb:ac:b5:fc:
         8c:e4:3b:6e:3b:ad:8b:21:ba:cf:7f:8a:f7:35:63:8f:a6:b1:
         c2:34:0b:c9:dc:27:e5:bd:04:3b:bb:c2:27:ed:ed:5c:4e:ec:
         2e:ed:ac:ad:8a:08:c5:66:61:82:c5:7b:90:57:3a:ac:57:c3:
         78:b1:4b:6e:db:27:01:d8:81:3d:66:68:3d:ea:0b:f1:03:1f:
         4e:30:6c:87:66:3c:f1:f5:e8:a0:ff:32:72:8f:ac:9f:9a:a9:
         93:af:a7:2a:61:6e:27:07:cd:67:55:76:76:83:7e:c1:e9:5d:
         2b:5b:35:17:1b:9c:84:79:73:98:0d:85:bd:32:c9:e4:ba:ae:
         62:1c:ea:c3:14:72:3d:bd:47:91:eb:21:ea:b1:92:cc:0d:2b:
         e2:39:9d:fa:45:90:aa:96:79:47:22:10:b4:bf:89:5d:94:20:
         2c:00:d2:89:df:6c:16:5a:c5:07:c2:b9:54:3a:16:fc:76:3c:
         75:1f:5a:ea:93:80:b0:e6:b6:11:b2:40:67:e7:3a:5c:69:cb:
         1f:0e:82:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:15:28 2026 by rpki-client