Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.mft
File:                     6_d1-2stKz-APD8za4MAqL5r6YU.mft (raw, json)
Hash identifier:          0sx5Qck1NSC5nY+mUiuhiguS3NZl19QLGcG8EVWFhyA=
Subject key identifier:   EE:E6:31:36:66:EC:70:52:C7:5E:B2:77:D8:13:F6:09:2F:CA:6E:ED
Authority key identifier: EB:F7:75:FB:6B:2D:2B:3F:80:3C:3F:33:6B:83:00:A8:BE:6B:E9:85
Certificate issuer:       /CN=A91D65E6/serialNumber=EBF775FB6B2D2B3F803C3F336B8300A8BE6BE985
Certificate serial:       0177
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_d1-2stKz-APD8za4MAqL5r6YU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.mft
Manifest number:          0172
Signing time:             Fri 27 Mar 2026 04:11:13 +0000
Manifest this update:     Fri 27 Mar 2026 04:11:12 +0000
Manifest next update:     Fri 03 Apr 2026 04:11:12 +0000
Files and hashes:         1: 6_d1-2stKz-APD8za4MAqL5r6YU.crl (hash: a/n4rQuiTRvlCzbMRmmi1dy21Jbg2GwDAQkFh2MyVqY=)
                          2: 45BE9530F0AA11EE8FBA4E4DC4F9AE02.roa (hash: 0nz7vF2PQ3K7o56KxyU01DvG8c4KXrrihtD0h2snQrw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.crl
                          rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_d1-2stKz-APD8za4MAqL5r6YU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 04:11:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 375 (0x177)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D65E6, serialNumber=EBF775FB6B2D2B3F803C3F336B8300A8BE6BE985
        Validity
            Not Before: Mar 27 04:11:12 2026 GMT
            Not After : Apr  3 04:11:12 2026 GMT
        Subject: CN=69c60361-0a7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c2:01:a6:08:6c:31:c1:45:33:fc:3f:fa:9e:
                    c5:68:bb:93:08:46:ae:eb:55:35:50:8d:42:5f:95:
                    c8:2f:f7:92:f0:7f:25:57:19:4c:dd:98:28:49:f3:
                    92:8c:da:cb:8d:6b:a4:85:5c:24:48:07:3b:35:ed:
                    68:f7:77:4d:37:99:5a:7e:a5:ac:ee:16:df:56:2e:
                    23:12:7a:0e:f8:da:5e:cd:28:e4:a0:a3:21:2d:8a:
                    32:d6:e2:96:dc:ed:92:9c:65:f2:02:e9:5b:71:de:
                    ec:2d:6a:ab:56:d8:8a:f0:72:78:af:bf:94:02:c5:
                    94:fe:f0:22:35:26:d5:aa:ed:e5:5e:2d:fc:b2:87:
                    95:19:a1:d8:4d:b7:10:e4:01:05:b6:17:88:e0:65:
                    a3:54:37:a6:cb:58:94:a4:46:93:2b:0f:40:62:28:
                    a7:b4:8a:90:8d:06:2b:c7:9e:bb:10:cf:a2:e0:8b:
                    b8:29:c7:75:e9:f8:e6:33:53:95:a1:d8:8a:08:2e:
                    53:5e:35:57:65:21:4f:53:f9:97:85:e5:d3:3d:78:
                    e7:b5:47:33:fa:cc:23:d1:e7:8d:13:38:8f:ef:7e:
                    ea:e1:46:44:bd:e0:bd:f3:e3:86:f1:df:0e:96:dc:
                    a0:34:31:22:fc:ca:60:19:c6:61:54:84:1c:ff:98:
                    bf:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E6:31:36:66:EC:70:52:C7:5E:B2:77:D8:13:F6:09:2F:CA:6E:ED
            X509v3 Authority Key Identifier:
                keyid:EB:F7:75:FB:6B:2D:2B:3F:80:3C:3F:33:6B:83:00:A8:BE:6B:E9:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_d1-2stKz-APD8za4MAqL5r6YU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:74:11:59:48:eb:3f:9c:27:e2:03:5d:79:80:72:89:f0:5e:
         6d:eb:bf:a4:f0:c8:be:d0:2d:4d:9b:be:65:fd:82:af:64:4d:
         b3:8f:9d:21:c8:6a:a2:4e:96:7a:a9:2f:72:55:de:f8:23:f7:
         66:cc:cd:22:ee:17:3d:7c:9b:25:e3:e1:10:34:27:f5:29:67:
         44:27:ec:94:58:9d:ec:2e:fd:e5:a6:fd:70:c0:7b:3d:4b:e1:
         90:88:e4:cc:0d:7c:fc:2b:1a:fa:ff:02:10:ac:be:98:af:e9:
         d2:d5:36:dd:a3:9c:2b:3e:05:47:ad:cf:9b:be:ed:34:ec:ae:
         93:4f:f1:e0:83:ea:f7:37:05:47:ba:b8:71:53:7a:e8:c4:97:
         1a:4e:8f:b3:a0:cb:d2:b5:c0:ed:f7:12:4b:1f:3b:26:b6:07:
         04:e9:2f:35:d7:65:ad:c0:33:31:bb:d6:73:df:62:ac:93:cd:
         ec:eb:0f:02:29:98:5e:31:b2:39:2e:ef:64:ae:18:e6:f8:06:
         62:d0:c5:93:0f:7b:15:2d:5c:3d:ec:3e:ad:65:28:36:d0:fa:
         ea:ae:50:e6:44:ec:39:e1:74:08:c5:3d:59:e8:e4:bb:fe:37:
         10:c1:31:7d:a2:75:1a:c3:9d:84:52:78:80:6f:c2:db:26:78:
         b2:5b:58:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:11:13 2026 by rpki-client