Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.mft
File:                     6LCK3PScYMutkdHtbTe9hEOtvUw.mft (raw, json)
Hash identifier:          S/XPsp4nbIvrnb0ahxKZzhrjVta/RKxJ+2VktSW6IBA=
Subject key identifier:   84:B1:5A:B8:30:E7:C7:1F:73:3E:CC:7E:A7:96:EC:BA:3B:A1:55:D3
Authority key identifier: E8:B0:8A:DC:F4:9C:60:CB:AD:91:D1:ED:6D:37:BD:84:43:AD:BD:4C
Certificate issuer:       /CN=A91D6C2E/serialNumber=E8B08ADCF49C60CBAD91D1ED6D37BD8443ADBD4C
Certificate serial:       01D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LCK3PScYMutkdHtbTe9hEOtvUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.mft
Manifest number:          01CC
Signing time:             Mon 11 May 2026 03:46:43 +0000
Manifest this update:     Mon 11 May 2026 03:46:43 +0000
Manifest next update:     Mon 18 May 2026 03:46:43 +0000
Files and hashes:         1: 6LCK3PScYMutkdHtbTe9hEOtvUw.crl (hash: GzpebjAQZQjBYq9yPimcsRMsBiV0AVGDoRGL+3N5vRs=)
                          2: 5FB99B82934511EE87C1BE7EC4F9AE02.roa (hash: oir1KO7itYRLncdx+k4nMQfCDJqoJ0sGUL8dcRF7ZpA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.crl
                          rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LCK3PScYMutkdHtbTe9hEOtvUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 03:46:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 466 (0x1d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6C2E, serialNumber=E8B08ADCF49C60CBAD91D1ED6D37BD8443ADBD4C
        Validity
            Not Before: May 11 03:46:43 2026 GMT
            Not After : May 18 03:46:43 2026 GMT
        Subject: CN=6a015123-b9d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5a:aa:66:77:bf:83:e3:0a:50:ee:49:38:09:
                    c7:5f:9a:1b:04:6f:9d:fd:bc:25:75:5d:cf:ac:25:
                    c0:71:14:ce:16:44:75:f6:76:7b:80:91:c7:07:2b:
                    04:7d:3d:b1:2f:88:83:5c:8d:43:1e:f2:fe:f0:97:
                    cc:4b:7b:4b:92:99:5d:38:09:8e:b6:40:62:b5:16:
                    45:50:47:7e:fb:d7:71:5f:9b:24:58:c0:d0:11:27:
                    f3:5f:ab:67:e2:40:81:b7:9e:22:09:94:fd:6b:03:
                    72:84:7a:a0:58:d0:59:5e:b2:02:1c:37:fb:19:31:
                    0e:e6:38:23:c9:7a:fa:a4:e4:4e:d7:72:3a:5c:2b:
                    1e:f3:d0:54:c8:28:ff:9d:bb:c7:b2:84:f7:28:51:
                    0d:b0:e8:53:c9:69:a6:8e:23:e6:99:eb:84:a9:e4:
                    41:d6:5e:92:ec:d2:b3:c6:77:79:0f:d3:21:70:47:
                    35:d1:10:77:4d:87:f2:a1:15:ac:b3:4d:59:8d:87:
                    fc:45:21:a8:0f:5f:a4:75:05:31:89:02:cc:5a:2a:
                    6b:c2:ca:67:46:a4:9b:f5:8a:c7:6c:a3:e1:47:d8:
                    fa:df:18:f2:4a:71:e9:54:69:ae:d5:6a:f5:0e:dc:
                    94:06:77:4c:34:fe:10:1b:a8:f3:27:c2:6f:45:59:
                    a9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B1:5A:B8:30:E7:C7:1F:73:3E:CC:7E:A7:96:EC:BA:3B:A1:55:D3
            X509v3 Authority Key Identifier:
                keyid:E8:B0:8A:DC:F4:9C:60:CB:AD:91:D1:ED:6D:37:BD:84:43:AD:BD:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LCK3PScYMutkdHtbTe9hEOtvUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:38:3a:0b:5f:91:40:b5:df:45:5c:0c:28:b4:ce:dd:5a:2a:
         c8:b3:7e:8e:a5:32:95:bc:46:c0:27:e6:b5:8b:1d:54:03:eb:
         55:8d:f2:df:45:9a:01:e2:a1:32:db:7b:74:cd:62:18:17:6b:
         46:78:88:e5:72:26:d1:76:fa:61:b7:ab:17:31:e0:96:b2:72:
         db:71:14:1f:22:22:9c:c0:79:f0:0c:c3:95:02:58:dc:05:92:
         fe:2d:4d:30:49:62:a1:90:6b:00:74:77:34:4b:19:f8:a2:2e:
         9e:40:b7:7a:20:d3:be:dd:c8:57:c1:ad:a9:bc:8e:43:8f:fe:
         60:60:98:c2:fe:c1:ef:e1:37:3e:32:c1:b0:82:06:2e:f2:cd:
         32:6d:1b:fd:91:2f:c5:06:f5:9f:84:fc:92:bb:bc:6f:1d:a5:
         6d:2e:98:95:98:23:66:86:cf:d4:e4:ca:40:e2:d9:3d:00:23:
         da:46:a2:b0:b2:c8:a7:4d:3c:17:32:61:d7:fc:4a:23:54:fc:
         65:33:3b:fb:ec:d5:ec:33:eb:bf:e1:31:d8:07:22:62:91:5f:
         6f:f6:2c:e9:6c:c0:dc:64:29:97:a1:75:4a:be:0a:0a:ce:24:
         7e:f1:78:0e:09:cc:7b:5b:8d:ad:02:5b:69:ed:64:cb:21:41:
         01:f1:79:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:26:31 2026 by rpki-client