Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.mft
File:                     t6ep_77HE_hOC1GAr3besW5ykik.mft (raw, json)
Hash identifier:          wZ4CCTsL7WMfq/RzwqKT+V52wgSzJ6p6P2sCUK3wmU4=
Subject key identifier:   BD:4D:38:A2:92:FC:13:9C:9B:25:7A:EA:96:4C:30:6A:5D:1C:9D:86
Authority key identifier: B7:A7:A9:FF:BE:C7:13:F8:4E:0B:51:80:AF:76:DE:B1:6E:72:92:29
Certificate issuer:       /CN=A91EFC72/serialNumber=B7A7A9FFBEC713F84E0B5180AF76DEB16E729229
Certificate serial:       062C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6ep_77HE_hOC1GAr3besW5ykik.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.mft
Manifest number:          060C
Signing time:             Tue 24 Mar 2026 22:36:49 +0000
Manifest this update:     Tue 24 Mar 2026 22:36:49 +0000
Manifest next update:     Tue 31 Mar 2026 22:36:49 +0000
Files and hashes:         1: t6ep_77HE_hOC1GAr3besW5ykik.crl (hash: jP9a6o5vl1VbFJleeZAvLf0/U0Gkf7xRKg+D3DEoRdk=)
                          2: B63ACB8CCB8411EC98BF6718C4F9AE02.roa (hash: 5FGWuAoSeBaa8uk4AYGn7KVYMi7vxaCfJSn+zhPJeGE=)
                          3: 42DB2A2A4E6511ECA2CED527C4F9AE02.roa (hash: QmbK+GEFj9l9VtwhhEw8EATsB9n6got5ov9q1qTGzdo=)
                          4: F68AC4D84D9B11EC9CF19624C4F9AE02.roa (hash: y2LhmnQFcKroMy4/GpnxRfjPb6jTZBt9lnWhcSRXMfo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.crl
                          rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6ep_77HE_hOC1GAr3besW5ykik.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:36:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1580 (0x62c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFC72, serialNumber=B7A7A9FFBEC713F84E0B5180AF76DEB16E729229
        Validity
            Not Before: Mar 24 22:36:49 2026 GMT
            Not After : Mar 31 22:36:49 2026 GMT
        Subject: CN=69c31201-05de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:72:c3:58:99:61:d2:04:67:5b:d0:93:87:f3:
                    6e:36:0d:d8:66:a7:f5:5e:20:71:ee:ab:be:20:c4:
                    d2:82:15:f8:f0:e6:cc:c7:76:0e:16:34:7f:36:64:
                    40:34:7a:16:94:4d:c9:b6:cf:17:b5:ab:96:1a:b1:
                    40:5a:9d:c9:d4:57:7d:ba:1e:3a:37:1d:39:89:78:
                    63:a9:b3:01:2b:e5:af:de:19:50:45:92:a9:8a:c0:
                    74:41:b4:d9:09:2d:41:be:70:48:1e:9d:62:cf:9b:
                    2a:8d:b8:0c:e8:01:6e:86:c9:4c:60:83:9c:e7:eb:
                    39:c6:f3:33:f4:fd:f2:7e:22:0a:0f:31:3a:96:7b:
                    b5:54:a7:31:ee:39:66:5c:52:fe:b1:07:97:13:5e:
                    fe:3d:5b:38:94:14:6c:10:d3:49:69:55:04:2d:c4:
                    b1:92:c9:94:59:40:b6:95:33:a2:df:38:35:58:6f:
                    49:05:e1:2b:21:e2:75:bf:a8:a2:d6:d3:4b:19:d7:
                    3e:78:c9:37:86:f5:75:bc:eb:ea:69:ba:98:53:d3:
                    74:01:78:b0:20:ea:ec:ab:81:18:9f:9f:51:c0:f0:
                    27:7b:74:c9:46:0b:0b:3d:e0:f5:b1:0b:62:f9:5a:
                    d0:34:32:03:42:cc:d6:fc:be:15:4e:b4:cc:7f:32:
                    37:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:4D:38:A2:92:FC:13:9C:9B:25:7A:EA:96:4C:30:6A:5D:1C:9D:86
            X509v3 Authority Key Identifier:
                keyid:B7:A7:A9:FF:BE:C7:13:F8:4E:0B:51:80:AF:76:DE:B1:6E:72:92:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6ep_77HE_hOC1GAr3besW5ykik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:5b:08:ab:0c:db:54:a4:cb:a6:38:26:55:b4:ad:e3:0d:50:
         17:67:d8:1e:c6:2e:c7:cc:53:ab:76:ec:fd:71:09:53:8d:31:
         aa:b1:41:f9:38:c7:9d:d4:f8:5c:fb:15:ab:74:fe:fb:ad:98:
         c6:a4:0c:7e:e0:2f:a2:3a:4f:7a:dd:89:08:d9:79:80:53:72:
         17:30:f7:9a:9a:49:50:59:8a:df:b9:67:6d:28:09:57:8b:88:
         68:76:3f:9f:b4:62:ba:e6:d7:08:4d:b3:b3:94:f1:05:f1:e3:
         d5:9c:18:51:b3:29:38:e0:a3:8b:8b:db:b6:c9:2c:d8:ae:85:
         51:29:ab:01:17:6c:74:d8:75:c6:b8:c8:14:22:89:68:a0:e2:
         56:76:f1:88:0b:d8:ac:77:ab:14:8f:0d:d9:40:16:3f:57:f6:
         da:b2:75:50:81:65:cb:5e:d3:bc:c9:35:3c:61:55:5c:6f:7f:
         db:9b:3c:9a:6c:a3:9d:9f:0d:41:e8:e0:26:4b:c8:b0:82:d6:
         96:f7:93:60:6f:21:c4:f3:a2:c3:59:7a:da:3d:fa:79:f9:54:
         48:8c:f6:c0:5a:24:9c:87:69:c6:0c:96:0b:ec:2b:92:84:bc:
         6c:a9:54:2f:a6:39:e0:b2:a3:10:a7:dd:87:60:ff:c9:5b:8a:
         5d:e5:f7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:56:55 2026 by rpki-client