Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft
File:                     6O2nHIlk0p8GwkorbRt3FTyo84k.mft (raw, json)
Hash identifier:          l/9IGq8++qjjZykSL6hsCmVc8gCSOO09UTpGNknNEOg=
Subject key identifier:   3D:46:39:96:B5:53:26:A4:2A:1E:5C:9B:8F:4A:48:11:FA:78:60:B0
Authority key identifier: E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89
Certificate issuer:       /CN=A91F724B/serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389
Certificate serial:       2122
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft
Manifest number:          20F9
Signing time:             Tue 24 Mar 2026 15:52:41 +0000
Manifest this update:     Tue 24 Mar 2026 15:52:41 +0000
Manifest next update:     Tue 31 Mar 2026 15:52:41 +0000
Files and hashes:         1: 6O2nHIlk0p8GwkorbRt3FTyo84k.crl (hash: 4cHtGMkzIZW8FMEluusPNPB0fBQKnTcYzv7wEZ4f1wI=)
                          2: D6702FB2C51411E7A0AC1A77C4F9AE02.roa (hash: +tvaJ54I6jm5pWGSD/+mc9Tf5oV3zMzWVdx1mR4kWxw=)
                          3: 36AB4096C51611E7AECA8B79C4F9AE02.roa (hash: MGk7Hv0oGH/cadOMgEkpIwvLj9yE4m4r9Wud6jaS3Qs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl
                          rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 15:52:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8482 (0x2122)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F724B, serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389
        Validity
            Not Before: Mar 24 15:52:41 2026 GMT
            Not After : Mar 31 15:52:41 2026 GMT
        Subject: CN=69c2b349-4b11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:29:5b:56:70:4c:c4:27:4e:6b:f4:d9:7d:6f:
                    54:32:df:43:1f:37:57:90:55:ec:23:4c:46:cd:eb:
                    06:fc:66:c1:21:94:02:45:a7:2a:87:0e:39:7d:d6:
                    6a:43:d3:c1:32:5f:a0:98:b7:0b:bc:5f:0f:ac:4b:
                    4d:4b:bb:74:2b:de:19:c9:1a:a4:52:27:a6:ff:37:
                    e5:02:f9:c9:2d:ee:db:c6:6f:9a:d0:5b:02:1d:ba:
                    13:cd:96:27:98:57:96:ee:99:bc:94:d2:e6:50:3b:
                    c4:1b:32:98:ec:ff:b7:27:8c:53:6b:0a:3c:1a:00:
                    2f:c5:cd:cd:e1:9f:d5:e4:77:d5:c0:d6:d3:a8:09:
                    75:0d:a0:c3:4e:89:28:2f:8b:54:c8:d1:56:07:8d:
                    d8:fa:f9:62:d2:8f:08:bf:68:a9:72:47:e7:b3:7c:
                    36:b9:c8:06:0f:ee:f4:2e:45:7c:a4:c2:dc:d9:92:
                    d8:64:ba:c2:46:12:2c:6c:b2:bd:62:72:c8:23:09:
                    26:33:9b:52:b8:ae:00:45:4b:1b:84:99:c6:db:a6:
                    41:10:ee:8f:07:f0:70:1e:3b:35:f3:91:0a:a1:c3:
                    a7:41:70:2c:a9:56:19:e9:81:16:ef:30:8f:15:2d:
                    2a:9f:7a:65:f4:72:99:e1:5d:a3:a6:96:9a:53:8a:
                    73:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:46:39:96:B5:53:26:A4:2A:1E:5C:9B:8F:4A:48:11:FA:78:60:B0
            X509v3 Authority Key Identifier:
                keyid:E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:e3:ed:ed:51:04:13:12:1d:09:37:fe:02:94:fb:b0:72:3c:
         10:26:5b:6c:59:b5:8c:73:2d:88:0e:3e:4f:69:a0:c1:45:f8:
         f8:30:ff:11:16:0d:97:9e:bd:16:de:06:62:ab:84:e5:2a:41:
         bf:b3:ba:07:78:84:9d:98:55:cb:40:19:a4:54:b3:8b:a1:7e:
         5f:4d:c3:d7:52:9b:6c:41:14:f8:37:4e:56:22:5c:be:a3:a7:
         f4:7e:c7:6c:cc:d7:14:42:27:3f:6a:17:4d:02:59:a9:3c:4b:
         3b:61:95:29:d5:bd:88:bb:71:4c:e3:df:81:10:49:a5:a3:3c:
         c0:09:d1:fa:2f:b9:59:34:3d:d1:f3:5c:d7:a9:c3:a2:ce:52:
         e5:a2:64:37:50:49:a2:79:0e:e7:37:8a:3f:e9:8b:a8:7b:41:
         6c:8f:5b:8a:d9:cd:8e:81:c3:e5:1f:df:e3:5b:dc:7c:ae:d6:
         a5:bf:f5:cc:48:46:82:51:64:07:1e:33:95:7c:96:e6:87:92:
         fc:00:83:90:54:a3:24:59:22:f0:63:b1:68:6d:af:ce:1b:b7:
         75:a3:50:19:70:a2:0c:92:f6:d4:fc:36:15:b4:04:a9:52:2f:
         18:3d:fc:a0:91:52:29:63:34:b3:58:9a:ff:6f:2e:95:44:47:
         2d:44:fe:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:14:57 2026 by rpki-client