Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft
File:                     6O2nHIlk0p8GwkorbRt3FTyo84k.mft (raw, json)
Hash identifier:          TtOf2WWujLKLfAndxxrDTuHSbPCNdNghwNKQN2XEdqw=
Subject key identifier:   2D:4D:AA:5E:6E:FA:89:FF:4C:8B:86:E2:1B:E2:67:8D:78:C4:36:EA
Authority key identifier: E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89
Certificate issuer:       /CN=A91F724B/serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389
Certificate serial:       213B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft
Manifest number:          2112
Signing time:             Tue 12 May 2026 15:56:40 +0000
Manifest this update:     Tue 12 May 2026 15:56:39 +0000
Manifest next update:     Tue 19 May 2026 15:56:39 +0000
Files and hashes:         1: 6O2nHIlk0p8GwkorbRt3FTyo84k.crl (hash: nVP0EFwS0cyLBAMEAakQ9g8A/cLci6Ugsqh+rOPeAYU=)
                          2: 36AB4096C51611E7AECA8B79C4F9AE02.roa (hash: MGk7Hv0oGH/cadOMgEkpIwvLj9yE4m4r9Wud6jaS3Qs=)
                          3: D6702FB2C51411E7A0AC1A77C4F9AE02.roa (hash: +tvaJ54I6jm5pWGSD/+mc9Tf5oV3zMzWVdx1mR4kWxw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl
                          rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:56:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8507 (0x213b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F724B, serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389
        Validity
            Not Before: May 12 15:56:39 2026 GMT
            Not After : May 19 15:56:39 2026 GMT
        Subject: CN=6a034db7-e88a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bb:3b:42:11:09:09:c1:d5:ad:af:ad:83:34:
                    d4:a3:5d:50:cb:24:ce:ea:dd:ce:27:5f:d0:f5:70:
                    a9:aa:5a:f5:d0:22:88:8a:88:f2:f1:81:e9:a4:b2:
                    f6:b1:54:a4:b2:7b:d8:48:6b:5e:79:fa:80:a4:b3:
                    c4:75:48:d7:b0:56:9c:37:f9:4b:d3:f8:2b:f7:ce:
                    a6:23:24:a5:47:99:8c:b7:44:de:73:bb:0b:79:68:
                    af:3f:bd:4c:4c:0e:c9:38:9f:10:e6:fc:05:fa:2f:
                    e9:9f:6f:0f:68:f0:d3:c9:80:fb:bb:c8:c9:63:eb:
                    87:9d:95:5e:79:f7:be:a1:c7:e5:7c:93:1a:e7:10:
                    a5:71:c9:00:0e:b9:88:d6:53:e1:7c:6b:75:36:b8:
                    7a:22:a5:ac:f9:cc:ae:4f:ca:c1:09:f2:9f:12:ce:
                    f3:be:da:16:65:9f:3c:3c:e8:9e:2c:0b:23:b0:9c:
                    36:04:4c:9b:26:90:c8:72:8d:1f:96:4f:d6:aa:49:
                    0f:32:41:8c:64:45:11:50:97:35:3f:ff:24:ef:df:
                    b0:bb:b3:b3:cd:b7:09:81:ae:59:58:3d:4c:da:94:
                    62:bc:2d:6d:a6:3c:5f:fa:91:5f:3e:41:1f:b8:e3:
                    17:a5:3d:09:63:60:c6:82:db:11:ab:00:3e:6f:0a:
                    3e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:4D:AA:5E:6E:FA:89:FF:4C:8B:86:E2:1B:E2:67:8D:78:C4:36:EA
            X509v3 Authority Key Identifier:
                keyid:E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:24:5d:fc:a9:9f:dd:cb:b3:6f:87:ce:b9:d8:5e:59:e5:c7:
         b1:3b:f0:db:83:39:51:4c:e7:6e:4d:c1:e0:50:c0:5e:83:54:
         6c:24:a7:a0:1a:dc:60:e2:a5:3e:d1:24:e3:67:ef:53:32:9e:
         67:a3:42:54:11:54:0e:c8:8e:99:cc:35:84:14:27:75:07:09:
         d8:8c:d5:79:e1:85:8a:89:94:8f:f2:57:41:73:9f:29:81:9b:
         06:1e:78:f0:c7:a6:55:24:5c:ad:ad:2a:65:40:c3:fd:52:3b:
         b7:6c:e7:c0:bd:c1:ac:74:cc:5a:2e:5b:3a:13:19:fc:ac:60:
         fc:fa:76:12:d1:1d:40:3b:54:67:a4:bf:8d:a4:d9:c3:b2:40:
         ce:33:83:7f:40:2c:a4:8d:a4:db:9a:49:8c:c1:19:1f:35:89:
         e4:7f:f8:d4:6e:62:71:16:4a:ec:e8:50:00:d5:8d:14:a8:fe:
         3e:f6:c2:d5:57:f6:4c:82:cb:d9:45:56:01:4d:37:27:f4:55:
         db:de:bb:ca:12:47:55:3c:8e:dd:88:69:ee:c1:58:4b:a2:5b:
         c6:e0:c8:31:45:ef:73:eb:34:05:d4:76:5b:cc:84:7d:23:a6:
         ae:13:cc:de:66:aa:0f:f7:13:a6:a6:4b:aa:d6:06:93:62:33:
         e5:92:ae:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:13:48 2026 by rpki-client