Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5DA/CB0B70B0706811F1B4A3E8BF73A30FBC/6xID5pA4E7MN-RtMaXlSXctjCBU.mft
File:                     6xID5pA4E7MN-RtMaXlSXctjCBU.mft (raw, json)
Hash identifier:          Vl1uEU1L97MK0Y2Y4MCErKjSP2fdoeSEtWsBBDVITwU=
Subject key identifier:   4D:E2:F1:F7:02:DA:CC:F0:41:B5:C2:9F:45:B2:55:C9:F7:B0:E0:97
Authority key identifier: EB:12:03:E6:90:38:13:B3:0D:F9:1B:4C:69:79:52:5D:CB:63:08:15
Certificate issuer:       /CN=A91FF5DA/serialNumber=EB1203E6903813B30DF91B4C6979525DCB630815
Certificate serial:       14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6xID5pA4E7MN-RtMaXlSXctjCBU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF5DA/CB0B70B0706811F1B4A3E8BF73A30FBC/6xID5pA4E7MN-RtMaXlSXctjCBU.mft
Manifest number:          12
Signing time:             Thu 23 Jul 2026 11:36:00 +0000
Manifest this update:     Thu 23 Jul 2026 11:36:00 +0000
Manifest next update:     Thu 30 Jul 2026 11:36:00 +0000
Files and hashes:         1: 6xID5pA4E7MN-RtMaXlSXctjCBU.crl (hash: ycWxfkd/JS+PYxcay8qq3n5llyLa4ljhYkKyp37MgNo=)
                          2: E2C181D2707111F1B7FB9D3F77A30FBC.roa (hash: xSJ4aIOrc6x+QwiP0rZxv5INu2KqemCI5ZONBKN16C8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF5DA/CB0B70B0706811F1B4A3E8BF73A30FBC/6xID5pA4E7MN-RtMaXlSXctjCBU.crl
                          rsync://rpki.apnic.net/member_repository/A91FF5DA/CB0B70B0706811F1B4A3E8BF73A30FBC/6xID5pA4E7MN-RtMaXlSXctjCBU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6xID5pA4E7MN-RtMaXlSXctjCBU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:35:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF5DA, serialNumber=EB1203E6903813B30DF91B4C6979525DCB630815
        Validity
            Not Before: Jul 23 11:36:00 2026 GMT
            Not After : Jul 30 11:36:00 2026 GMT
        Subject: CN=6a61fca0-e104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ca:75:b9:a0:83:e6:f0:44:df:74:a6:5d:04:
                    6a:66:fd:d0:c9:33:88:89:93:ed:3d:e0:c9:3b:fb:
                    56:84:b3:fc:38:f3:41:6f:7c:e8:f5:f8:65:34:28:
                    07:08:7d:a3:a8:dd:ee:0c:06:8b:a6:84:31:fc:c2:
                    e2:9e:ee:0c:7c:fe:d8:38:29:b1:4f:20:30:d2:5f:
                    52:e4:0c:de:df:3a:c9:c6:98:8d:b4:54:b3:7d:73:
                    33:3b:7e:ea:59:57:20:7a:fe:44:9e:be:17:5a:a2:
                    b5:d8:1c:86:e6:94:f0:ab:ae:38:a0:b5:1e:30:64:
                    6e:2b:37:8b:20:31:73:74:1c:20:37:5e:4a:01:75:
                    4c:7c:16:09:b5:9c:f0:23:a7:2c:7a:88:6c:b3:54:
                    64:c5:ca:c1:8b:5d:7e:4a:a6:c7:d2:d5:20:14:2b:
                    bd:d9:61:5e:73:13:15:11:9d:50:85:b4:f7:7c:42:
                    9c:a5:26:e9:b7:d9:42:62:b8:99:8d:be:8a:e5:eb:
                    fb:b1:88:5a:50:a0:2d:71:e7:97:95:18:aa:77:e9:
                    c6:92:27:99:28:21:1a:35:b8:e7:e3:02:23:07:40:
                    fd:f1:26:b1:98:a8:e4:c7:c5:e1:c8:a6:61:cb:71:
                    68:4f:57:47:10:2b:b1:bc:09:67:cb:08:23:31:ba:
                    78:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E2:F1:F7:02:DA:CC:F0:41:B5:C2:9F:45:B2:55:C9:F7:B0:E0:97
            X509v3 Authority Key Identifier:
                keyid:EB:12:03:E6:90:38:13:B3:0D:F9:1B:4C:69:79:52:5D:CB:63:08:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF5DA/CB0B70B0706811F1B4A3E8BF73A30FBC/6xID5pA4E7MN-RtMaXlSXctjCBU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6xID5pA4E7MN-RtMaXlSXctjCBU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5DA/CB0B70B0706811F1B4A3E8BF73A30FBC/6xID5pA4E7MN-RtMaXlSXctjCBU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:fc:ed:89:f7:f8:c6:3d:e5:4a:fb:0e:35:1f:30:00:3b:b4:
         33:f4:57:70:4b:37:5b:33:08:8d:03:83:d5:96:ca:cf:ec:12:
         27:da:ad:ce:f2:50:d6:6d:81:fd:31:0d:ce:25:30:ff:78:e0:
         de:30:c9:c3:f1:2c:65:a9:44:cd:82:18:9e:ec:9f:54:2f:71:
         e2:02:24:0d:30:d1:8b:06:21:cd:44:f1:62:bb:ca:b1:19:57:
         c8:c0:6e:c2:83:1c:cb:9c:ab:71:cd:71:6a:ab:f2:77:ba:5e:
         5d:76:bb:60:b6:70:6d:4a:3c:7e:7a:2e:7e:cf:3d:0b:21:a8:
         39:1d:56:22:c5:58:b8:13:d4:56:ec:63:69:9f:0e:93:d4:6d:
         07:37:58:2d:ea:a0:34:04:82:c9:f2:3e:2c:fa:9c:bf:50:83:
         ea:f6:b4:d1:b7:6d:d2:b6:56:5b:54:9c:8f:29:7e:5f:4b:43:
         23:37:87:c9:5f:51:66:80:4b:3c:4d:3b:0a:ad:43:d1:9e:e0:
         6a:f3:70:57:4c:9a:fc:19:92:8c:92:95:5b:5f:3c:16:4f:ed:
         d9:af:63:e2:d8:76:0e:5e:31:c4:c6:08:ab:61:86:78:f7:92:
         45:b8:14:8d:ad:45:45:1a:2a:33:61:d5:ac:b4:c4:5d:9b:a7:
         91:c4:dd:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:28:13 2026 by rpki-client