Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft
File:                     6XH_tEATQSECHGJem3DrGuWij2A.mft (raw, json)
Hash identifier:          q0nEkwKpQFf9toDf+ZS71b16WQM59nOTYNAOU1nO9TU=
Subject key identifier:   EF:B4:33:9D:96:D1:3D:09:06:93:58:48:2E:48:66:DF:6A:D3:36:A0
Authority key identifier: E9:71:FF:B4:40:13:41:21:02:1C:62:5E:9B:70:EB:1A:E5:A2:8F:60
Certificate issuer:       /CN=A911EDE5/serialNumber=E971FFB440134121021C625E9B70EB1AE5A28F60
Certificate serial:       0DE8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft
Manifest number:          0DDC
Signing time:             Sat 04 Apr 2026 17:44:43 +0000
Manifest this update:     Sat 04 Apr 2026 17:44:42 +0000
Manifest next update:     Sat 11 Apr 2026 17:44:42 +0000
Files and hashes:         1: 6XH_tEATQSECHGJem3DrGuWij2A.crl (hash: 9uvXBjkD8wJ1lTYts/GBgbmh0BbYOM3yNs8/3qTSmQM=)
                          2: 89D124B6D51311E98A41293BC4F9AE02.roa (hash: MCiCoDcn9iWsMnw+W4ic1bgrDj5hNzV2NifUiMBx2Ro=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.crl
                          rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 17:44:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3560 (0xde8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EDE5, serialNumber=E971FFB440134121021C625E9B70EB1AE5A28F60
        Validity
            Not Before: Apr  4 17:44:42 2026 GMT
            Not After : Apr 11 17:44:42 2026 GMT
        Subject: CN=69d14e0b-2e0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:43:77:72:d1:c8:a1:7f:84:fe:a1:81:af:c6:
                    5f:16:5d:89:b8:04:19:5a:72:15:08:e7:cd:6b:78:
                    c0:bd:28:07:7e:89:1c:da:cc:3d:d6:1f:1c:d7:ea:
                    bb:40:15:28:0a:3b:cf:67:90:14:77:6b:1d:f7:c1:
                    e3:5e:24:2c:cc:0e:cb:1e:08:cf:9f:6e:03:09:df:
                    d5:12:38:10:b4:f8:ad:ed:af:77:12:ac:ad:03:8d:
                    be:e3:fd:6c:fa:5a:c1:8c:7d:e7:10:de:33:62:ad:
                    1d:4c:d3:b9:08:a6:23:dc:2b:f2:1f:ca:80:ad:45:
                    13:9d:a2:d3:a0:6e:6c:24:b0:0b:eb:66:4f:b5:62:
                    60:d5:15:97:2b:39:69:93:6f:ff:1a:e7:33:84:a5:
                    7a:f0:8c:5b:13:d0:1a:d5:df:bb:70:98:0d:fa:4e:
                    0a:39:03:5f:5e:03:a6:73:1d:5c:93:52:63:6e:6c:
                    8c:2b:2d:f9:39:c6:77:0f:e0:a8:89:ac:79:34:db:
                    be:5b:34:89:35:f7:f8:9b:ee:98:f5:73:f2:46:43:
                    d7:46:66:ef:41:61:27:48:0d:be:3f:84:3b:3c:2d:
                    58:26:b3:b9:a4:65:c9:39:38:7e:e2:84:25:93:f4:
                    e9:ca:6d:92:d8:3c:71:b0:49:f8:c5:2d:1e:cc:89:
                    56:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B4:33:9D:96:D1:3D:09:06:93:58:48:2E:48:66:DF:6A:D3:36:A0
            X509v3 Authority Key Identifier:
                keyid:E9:71:FF:B4:40:13:41:21:02:1C:62:5E:9B:70:EB:1A:E5:A2:8F:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:1a:40:80:ac:ba:b6:65:01:ad:24:60:ac:15:4d:ea:ef:92:
         d2:6a:b6:3b:1e:ce:8b:1b:f3:da:b8:8f:dc:c9:0d:5c:5d:32:
         aa:f2:c0:fe:79:1e:dd:cc:16:2a:3b:30:9b:2c:8e:62:1c:b5:
         ae:59:09:73:61:a7:f7:28:a6:bc:0b:15:2c:87:b4:f6:b4:f4:
         9f:fa:7d:67:f3:69:90:6d:3c:a5:dd:e8:55:2a:59:9e:bb:b9:
         a2:ed:56:a5:95:2a:d8:06:fe:03:7b:91:bd:8e:58:6c:6a:e0:
         2b:39:02:75:ec:13:d2:b3:82:2a:8c:ec:c4:ac:a5:e0:dc:f6:
         da:2a:75:6f:bd:9d:77:ca:9f:ad:7b:d8:c3:f5:49:86:9f:85:
         1e:a8:9e:78:ae:8d:1b:83:50:fc:36:74:53:6b:f3:b6:c8:15:
         c3:33:b2:4e:17:9f:e5:cb:19:24:9b:1d:c8:fe:eb:86:89:e2:
         2f:28:37:4d:c8:fc:48:8e:3d:6a:e7:68:7a:4b:6d:52:63:0c:
         c3:95:7c:36:da:81:cc:9f:7a:cb:a7:2b:25:72:3c:47:6e:29:
         a9:56:6e:ad:a5:52:99:bc:a9:e2:a1:15:5c:02:07:ce:06:a3:
         a6:79:a2:c7:75:69:26:2c:df:17:af:de:59:1c:f4:a5:e4:0a:
         05:db:1e:fa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUVERTUxMTAvBgNVBAUTKEU5NzFGRkI0NDAxMzQxMjEwMjFDNjI1RTlCNzBFQjFB
RTVBMjhGNjAwHhcNMjYwNDA0MTc0NDQyWhcNMjYwNDExMTc0NDQyWjAYMRYwFAYD
VQQDEw02OWQxNGUwYi0yZTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtUN3ctHIoX+E/qGBr8ZfFl2JuAQZWnIVCOfNa3jAvSgHfokc2sw91h8c1+q7
QBUoCjvPZ5AUd2sd98HjXiQszA7LHgjPn24DCd/VEjgQtPit7a93EqytA42+4/1s
+lrBjH3nEN4zYq0dTNO5CKYj3CvyH8qArUUTnaLToG5sJLAL62ZPtWJg1RWXKzlp
k2//GuczhKV68IxbE9Aa1d+7cJgN+k4KOQNfXgOmcx1ck1JjbmyMKy35OcZ3D+Co
iax5NNu+WzSJNff4m+6Y9XPyRkPXRmbvQWEnSA2+P4Q7PC1YJrO5pGXJOTh+4oQl
k/Tpym2S2DxxsEn4xS0ezIlWIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO+0M52W
0T0JBpNYSC5IZt9q0zagMB8GA1UdIwQYMBaAFOlx/7RAE0EhAhxiXptw6xrloo9g
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRURFNS9CM0JGNzU4QUQ1
MTIxMUU5QjY0M0VEMzlDNEY5QUUwMi82WEhfdEVBVFFTRUNIR0plbTNEckd1V2lq
MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZYSF90RUFUUVNFQ0hHSmVtM0RyR3VXaWoyQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RURFNS9CM0JGNzU4QUQ1MTIxMUU5QjY0M0VEMzlDNEY5QUUwMi82WEhfdEVBVFFT
RUNIR0plbTNEckd1V2lqMkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcRpAgKy6tmUBrSRgrBVN6u+S0mq2Ox7Oixvz2riP3MkNXF0yqvLA/nke3cwW
KjswmyyOYhy1rlkJc2Gn9yimvAsVLIe09rT0n/p9Z/NpkG08pd3oVSpZnru5ou1W
pZUq2Ab+A3uRvY5YbGrgKzkCdewT0rOCKozsxKyl4Nz22ip1b72dd8qfrXvYw/VJ
hp+FHqieeK6NG4NQ/DZ0U2vztsgVwzOyThef5csZJJsdyP7rhoniLyg3Tcj8SI49
audoekttUmMMw5V8NtqBzJ96y6crJXI8R24pqVZuraVSmbyp4qEVXAIHzgajpnmi
x3VpJizfF6/eWRz0peQKBdse+g==
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:43:52 2026 by rpki-client