Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
File:                     6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft (raw, json)
Hash identifier:          p8bXad2/Js58I2tQ4IA826HnEL2fVT/b4fXJTZ68wLM=
Subject key identifier:   45:7F:19:57:B2:49:F1:35:6E:4C:EF:1D:F4:80:C7:0C:4C:28:94:F1
Authority key identifier: EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E
Certificate issuer:       /CN=A9154B7E/serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E
Certificate serial:       0B56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
Manifest number:          0B3B
Signing time:             Sat 04 Apr 2026 19:05:27 +0000
Manifest this update:     Sat 04 Apr 2026 19:05:26 +0000
Manifest next update:     Sat 11 Apr 2026 19:05:26 +0000
Files and hashes:         1: 6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl (hash: 4kIan7/ilAHclhdqRSKnUzZgI0ppZzWTWvWLAyMFyT0=)
                          2: 2996029C591611EA86D2A42DC4F9AE02.roa (hash: YoQLzF1Lm5yCnjPw539aGKaVVb5igGFfhZc6/2536gM=)
                          3: 144D1F865F7F11EBB5C08239C4F9AE02.roa (hash: a98jB4MSjv/smFnJ8Lz82VIPKbQpi9CPszl7PwTNJ3k=)
                          4: 45A83CC809EE11EBAD92B66BC4F9AE02.roa (hash: zxbNBeuYEf6c+f0pWWpGgn67zb1hnSTjyBGEz1Av9Hk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl
                          rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 19:05:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2902 (0xb56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154B7E, serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E
        Validity
            Not Before: Apr  4 19:05:26 2026 GMT
            Not After : Apr 11 19:05:26 2026 GMT
        Subject: CN=69d160f7-f86c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e9:22:de:89:b0:25:5e:57:a4:4c:d4:e8:7c:
                    f7:a3:4b:64:44:0c:b5:8a:ed:d4:ef:55:fa:de:34:
                    8f:c0:e5:97:fb:24:d3:25:7b:6b:9c:a6:b3:5e:ec:
                    4f:8b:e1:aa:13:1d:3c:21:92:a8:98:75:33:10:a7:
                    35:d2:25:ec:ec:d9:56:5d:37:2a:f6:bc:5d:e7:84:
                    7f:e6:85:93:7c:c3:4a:e3:cb:4a:d4:aa:f5:3b:92:
                    54:c2:55:a3:92:34:b4:53:60:90:ba:75:e3:d8:f8:
                    b4:1a:83:3f:a8:22:8b:37:53:2b:2e:1c:df:c8:c3:
                    49:9a:9f:b3:8a:9c:07:ea:ed:c7:81:eb:35:6c:6c:
                    63:9c:53:88:87:8e:57:4b:9e:7e:bf:3b:bd:70:47:
                    35:ae:2d:f3:25:05:b7:23:2b:30:24:17:c6:13:32:
                    78:28:b0:83:4b:c2:18:33:b7:24:71:e2:89:a4:0e:
                    60:b7:bf:82:53:1b:76:c4:96:1e:62:20:cf:32:86:
                    11:5c:24:0e:86:b0:c5:bf:41:41:b0:ad:4a:48:4d:
                    08:fb:4c:b4:b9:6e:5d:1b:71:75:04:3a:e2:4a:e6:
                    b9:33:82:07:1f:d7:41:13:31:1f:a5:1e:d0:1c:d7:
                    1e:4f:bb:64:b4:f2:c6:3d:7d:d5:a0:eb:43:37:26:
                    65:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:7F:19:57:B2:49:F1:35:6E:4C:EF:1D:F4:80:C7:0C:4C:28:94:F1
            X509v3 Authority Key Identifier:
                keyid:EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:2d:53:7e:66:f2:7b:12:e2:91:02:3a:f5:15:81:47:5a:4a:
         d3:4e:66:d2:f3:99:82:15:35:04:55:33:64:5f:6e:4d:14:0d:
         43:12:23:0c:cf:4d:29:f6:bd:33:ee:cc:e0:a8:a7:a6:b5:b3:
         13:f1:88:1c:9b:5c:0a:d2:7f:37:0e:66:78:bd:d4:95:3b:e3:
         f8:06:e3:7f:23:77:c1:7b:14:66:06:c1:1b:19:12:dd:85:44:
         b6:d4:47:25:cf:21:9a:d1:d8:ce:7c:cd:76:47:f8:96:c5:5f:
         2e:21:54:f3:80:14:5b:fc:26:ff:bc:cd:42:d4:56:6d:f3:26:
         6d:2f:6a:53:dc:5a:60:a5:b9:5b:c0:dd:0f:5f:cc:f1:de:b1:
         17:2b:f9:27:1b:32:9f:ec:1b:ba:10:1e:c9:ee:63:be:c7:ec:
         45:df:2c:65:71:59:01:dd:85:ca:14:4e:7c:a5:3b:40:9f:e4:
         4e:86:8d:cb:a1:4a:d2:53:39:b7:62:1d:29:a1:2f:d8:03:43:
         f8:7d:3c:60:94:d2:e1:2d:4b:6d:61:74:ff:63:20:22:b9:30:
         b7:db:87:9a:e7:bb:b3:e3:ae:76:fb:ec:20:ff:23:28:df:87:
         f6:2a:a9:56:d9:44:f6:b7:63:04:3a:d7:48:c3:98:c0:71:ac:
         8d:e3:1a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:42:59 2026 by rpki-client