Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/E6R11r48LHrEqN03EGaqbAF0-j0.mft
File:                     E6R11r48LHrEqN03EGaqbAF0-j0.mft (raw, json)
Hash identifier:          kqSeY4QJhnElWjzSE89QfyoHXyqMC9sIqYK57CzahYQ=
Subject key identifier:   79:F1:75:A0:19:41:2C:F5:87:F3:65:14:B2:91:3C:4D:58:F3:E2:D9
Authority key identifier: 13:A4:75:D6:BE:3C:2C:7A:C4:A8:DD:37:10:66:AA:6C:01:74:FA:3D
Certificate issuer:       /CN=A91CA141/serialNumber=13A475D6BE3C2C7AC4A8DD371066AA6C0174FA3D
Certificate serial:       09DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E6R11r48LHrEqN03EGaqbAF0-j0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/E6R11r48LHrEqN03EGaqbAF0-j0.mft
Manifest number:          09D5
Signing time:             Sat 04 Apr 2026 19:41:44 +0000
Manifest this update:     Sat 04 Apr 2026 19:41:43 +0000
Manifest next update:     Sat 11 Apr 2026 19:41:43 +0000
Files and hashes:         1: E6R11r48LHrEqN03EGaqbAF0-j0.crl (hash: +V2h5qJpExHpGoJFRN5rxULQE29B6U17WETykdTEcII=)
                          2: 6B576C449E5711EABC193842C4F9AE02.roa (hash: SVzX59W+CPv65LLMpCc6LvlXAGdMvOIsb6gRbCn0mAA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/E6R11r48LHrEqN03EGaqbAF0-j0.crl
                          rsync://rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/E6R11r48LHrEqN03EGaqbAF0-j0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E6R11r48LHrEqN03EGaqbAF0-j0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 19:41:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2526 (0x9de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA141, serialNumber=13A475D6BE3C2C7AC4A8DD371066AA6C0174FA3D
        Validity
            Not Before: Apr  4 19:41:43 2026 GMT
            Not After : Apr 11 19:41:43 2026 GMT
        Subject: CN=69d16977-b29e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d7:97:5d:a6:cc:a9:88:ce:36:a4:f8:74:d2:
                    a1:4c:22:0f:27:c1:8a:34:15:a2:b4:d4:3b:65:fb:
                    60:95:ed:b1:45:25:71:fc:f1:83:64:d1:f4:63:01:
                    55:90:61:7c:ec:2c:ed:64:a4:62:fb:4b:1a:4d:c7:
                    a7:57:05:3d:7f:4c:69:5f:33:9e:e3:e0:53:8f:d1:
                    e9:af:71:b5:8a:07:61:28:17:94:c7:cc:1d:64:c7:
                    c4:cb:bd:bb:db:35:6b:c4:bf:c8:28:b9:c4:94:69:
                    bc:cf:e5:f1:0f:db:d8:2c:29:1d:8e:b3:1f:67:c7:
                    d9:61:a5:8b:5f:d0:fa:74:1d:0a:f7:11:44:73:e5:
                    aa:e1:61:6d:c0:85:5b:c1:68:f1:cf:52:32:40:cd:
                    5b:36:23:21:d6:11:e9:37:ce:94:c0:54:76:94:be:
                    df:1f:72:7a:5c:10:33:73:fc:f1:5a:55:a0:b2:38:
                    74:89:1f:32:d8:2f:34:51:00:84:b3:a1:4b:5f:fe:
                    98:6c:a7:36:0d:80:0d:02:ee:0f:92:e7:fd:d1:2c:
                    7c:dc:b1:c5:a9:9b:01:b2:8c:be:0e:e1:82:48:e4:
                    ee:79:6c:db:58:6c:1b:fd:f7:22:6e:04:ac:00:f5:
                    07:36:47:56:c9:8b:be:ef:1d:75:13:64:ec:9a:dd:
                    08:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F1:75:A0:19:41:2C:F5:87:F3:65:14:B2:91:3C:4D:58:F3:E2:D9
            X509v3 Authority Key Identifier:
                keyid:13:A4:75:D6:BE:3C:2C:7A:C4:A8:DD:37:10:66:AA:6C:01:74:FA:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/E6R11r48LHrEqN03EGaqbAF0-j0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E6R11r48LHrEqN03EGaqbAF0-j0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/E6R11r48LHrEqN03EGaqbAF0-j0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:43:f6:17:ee:dc:fd:9f:c4:ef:19:a4:89:d9:35:a1:72:07:
         4f:10:d4:f4:34:d4:45:40:b9:6d:4c:90:39:8c:f5:f7:6f:e1:
         06:76:b3:2b:ae:20:e1:c5:29:c5:b8:33:47:c9:69:2d:ed:99:
         e6:5f:c5:51:99:bb:62:40:e2:c4:21:80:40:f9:58:f8:04:28:
         85:20:e3:93:22:05:41:5e:27:3a:c6:5c:26:1d:70:59:6a:59:
         2b:3d:ef:2a:20:07:fb:99:af:07:6b:4e:d6:33:9d:d9:f5:a0:
         dc:3a:bf:fd:a4:fa:37:4d:20:98:98:df:e9:db:1b:63:82:d3:
         02:70:46:0b:b1:a5:3a:42:fe:6f:64:0b:a7:0f:39:6c:ba:20:
         4a:e5:36:5f:a9:1b:16:a9:9e:ed:2b:44:7e:e0:b8:6a:ed:d3:
         50:2a:10:e3:92:b2:63:a2:a2:ff:9a:94:7a:b5:11:8a:a5:ea:
         b6:02:7d:1a:9f:2d:0e:13:39:b9:a5:ae:34:ca:b5:4d:ef:51:
         fa:d5:fa:01:85:7b:cd:fc:65:99:3b:3d:f4:ce:27:2a:63:c7:
         5a:92:22:b0:22:dd:39:29:c6:6c:0d:51:44:08:5e:19:5e:cd:
         07:d6:8d:e3:48:3b:da:f4:dc:f1:08:09:15:14:10:ba:7e:ed:
         e1:f0:cf:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:50:48 2026 by rpki-client