Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft
File:                     6GcXUDRPGMKvdH_68lWFDrx50B8.mft (raw, json)
Hash identifier:          SgNIar+N6M+eCt2xJ09MPqVM9C+TO65TKx/IKvuuvb8=
Subject key identifier:   CD:CD:50:22:FF:F4:95:E5:E4:F3:9C:47:F4:B6:B6:F3:ED:F9:C1:3A
Authority key identifier: E8:67:17:50:34:4F:18:C2:AF:74:7F:FA:F2:55:85:0E:BC:79:D0:1F
Certificate issuer:       /CN=A9114DDF/serialNumber=E8671750344F18C2AF747FFAF255850EBC79D01F
Certificate serial:       0431
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft
Manifest number:          0423
Signing time:             Sun 05 Apr 2026 00:09:12 +0000
Manifest this update:     Sun 05 Apr 2026 00:09:11 +0000
Manifest next update:     Sun 12 Apr 2026 00:09:11 +0000
Files and hashes:         1: 6GcXUDRPGMKvdH_68lWFDrx50B8.crl (hash: P3SWsYp8rmwJRn0pZ9d+vI/NSpCnV4rbZdnoBahR8gc=)
                          2: FF46137EA51C11EC8394365BC4F9AE02.roa (hash: iuWH4XsJsz0loBqcOc0cY5MFt/NYR3pQCRGo6mfAtWM=)
                          3: FFFC26F0A51C11EC8394365BC4F9AE02.roa (hash: azSQvrLGixSL3oYOq7/u81UYo4j8paDDRGJYii7YcF0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.crl
                          rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 00:09:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1073 (0x431)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114DDF, serialNumber=E8671750344F18C2AF747FFAF255850EBC79D01F
        Validity
            Not Before: Apr  5 00:09:11 2026 GMT
            Not After : Apr 12 00:09:11 2026 GMT
        Subject: CN=69d1a828-6122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:96:e7:0b:57:b9:ea:f2:0a:25:1a:1f:af:60:
                    10:4b:7f:98:f6:14:35:fa:a3:2d:bc:9f:ba:6b:5b:
                    a9:47:00:77:d8:d9:23:6a:32:14:2c:59:6b:ed:30:
                    c3:a3:d1:5c:e3:4e:7f:c9:65:31:2d:5b:74:26:19:
                    02:31:3f:2d:32:c5:13:b4:ed:29:f2:ac:05:b8:3a:
                    ae:0d:e2:89:f9:70:89:68:e6:15:5e:c6:41:10:29:
                    39:41:8b:a2:5d:77:37:cf:fc:f2:94:94:66:9c:64:
                    dd:6d:55:c8:76:35:63:77:c9:0a:4b:5b:b6:82:2b:
                    a1:ec:e3:34:ef:68:b6:5e:0c:8e:55:6a:fd:d2:fb:
                    fc:e5:39:7f:2d:ca:0d:c6:10:71:05:61:b9:b9:24:
                    82:b2:8a:52:6f:c0:31:f9:f7:78:4c:1b:25:9b:d4:
                    aa:ed:3a:3f:31:d8:8a:58:58:aa:2d:9f:04:aa:e8:
                    1c:47:3d:76:01:97:2d:8d:76:ee:fd:ac:e1:a3:9d:
                    da:b4:e6:ba:7a:6f:3d:45:cb:72:cb:84:6a:e1:8d:
                    5e:82:92:65:68:20:14:17:f5:e3:9b:cc:00:a2:01:
                    e3:5a:08:de:79:34:fa:69:a4:1a:69:8c:c3:7c:27:
                    a6:98:d3:7e:a4:f0:12:81:f7:89:f2:26:23:44:18:
                    df:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CD:50:22:FF:F4:95:E5:E4:F3:9C:47:F4:B6:B6:F3:ED:F9:C1:3A
            X509v3 Authority Key Identifier:
                keyid:E8:67:17:50:34:4F:18:C2:AF:74:7F:FA:F2:55:85:0E:BC:79:D0:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:f1:ac:73:63:c9:15:99:26:e4:03:3b:6b:5b:48:74:44:c6:
         6e:71:14:cd:da:95:0c:ac:ab:7f:7c:e7:96:7c:83:e8:9a:4f:
         f8:8d:dc:e0:f2:f8:fb:e6:48:91:3c:58:de:90:ee:b0:4a:ea:
         a6:c5:e2:a5:75:9c:3f:a2:3d:45:a8:42:52:96:1e:f1:0e:12:
         94:66:c1:7d:c6:09:6a:f4:87:bf:88:59:27:11:f4:fe:25:57:
         88:1d:8a:b3:c7:53:c6:a7:cf:a8:d8:f5:01:97:25:fd:5e:21:
         28:3b:09:41:f8:b1:90:e6:16:ea:63:88:3f:6c:b7:37:a9:c6:
         85:11:ca:c7:21:0b:b6:cd:7a:ae:8e:07:76:1e:a5:6e:ac:8c:
         2f:9b:34:3c:a5:8f:94:d0:e1:7c:79:7d:4c:c7:6e:1e:a4:d3:
         e2:85:f5:b2:48:b2:34:fd:fd:89:b5:0f:77:49:58:1b:87:5c:
         13:e5:36:17:f5:24:55:48:ae:5e:aa:32:99:40:57:ec:8a:54:
         46:a2:86:e5:20:02:7a:d9:4d:0a:14:8e:ce:e4:1b:8c:f3:57:
         69:d6:bd:da:ff:4d:1a:57:1e:0b:09:61:9e:b5:21:9f:42:b3:
         56:62:a0:af:26:16:5f:8c:2f:0c:aa:b4:8c:ad:69:2d:27:ed:
         38:e4:49:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:10:10 2026 by rpki-client