Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/6gVkmUSiQEI3ADp_i6QdjYQi5yE.mft
File:                     6gVkmUSiQEI3ADp_i6QdjYQi5yE.mft (raw, json)
Hash identifier:          oY228HmlZLSvDOnNhBKml1dZat+7Pc2yqnDvkzXP1qo=
Subject key identifier:   99:3B:DF:9B:15:1C:19:A1:9F:2B:24:3C:AD:B8:2F:0A:73:42:95:97
Authority key identifier: EA:05:64:99:44:A2:40:42:37:00:3A:7F:8B:A4:1D:8D:84:22:E7:21
Certificate issuer:       /CN=A911BE01/serialNumber=EA05649944A2404237003A7F8BA41D8D8422E721
Certificate serial:       84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6gVkmUSiQEI3ADp_i6QdjYQi5yE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/6gVkmUSiQEI3ADp_i6QdjYQi5yE.mft
Manifest number:          80
Signing time:             Sun 05 Apr 2026 07:05:53 +0000
Manifest this update:     Sun 05 Apr 2026 07:05:52 +0000
Manifest next update:     Sun 12 Apr 2026 07:05:52 +0000
Files and hashes:         1: 6gVkmUSiQEI3ADp_i6QdjYQi5yE.crl (hash: CUFx0z8e5YHjGbu2aRZnPzdeQWY/tka5MyOe4yNntcs=)
                          2: 8A2C40D474B911F08BA0CD37C4F9AE02.roa (hash: x1cJvjh7zdmg7T/0iUEkEcxMiM7lfkwPcQV8vAeDdfc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/6gVkmUSiQEI3ADp_i6QdjYQi5yE.crl
                          rsync://rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/6gVkmUSiQEI3ADp_i6QdjYQi5yE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6gVkmUSiQEI3ADp_i6QdjYQi5yE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:05:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BE01, serialNumber=EA05649944A2404237003A7F8BA41D8D8422E721
        Validity
            Not Before: Apr  5 07:05:52 2026 GMT
            Not After : Apr 12 07:05:52 2026 GMT
        Subject: CN=69d209d1-eadc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9e:21:1f:a7:32:1a:d6:df:94:d4:b5:89:71:
                    5c:3d:1c:a0:6a:33:11:5b:5b:0a:16:ec:6b:95:ea:
                    45:e2:d9:a3:cf:04:c8:f7:55:1c:c1:84:49:fa:a2:
                    f5:02:bd:a4:15:59:6c:94:ff:a2:27:45:1a:96:3d:
                    13:aa:62:b5:9c:f3:ca:9d:8f:18:02:f5:16:30:33:
                    02:99:4e:db:50:06:94:f4:81:ee:a5:cb:06:74:6f:
                    0d:86:ac:3c:db:9d:74:94:7e:22:c3:2b:68:09:23:
                    fb:dc:d3:06:77:a1:52:38:f3:23:12:af:13:3f:35:
                    28:54:d7:73:c3:0d:94:76:ea:65:c2:dc:4b:ba:f7:
                    1a:ac:26:de:52:21:da:3f:76:8c:46:f2:7b:95:6d:
                    ff:e4:bf:d7:58:6a:b7:fb:96:b4:30:e8:05:24:8f:
                    38:5d:d9:5d:7d:36:e0:eb:76:91:29:52:68:36:2d:
                    02:f0:a9:f7:0c:ed:fb:d5:de:56:e2:1e:da:8d:8f:
                    3d:a1:ad:7b:e9:45:85:81:67:44:a0:26:56:01:e7:
                    96:43:17:43:17:d0:95:04:a5:d0:ef:d9:52:67:82:
                    7a:7a:1a:a2:2d:99:e8:8b:d4:b4:2e:6d:cc:12:8c:
                    59:d9:03:96:9a:a7:38:78:58:9e:bd:b0:37:ca:5e:
                    4d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:3B:DF:9B:15:1C:19:A1:9F:2B:24:3C:AD:B8:2F:0A:73:42:95:97
            X509v3 Authority Key Identifier:
                keyid:EA:05:64:99:44:A2:40:42:37:00:3A:7F:8B:A4:1D:8D:84:22:E7:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/6gVkmUSiQEI3ADp_i6QdjYQi5yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6gVkmUSiQEI3ADp_i6QdjYQi5yE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/6gVkmUSiQEI3ADp_i6QdjYQi5yE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:38:f7:a1:b2:fb:c0:92:3d:ee:78:bd:7d:b0:27:13:a7:5d:
         cd:90:d1:5f:11:87:66:5d:ea:71:e3:3e:e1:f6:3d:21:4e:0a:
         5e:b8:af:9e:2d:4b:a1:d0:82:fc:e4:3c:84:0f:1c:0f:a1:b3:
         aa:66:b8:f0:5b:7b:cd:6a:d9:65:db:b2:15:77:ec:36:f0:ae:
         0a:14:0c:89:32:9d:ab:97:99:d3:a8:fc:63:a0:0a:e2:70:61:
         61:b5:63:ec:04:d3:42:55:66:47:45:4b:a1:cc:85:7c:30:4e:
         98:be:ed:41:1a:66:12:b4:d8:5f:13:62:99:28:14:90:a8:60:
         27:c5:5d:b8:a1:95:07:f7:e6:da:b8:bb:cf:2d:43:f2:bd:2c:
         7a:a9:51:1c:76:e3:11:75:72:9c:cc:b6:dc:e7:45:89:8a:69:
         15:c4:71:e6:6f:e0:8e:1f:16:0b:24:9b:fa:81:e6:a8:18:23:
         c1:6f:37:6c:8c:0e:29:f2:08:45:07:11:fa:77:42:01:81:8e:
         96:84:3f:ef:6a:2f:68:dd:97:0a:a5:ab:39:ae:fa:22:70:2f:
         c8:14:84:fc:33:0f:b8:fd:60:21:8b:09:87:9c:35:a0:40:c0:
         0f:aa:39:bf:ae:f1:43:43:54:ad:fb:11:7d:a6:8b:bc:db:43:
         a8:23:a8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:29:13 2026 by rpki-client