Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft
File:                     6XH_tEATQSECHGJem3DrGuWij2A.mft (raw, json)
Hash identifier:          2uzxNT5FOjTc3JCJJzK8r+r5EOghwFO41NXOKUxI+X8=
Subject key identifier:   A2:9B:E3:26:6C:00:BB:35:DB:2F:8C:D8:45:8F:C4:11:77:A2:F5:8E
Authority key identifier: E9:71:FF:B4:40:13:41:21:02:1C:62:5E:9B:70:EB:1A:E5:A2:8F:60
Certificate issuer:       /CN=A911EDE5/serialNumber=E971FFB440134121021C625E9B70EB1AE5A28F60
Certificate serial:       0DFF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft
Manifest number:          0DF3
Signing time:             Wed 20 May 2026 17:52:42 +0000
Manifest this update:     Wed 20 May 2026 17:52:41 +0000
Manifest next update:     Wed 27 May 2026 17:52:41 +0000
Files and hashes:         1: 6XH_tEATQSECHGJem3DrGuWij2A.crl (hash: RachQCy6oBBXfTtoYnH8I396G9msyu43faIyWSG1HTY=)
                          2: 89D124B6D51311E98A41293BC4F9AE02.roa (hash: MCiCoDcn9iWsMnw+W4ic1bgrDj5hNzV2NifUiMBx2Ro=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.crl
                          rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 17:52:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3583 (0xdff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EDE5, serialNumber=E971FFB440134121021C625E9B70EB1AE5A28F60
        Validity
            Not Before: May 20 17:52:41 2026 GMT
            Not After : May 27 17:52:41 2026 GMT
        Subject: CN=6a0df4e9-0215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:80:94:28:65:d5:bd:4d:99:8c:b6:82:c1:7c:
                    0b:4a:01:97:d6:6a:bb:0d:f2:88:2a:ef:bf:fe:7e:
                    77:15:cc:28:51:d3:62:74:ee:7f:f4:26:ca:2d:9b:
                    44:be:d7:ef:3f:f3:bc:6e:c6:d8:74:b5:50:47:c4:
                    de:50:49:ad:e8:26:1b:62:90:82:34:ec:2c:ee:f5:
                    15:bf:e5:43:38:1e:90:a0:e2:4f:88:c3:01:ed:da:
                    46:be:31:e1:50:92:5f:86:c3:01:04:e8:a7:13:fc:
                    31:99:6c:7c:73:f7:ed:6d:3b:88:f7:2d:af:19:38:
                    53:3e:8b:61:c7:56:18:b2:c9:6f:58:24:8f:8a:9e:
                    43:00:24:a6:82:eb:84:af:6b:72:35:98:21:00:87:
                    dd:25:ac:6d:61:14:0a:9b:02:3b:9a:5e:f8:4b:84:
                    95:2a:61:48:75:44:68:b5:b5:b6:b8:35:e5:f7:56:
                    f7:10:54:a0:7b:47:5b:ea:a0:af:6b:95:7f:39:bd:
                    c5:10:4c:cb:8d:89:d7:eb:7e:92:37:2e:3f:eb:42:
                    3b:59:80:c0:52:89:2f:9f:8e:13:84:6b:b3:72:bc:
                    99:18:b8:2d:19:ce:0a:c5:f1:ec:2c:77:5c:dc:89:
                    69:5e:04:bb:c6:f6:08:3b:98:bf:b4:5d:f6:9c:11:
                    ee:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:9B:E3:26:6C:00:BB:35:DB:2F:8C:D8:45:8F:C4:11:77:A2:F5:8E
            X509v3 Authority Key Identifier:
                keyid:E9:71:FF:B4:40:13:41:21:02:1C:62:5E:9B:70:EB:1A:E5:A2:8F:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:f2:e7:70:ef:b6:6e:e8:08:f6:c1:bf:de:12:f2:a7:75:20:
         7c:75:f6:16:18:9e:fa:04:62:6d:70:5e:ca:b6:26:1c:f6:34:
         d7:54:5d:00:de:90:fd:03:52:5f:8b:38:5d:29:55:8b:d4:a5:
         a0:89:b5:a0:50:1d:f7:49:1c:cf:10:ff:7a:d4:4a:19:b2:bf:
         33:f1:44:64:88:69:92:1e:4c:2e:55:89:86:86:a3:4c:4e:8b:
         8a:08:d1:f2:45:3e:eb:50:c1:ea:a0:27:6c:e4:d5:7b:47:ae:
         82:e0:7a:e5:1a:56:c8:82:3c:af:22:e5:bc:52:21:6a:e2:8e:
         97:a7:6d:6f:a1:0f:92:95:e8:5a:08:38:f3:1e:0d:e7:e6:67:
         f8:fb:18:11:98:a6:c4:84:98:41:62:36:0e:3a:ba:77:81:00:
         bd:13:66:a9:8d:a7:1e:d3:46:27:56:1f:03:24:00:d2:4a:f0:
         6f:af:d4:55:5c:2d:d3:4a:32:dd:a6:15:a8:27:b2:e7:bb:92:
         ed:a9:8d:18:f3:62:0d:3f:89:d5:87:29:a5:4a:89:e4:44:4e:
         22:07:e8:9d:3c:d0:f7:5e:4a:4a:45:74:ac:4f:9e:62:d1:bf:
         37:ef:7e:10:67:02:a7:ba:76:98:4f:10:42:70:c2:7b:f6:da:
         fe:2d:c5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:39 2026 by rpki-client