Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E01/4FC13EE0CF5911F08492DD11C4F9AE02/RC6qL6yoXGzvgcRKZaY36GftNTQ.mft
File:                     RC6qL6yoXGzvgcRKZaY36GftNTQ.mft (raw, json)
Hash identifier:          CFdHYo0fBz6R0Qsx+a6W6FPDrTei8kkLSj68HJHgbyk=
Subject key identifier:   08:6B:12:B5:2D:3E:DD:D5:59:B8:96:DD:24:83:CA:84:83:7E:FA:50
Authority key identifier: 44:2E:AA:2F:AC:A8:5C:6C:EF:81:C4:4A:65:A6:37:E8:67:ED:35:34
Certificate issuer:       /CN=A9145E01/serialNumber=442EAA2FACA85C6CEF81C44A65A637E867ED3534
Certificate serial:       34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RC6qL6yoXGzvgcRKZaY36GftNTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145E01/4FC13EE0CF5911F08492DD11C4F9AE02/RC6qL6yoXGzvgcRKZaY36GftNTQ.mft
Manifest number:          32
Signing time:             Tue 03 Mar 2026 08:18:18 +0000
Manifest this update:     Tue 03 Mar 2026 08:18:18 +0000
Manifest next update:     Tue 10 Mar 2026 08:18:18 +0000
Files and hashes:         1: RC6qL6yoXGzvgcRKZaY36GftNTQ.crl (hash: 8awBBikqoW+MZOs1KODVTFVLkjzBhEBmqRrzk8pFIpc=)
                          2: 042373B2CF5A11F08A42EF16C4F9AE02.roa (hash: /V6x4/J7dT8+4qvJXKi5Qse6OJ2IiykeCNzqSWmhWeM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145E01/4FC13EE0CF5911F08492DD11C4F9AE02/RC6qL6yoXGzvgcRKZaY36GftNTQ.crl
                          rsync://rpki.apnic.net/member_repository/A9145E01/4FC13EE0CF5911F08492DD11C4F9AE02/RC6qL6yoXGzvgcRKZaY36GftNTQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RC6qL6yoXGzvgcRKZaY36GftNTQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 08:18:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145E01, serialNumber=442EAA2FACA85C6CEF81C44A65A637E867ED3534
        Validity
            Not Before: Mar  3 08:18:18 2026 GMT
            Not After : Mar 10 08:18:18 2026 GMT
        Subject: CN=69a6994a-6e98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f5:cb:68:3b:26:30:35:26:3d:b7:eb:9f:53:
                    66:54:02:3a:88:e5:8a:a5:a6:71:fd:74:0d:72:69:
                    72:0b:1b:d4:b5:47:5a:81:d0:b6:25:08:c1:db:ce:
                    8c:35:32:c3:d1:61:17:65:1d:1b:3b:74:5e:09:d8:
                    db:f8:4a:d3:8a:85:17:28:2a:c4:76:4a:96:99:30:
                    42:2b:d7:9b:6c:44:be:62:2c:ba:da:2d:aa:c4:5f:
                    08:78:d8:96:52:9d:69:e8:a9:88:c4:90:e4:12:2f:
                    a0:8c:68:5e:d9:1f:87:d8:e8:32:cf:19:39:36:15:
                    74:48:7e:b2:56:4d:c1:fb:00:29:c0:ad:c2:59:0b:
                    19:a1:ba:65:72:bb:63:17:2b:a2:48:4a:f0:59:47:
                    9e:3d:71:0d:32:8a:4c:4c:66:b6:8f:c2:79:ca:92:
                    b7:6d:c8:6d:26:4c:24:14:2c:91:19:d9:9d:7a:06:
                    14:ae:00:ea:33:93:80:0a:32:26:a8:28:61:46:7c:
                    d6:5b:af:da:89:40:50:ef:1c:d1:a7:9f:94:f3:cd:
                    b1:81:51:c3:7c:f5:b1:21:ad:d1:97:ef:b3:c5:73:
                    0e:e9:13:c9:07:82:4b:a5:a1:a9:8e:68:71:b7:46:
                    38:a4:57:e8:e2:a1:c0:98:65:45:91:f9:fc:0e:19:
                    fd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:6B:12:B5:2D:3E:DD:D5:59:B8:96:DD:24:83:CA:84:83:7E:FA:50
            X509v3 Authority Key Identifier:
                keyid:44:2E:AA:2F:AC:A8:5C:6C:EF:81:C4:4A:65:A6:37:E8:67:ED:35:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145E01/4FC13EE0CF5911F08492DD11C4F9AE02/RC6qL6yoXGzvgcRKZaY36GftNTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RC6qL6yoXGzvgcRKZaY36GftNTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E01/4FC13EE0CF5911F08492DD11C4F9AE02/RC6qL6yoXGzvgcRKZaY36GftNTQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:fc:b6:64:7a:a1:3e:3b:ec:03:df:d4:5b:53:82:c0:11:e3:
         cb:f5:3b:ca:8b:7a:7d:88:6c:16:a7:43:74:db:b0:3e:8d:f4:
         1e:6f:b7:d4:47:f9:9a:76:9b:25:b4:36:9f:fc:66:f3:c2:39:
         e4:37:22:94:06:cb:ed:2c:e0:3f:ef:76:9b:eb:b4:3e:f3:c5:
         03:aa:68:f4:d7:13:16:66:3a:32:84:08:b7:d9:e5:7b:81:85:
         50:77:c8:95:8b:3a:74:99:e7:e5:73:ae:1e:b4:de:ce:10:dc:
         c1:85:0d:0b:d6:da:bd:ef:55:07:fd:47:81:e7:c0:bc:c3:d5:
         94:59:da:91:93:1a:d1:98:ce:e6:b6:46:38:08:7c:ab:ba:b9:
         7c:cb:c6:04:b5:47:93:b2:f3:61:c1:97:59:ff:13:5f:77:5f:
         0c:8d:cd:92:89:7a:14:67:86:53:db:01:2e:f7:a3:1f:e2:be:
         17:af:3d:89:30:53:92:23:a5:a9:b8:26:67:4a:1a:3b:dc:ea:
         61:c2:98:51:09:c4:40:cb:4c:68:7d:27:7f:4e:3e:14:f0:dd:
         57:f2:ec:da:c2:1f:9a:a3:e7:9e:b2:c4:bb:b2:a2:ad:d4:07:
         eb:ba:97:94:76:23:e2:e9:2f:9b:50:e8:a7:06:4c:25:09:ac:
         a1:97:6c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 16:06:34 2026 by rpki-client