Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
File:                     6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft (raw, json)
Hash identifier:          1z7/sCjwFgsDgS3/duE9XNaOFD7n+u7OdD+lmPu6iO0=
Subject key identifier:   52:46:08:CF:77:B6:7B:EA:5B:F4:08:BD:9B:81:77:2B:80:96:60:B1
Authority key identifier: E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A
Certificate issuer:       /CN=A9171560/serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A
Certificate serial:       0DAD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
Manifest number:          0DA0
Signing time:             Sat 18 Apr 2026 17:51:17 +0000
Manifest this update:     Sat 18 Apr 2026 17:51:17 +0000
Manifest next update:     Sat 25 Apr 2026 17:51:17 +0000
Files and hashes:         1: 6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl (hash: Wow78iruZYVqT4V0ozuiU2wshlqXaqcJbRwhBB6JYnQ=)
                          2: 65AF30D422D211EAB3ABA447C4F9AE02.roa (hash: aQ8cA00GJjluwPOIwcjxSsjlMHR7a0I4vLY3lPAB7wU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl
                          rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3501 (0xdad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171560, serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A
        Validity
            Not Before: Apr 18 17:51:17 2026 GMT
            Not After : Apr 25 17:51:17 2026 GMT
        Subject: CN=69e3c495-a006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b7:b7:22:8c:07:73:76:d9:57:3d:26:b3:39:
                    9c:46:b4:66:7b:0e:37:93:ec:1e:38:48:c0:93:bc:
                    f8:4b:76:a0:b3:57:8f:b3:72:14:63:f8:49:b2:42:
                    71:10:24:7d:45:42:d5:30:4f:8c:a0:c3:19:60:f9:
                    a3:33:c8:53:cd:84:c8:8b:38:ae:0b:ec:34:38:be:
                    31:23:ae:18:a9:92:9c:ba:31:f2:3c:51:69:3f:2f:
                    50:3d:f5:6c:e8:7f:f8:6c:cd:f2:ce:3c:a4:f3:cc:
                    66:10:36:31:10:5b:99:4c:03:ee:01:4c:22:9c:8c:
                    e8:43:d2:91:82:99:9b:d6:26:39:01:26:53:0a:96:
                    71:44:a7:09:98:a7:38:e2:11:4e:7d:0c:e1:00:13:
                    0d:f8:5d:18:1c:0e:ec:76:6a:f0:e9:da:08:40:7f:
                    c7:c0:61:69:2d:22:cd:0e:39:5b:3d:dc:f7:40:9f:
                    d9:15:51:e0:ac:c6:80:9d:ad:bd:23:3f:32:0b:eb:
                    9e:43:68:53:3d:67:0a:1d:bd:3d:23:99:3b:f7:31:
                    64:cc:26:9b:9c:48:a6:25:b2:28:30:59:cb:f7:a0:
                    5c:40:74:48:ad:ae:31:84:20:87:7c:6a:c5:db:4a:
                    00:2f:d7:99:34:42:4b:b6:9d:1e:f7:6d:f7:3e:c2:
                    73:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:46:08:CF:77:B6:7B:EA:5B:F4:08:BD:9B:81:77:2B:80:96:60:B1
            X509v3 Authority Key Identifier:
                keyid:E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:73:c1:b6:3c:ce:1f:0f:d2:19:7c:e3:a7:e5:0c:0b:51:d3:
         72:05:fb:39:cd:5c:26:77:8e:73:2a:a6:76:a0:ec:4f:8a:bb:
         e7:58:23:7c:95:94:51:de:5d:f1:56:93:b1:9d:5e:9a:73:66:
         cd:39:1a:34:9a:13:c0:09:66:db:60:22:2b:27:ee:c8:dd:76:
         68:cf:83:94:d5:a2:4c:ce:ac:3c:4b:5a:d5:cd:29:b6:55:be:
         07:46:be:d1:fb:aa:aa:88:63:90:24:3a:ce:ad:62:c2:da:fd:
         9a:59:60:9b:d3:8a:d3:ab:67:c7:70:70:2a:f1:14:a2:98:ea:
         73:59:32:03:80:28:d8:2b:01:a8:66:f8:9f:67:ee:e5:89:3f:
         fc:d0:51:f0:2e:23:1e:58:93:b7:3f:48:86:69:fe:20:84:77:
         3b:03:8d:79:bf:ce:7c:34:33:89:25:6f:ef:b3:37:db:8c:c9:
         1d:80:e1:05:cd:d3:c1:0e:85:90:78:71:da:26:ac:f4:80:31:
         a2:54:f6:4d:6b:3a:b8:d9:58:de:f1:99:88:be:cc:d7:9a:22:
         e3:a1:87:f2:bb:ac:81:5a:c1:03:93:3f:dc:05:d9:e3:43:6f:
         d2:68:1c:cf:f0:9b:e1:a2:5b:fe:11:0b:1d:ee:21:f3:57:ec:
         b2:e6:7f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:08:21 2026 by rpki-client