Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
File:                     6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft (raw, json)
Hash identifier:          P26foBBI5I06U68GijuxJKKmpW+RwkH2wi6lVs1H4rQ=
Subject key identifier:   2D:15:D0:81:71:CF:69:26:00:D6:37:8B:55:82:89:41:5D:33:4D:7E
Authority key identifier: E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A
Certificate issuer:       /CN=A9171560/serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A
Certificate serial:       0D91
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
Manifest number:          0D85
Signing time:             Mon 02 Mar 2026 17:56:06 +0000
Manifest this update:     Mon 02 Mar 2026 17:56:06 +0000
Manifest next update:     Mon 09 Mar 2026 17:56:06 +0000
Files and hashes:         1: 6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl (hash: v55MlggSPHycdd9bm7LYP7jnyWkLN+ebnlShG+QG5GQ=)
                          2: 65AF30D422D211EAB3ABA447C4F9AE02.roa (hash: mEi1yyBBjQB47AmUbRYgPuxNDt10SIZ3Uh51JCDgmJY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl
                          rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 17:56:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3473 (0xd91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171560, serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A
        Validity
            Not Before: Mar  2 17:56:06 2026 GMT
            Not After : Mar  9 17:56:06 2026 GMT
        Subject: CN=69a5cf36-9b40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1e:7f:9a:80:61:e0:f3:8d:90:0d:1c:cc:46:
                    0e:db:5e:a7:e3:be:e4:45:7b:c9:c7:ed:45:bb:62:
                    b4:74:7f:be:27:3a:df:62:28:f0:d0:cd:f1:78:90:
                    03:c1:53:fd:3c:7e:dd:92:49:87:42:ac:7b:a8:13:
                    be:be:a5:63:4a:ec:91:45:b0:5b:19:f8:23:11:34:
                    dd:4e:3c:cd:77:92:66:14:8a:82:3e:e0:e5:d1:09:
                    cb:2e:c1:8e:6b:35:c9:0c:73:57:d0:b1:1a:38:74:
                    94:b5:77:21:f3:93:61:af:19:af:21:35:97:dd:a6:
                    1c:60:b6:d4:f3:98:8f:6e:88:94:da:3f:64:66:d2:
                    f6:0a:81:c2:3c:40:db:78:de:82:24:5a:34:96:65:
                    d4:7d:ce:0d:33:c2:e0:1d:c3:85:ba:49:8d:ba:f0:
                    db:ff:1a:3e:d0:54:d6:17:0b:59:01:af:e0:2c:64:
                    43:28:72:80:ff:b8:bd:5d:4a:1c:52:6c:8d:55:f1:
                    73:e2:c7:1f:12:c8:47:43:c5:bd:2b:3d:10:e8:a9:
                    89:e3:cc:b0:26:85:25:dc:14:5b:7b:a4:09:4d:a6:
                    55:c3:f2:4f:12:eb:f2:38:72:90:0a:96:90:4f:2e:
                    61:03:8e:ce:09:cc:74:9f:33:ea:f2:87:39:c6:26:
                    d0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:15:D0:81:71:CF:69:26:00:D6:37:8B:55:82:89:41:5D:33:4D:7E
            X509v3 Authority Key Identifier:
                keyid:E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:1f:6a:2a:c6:82:79:1c:05:00:bf:f6:b4:59:3c:04:54:6a:
         78:78:3e:ed:c5:0f:3a:cf:3b:85:b6:ea:57:bb:e4:35:54:6d:
         43:1a:11:2d:60:88:8e:23:f1:98:c1:56:91:a7:9e:d7:1e:3f:
         29:b1:e2:e1:1d:78:13:46:86:07:62:47:23:e4:6c:61:39:7a:
         b2:bf:cb:62:d1:09:22:8d:15:b6:0d:79:7f:f5:36:95:c4:08:
         5c:de:fd:41:31:2e:bd:f9:a4:f7:25:76:2c:82:5d:c0:b3:49:
         1f:cb:28:a5:4a:c7:40:02:2d:47:d4:c9:93:1b:ff:5f:c2:1f:
         65:29:19:b2:79:72:d5:3a:e7:5d:87:05:9e:c5:ad:d2:0f:19:
         f7:7b:97:e5:8c:5d:ac:3c:72:87:a1:f6:a3:8f:a3:c1:21:2f:
         da:96:ba:cc:cc:7c:ea:11:9d:8b:ac:4d:18:9f:6a:f0:a8:ef:
         21:99:0f:0d:41:f0:8b:f3:49:bd:7c:c5:ea:2d:bf:ef:32:76:
         09:a4:36:32:29:60:22:0d:c0:80:d9:39:3d:02:b8:fc:be:34:
         e9:1d:8c:f6:73:f4:aa:57:d4:3c:14:c2:eb:dc:a9:3e:e8:7f:
         a0:44:a6:9b:58:5e:06:9b:5d:a6:f4:65:a3:a7:a7:b0:d9:b6:
         6f:24:eb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:32:25 2026 by rpki-client