Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.mft
File:                     i6r6xGXwjQR9LXCUulKA19OYg2Y.mft (raw, json)
Hash identifier:          aFCOMYlx0u528NUH3y5mOIN+75hl/ahquDk8JxSs8yA=
Subject key identifier:   3A:02:DF:A0:54:C5:8C:7D:61:FC:17:8E:3D:DC:3F:69:D7:E6:74:59
Authority key identifier: 8B:AA:FA:C4:65:F0:8D:04:7D:2D:70:94:BA:52:80:D7:D3:98:83:66
Certificate issuer:       /CN=A917C716/serialNumber=8BAAFAC465F08D047D2D7094BA5280D7D3988366
Certificate serial:       031B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6r6xGXwjQR9LXCUulKA19OYg2Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.mft
Manifest number:          0511
Signing time:             Sun 05 Apr 2026 00:58:44 +0000
Manifest this update:     Sun 05 Apr 2026 00:58:44 +0000
Manifest next update:     Sun 12 Apr 2026 00:58:44 +0000
Files and hashes:         1: i6r6xGXwjQR9LXCUulKA19OYg2Y.crl (hash: RR8s2BqZ3FwHqj/A3D7mx/dr7Rxa73X/r7+QtB5yPEo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.crl
                          rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6r6xGXwjQR9LXCUulKA19OYg2Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 00:58:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 795 (0x31b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C716, serialNumber=8BAAFAC465F08D047D2D7094BA5280D7D3988366
        Validity
            Not Before: Apr  5 00:58:44 2026 GMT
            Not After : Apr 12 00:58:44 2026 GMT
        Subject: CN=69d1b3c4-3152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:60:95:a9:f0:42:f2:e9:3a:53:51:6c:bd:99:
                    82:cf:af:ce:9d:cb:a8:dd:54:01:46:7b:52:e9:7e:
                    8c:26:b0:eb:c4:c6:15:81:90:c1:7c:7b:86:82:fa:
                    cc:c3:68:3b:c5:a1:7f:04:21:01:73:32:9a:1d:0e:
                    9c:c3:9d:76:1d:17:a8:70:67:06:cf:f3:3e:9d:44:
                    00:e2:6f:53:b1:c0:74:ff:3b:4a:41:e5:aa:c3:64:
                    6d:3b:94:ac:79:e8:1c:2e:0f:8f:80:96:b1:a4:2d:
                    0e:7b:51:a6:81:3a:06:01:2f:5f:42:31:96:a0:2b:
                    0c:ac:40:34:a3:a5:27:8b:a5:de:f4:f4:ed:bb:3a:
                    5b:0a:1c:b9:eb:9e:1c:a6:42:1c:c3:54:a6:23:9b:
                    6f:c5:85:9c:1b:5d:60:33:ab:73:ec:3d:f5:01:64:
                    23:44:86:0c:e0:16:1b:bd:71:82:64:ea:53:e1:39:
                    f0:c0:20:ac:54:74:fa:2d:07:c2:eb:fa:43:70:be:
                    a5:2e:d7:70:30:04:ba:ed:8b:80:eb:57:26:9c:c3:
                    e4:87:b1:91:a6:0b:6e:17:f5:86:ca:23:e6:65:2b:
                    e5:ab:7d:22:16:05:f6:69:cc:f1:92:f2:34:69:41:
                    85:46:12:55:38:80:35:e6:18:7a:45:0b:5c:35:d6:
                    29:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:02:DF:A0:54:C5:8C:7D:61:FC:17:8E:3D:DC:3F:69:D7:E6:74:59
            X509v3 Authority Key Identifier:
                keyid:8B:AA:FA:C4:65:F0:8D:04:7D:2D:70:94:BA:52:80:D7:D3:98:83:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6r6xGXwjQR9LXCUulKA19OYg2Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:c8:c6:d6:07:af:fb:d7:70:cb:83:2c:4c:77:04:f1:42:4f:
         19:ad:3f:f0:15:83:09:6f:86:a1:36:74:4f:a8:40:4f:57:a6:
         e8:94:09:2c:e8:4b:7d:07:39:03:cc:67:60:6d:b1:36:b4:6c:
         e3:95:f1:c2:1d:f7:c9:dc:19:ce:62:87:78:47:c2:30:75:df:
         06:87:e9:41:2f:e9:80:30:46:e1:d8:c3:e9:33:8c:75:11:b1:
         38:28:3d:f8:9e:aa:8a:48:25:b5:60:01:33:0d:ea:e8:0b:e1:
         bf:2c:43:f7:f3:75:b0:a5:5f:e5:e2:d0:34:f9:04:24:47:06:
         68:e7:26:b9:e0:5f:29:4d:09:32:8d:8e:b5:69:e8:5b:66:78:
         e0:d2:d9:c0:69:8c:94:9f:d0:9b:d5:11:4c:f5:93:70:ee:ac:
         26:73:1c:9f:7e:9f:eb:49:d4:44:e0:3b:f2:c9:ae:66:80:1d:
         d5:1e:d4:dd:1a:5b:95:9c:85:d4:a1:0b:d7:29:c2:e0:d9:3a:
         17:56:bb:74:99:f5:2e:02:98:20:89:39:85:1e:47:93:a0:f7:
         1e:5c:22:66:26:e1:80:4a:9f:66:88:09:71:d1:78:dd:80:af:
         53:23:2e:e8:b7:09:8a:83:d8:77:7e:95:ac:ce:76:47:95:5c:
         6c:01:5e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:55:21 2026 by rpki-client