Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
File:                     6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft (raw, json)
Hash identifier:          IFsjZOv16VF+j6ffEEjxPifCawGIYme3BfLMDD3EH7A=
Subject key identifier:   D6:64:CA:92:24:6E:F8:27:00:D7:E3:E5:01:40:71:AC:8C:5E:2B:0B
Authority key identifier: E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14
Certificate issuer:       /CN=A917CBD7/serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14
Certificate serial:       0B4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
Manifest number:          0B25
Signing time:             Thu 14 May 2026 19:21:21 +0000
Manifest this update:     Thu 14 May 2026 19:21:20 +0000
Manifest next update:     Thu 21 May 2026 19:21:20 +0000
Files and hashes:         1: 6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl (hash: sk8Xbc28mMQMIiIwSt2hyKdJboCYiN7VY/yjBCB3Qig=)
                          2: 8AD0E57C8FE311EB89767C78C4F9AE02.roa (hash: 5OKWpLiITpzC82N35iOhZbsAzgBXSVM9wxMVAwNfKSI=)
                          3: ACFA076483A611EE9C62DE0CC4F9AE02.roa (hash: bmegegPDxR1urUoWVZTcpCbAwDOttLwteVNluF5nkEc=)
                          4: BE633CD283A611EE804BB319C4F9AE02.roa (hash: VEGEjvA8mXlTYgeX41lw6Rhiexaef4whXcV7cTx74tM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl
                          rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 21 May 2026 19:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2893 (0xb4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917CBD7, serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14
        Validity
            Not Before: May 14 19:21:20 2026 GMT
            Not After : May 21 19:21:20 2026 GMT
        Subject: CN=6a0620b1-813b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:15:38:ba:12:49:a5:9f:78:8e:6a:2e:a4:ff:
                    c1:db:7e:30:07:81:e7:02:89:58:14:37:7e:a2:fc:
                    04:cf:2a:00:40:9f:44:74:6e:af:51:25:b3:d8:69:
                    1c:6e:f6:a6:69:50:2b:c2:aa:e6:f0:36:f2:7c:78:
                    0e:7c:a2:fe:ab:06:25:68:19:c0:db:a2:8c:2e:76:
                    e3:e2:9b:dd:df:12:ae:20:83:6b:6a:00:a4:87:dd:
                    e1:c6:01:b5:6f:75:ae:15:ba:79:78:c1:d3:5e:61:
                    ce:a2:37:06:f7:48:d3:e0:17:a0:b5:be:d2:b0:2c:
                    cf:5a:2a:06:db:e6:7b:fd:53:b2:54:29:b2:b8:b9:
                    ea:14:dd:81:1f:c3:11:bc:00:ac:ce:e1:25:1a:7d:
                    19:f3:5f:cc:61:ff:ec:b4:92:23:d9:1f:d4:be:ea:
                    fa:3b:fe:f6:71:37:55:ab:f8:b4:ec:46:09:f6:bb:
                    d6:ef:c7:92:df:8f:26:c3:e3:06:fd:e5:db:6b:26:
                    92:8d:e5:d3:be:f4:c3:ab:99:24:48:fa:3a:04:75:
                    07:d1:92:04:67:3f:7b:63:31:7c:d0:b7:34:13:e1:
                    71:a1:2a:30:86:79:33:e4:03:38:33:f6:a8:c0:2f:
                    52:ae:d9:7a:07:c1:57:96:cc:fb:e2:45:b8:56:f3:
                    50:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:64:CA:92:24:6E:F8:27:00:D7:E3:E5:01:40:71:AC:8C:5E:2B:0B
            X509v3 Authority Key Identifier:
                keyid:E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:6a:1b:8f:7a:66:e0:fb:9a:92:bb:e0:ca:70:75:17:d0:5e:
         00:09:81:9f:37:eb:65:40:51:83:ba:65:6f:83:fe:9c:8d:d2:
         bf:16:f8:de:39:9b:a5:16:7b:33:e9:8c:04:53:dc:80:50:32:
         18:2e:9a:03:7c:09:fb:0a:87:52:c1:88:bf:b4:1a:71:5b:d7:
         58:84:e4:47:86:be:bb:5e:58:4e:8f:cd:bf:98:bd:6d:6c:89:
         f7:88:80:11:1b:26:0d:8a:78:25:c9:ad:b8:58:64:92:ec:fb:
         d2:26:a7:20:bc:f1:ea:23:7f:e1:76:77:be:f6:2d:58:94:1e:
         1b:31:a6:db:95:97:e3:51:ca:0a:20:c1:46:0f:85:65:3c:58:
         c7:e4:ec:52:12:cb:72:fe:9d:89:d7:fc:1d:f6:71:37:49:66:
         47:3d:20:74:10:6d:70:9d:b6:8b:17:fa:fc:8e:d9:71:7a:da:
         2e:4f:67:94:28:28:51:96:0b:10:5b:e7:78:77:a8:3c:ce:cd:
         b5:fb:00:90:c5:83:54:1c:bc:16:04:12:6a:67:8d:7d:32:42:
         c1:ed:fe:e3:18:1d:b7:2d:f3:71:cc:e8:1f:20:de:75:86:be:
         92:3a:b6:0a:75:47:3f:b1:bb:38:86:97:22:7a:fe:c7:d1:2b:
         ff:98:88:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 20:45:32 2026 by rpki-client