Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
File:                     6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft (raw, json)
Hash identifier:          q0/y0bnPNLP7010a7Muf1TRPHDznIT1BEQefcD3ZBL8=
Subject key identifier:   79:1A:00:40:0F:70:6C:63:EB:3B:E2:E9:D2:7E:82:7C:5F:FA:98:AC
Authority key identifier: E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14
Certificate issuer:       /CN=A917CBD7/serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14
Certificate serial:       0B66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
Manifest number:          0B3E
Signing time:             Thu 02 Jul 2026 19:26:36 +0000
Manifest this update:     Thu 02 Jul 2026 19:26:36 +0000
Manifest next update:     Thu 09 Jul 2026 19:26:36 +0000
Files and hashes:         1: 6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl (hash: L4JU3psKxGMfL0sP1mo4b8uN4Oytxhj+m2I8TUDfu90=)
                          2: ACFA076483A611EE9C62DE0CC4F9AE02.roa (hash: bmegegPDxR1urUoWVZTcpCbAwDOttLwteVNluF5nkEc=)
                          3: 8AD0E57C8FE311EB89767C78C4F9AE02.roa (hash: 5OKWpLiITpzC82N35iOhZbsAzgBXSVM9wxMVAwNfKSI=)
                          4: BE633CD283A611EE804BB319C4F9AE02.roa (hash: VEGEjvA8mXlTYgeX41lw6Rhiexaef4whXcV7cTx74tM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl
                          rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 Jul 2026 19:26:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2918 (0xb66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917CBD7, serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14
        Validity
            Not Before: Jul  2 19:26:36 2026 GMT
            Not After : Jul  9 19:26:36 2026 GMT
        Subject: CN=6a46bb6c-307b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0a:97:b1:52:76:64:fe:a0:29:fc:49:31:26:
                    62:93:8f:5d:7a:a9:90:d4:44:a5:02:bb:19:01:cc:
                    ec:30:6e:df:93:72:af:b7:30:47:48:95:72:83:7b:
                    26:35:57:81:93:ad:51:fd:26:9a:e7:8a:b6:23:0f:
                    dd:a4:2b:56:34:54:82:ea:5a:55:b4:73:af:ff:14:
                    08:84:b6:f2:f7:5d:a1:1d:39:99:73:a2:4d:ef:f9:
                    4f:39:05:75:75:36:07:f2:ed:27:6e:ca:e8:92:1a:
                    65:f3:27:83:84:0d:cd:6a:f9:e1:de:5f:b2:b3:b7:
                    0b:3d:15:f7:64:3e:a9:20:b9:66:7d:d2:3d:51:e0:
                    92:aa:b1:44:dc:ef:65:a6:21:70:b6:92:da:e0:87:
                    01:82:bf:25:7c:b5:3d:9d:6c:75:7f:62:86:cf:5c:
                    f8:7b:4b:ee:bf:16:65:20:7c:7b:75:cd:03:5c:e2:
                    7f:b6:b8:f4:32:9c:cd:ee:7e:1b:e7:75:da:34:cf:
                    ac:83:92:dd:c2:51:36:da:c3:37:39:85:c9:d8:2f:
                    42:e7:a1:5c:59:19:47:f8:51:00:7f:70:34:41:69:
                    59:80:97:51:9b:04:9c:a2:fb:05:ad:b5:82:a2:f2:
                    b9:25:2a:cf:e9:0e:23:a8:9e:f9:b9:9a:87:69:e9:
                    70:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:1A:00:40:0F:70:6C:63:EB:3B:E2:E9:D2:7E:82:7C:5F:FA:98:AC
            X509v3 Authority Key Identifier:
                keyid:E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:35:54:2c:87:6e:58:c5:66:2f:49:91:6c:85:ed:8e:66:a4:
         4f:96:54:05:fb:64:f2:ae:5e:96:95:94:72:3c:13:56:f8:29:
         0c:3e:ec:7f:8c:8d:ec:fa:36:9e:fe:33:9a:3b:d8:24:5a:2d:
         39:af:1d:c6:39:3d:6c:60:b7:eb:c8:05:64:8c:33:9b:3d:11:
         fb:0e:dd:73:41:de:65:70:1a:30:85:2e:1d:b7:49:d8:04:ff:
         70:33:d0:68:7c:62:17:a7:5a:31:3c:b3:4e:87:81:7e:49:56:
         1c:ce:f8:be:d6:70:60:9d:c0:70:e4:34:1c:54:2c:0e:2b:16:
         b1:89:dd:e4:af:19:80:7d:11:cb:19:64:7e:d9:ab:08:68:de:
         bb:c4:5f:19:27:c0:71:12:b6:f2:85:d4:2b:e7:8c:14:29:a1:
         61:5d:f2:95:5c:8b:8a:f6:62:74:76:9c:8c:82:fd:41:a4:60:
         03:ce:d9:3e:98:55:76:cc:28:a3:6e:ac:4d:af:63:b9:2a:73:
         bd:f0:25:54:1b:65:fc:da:f1:d9:6c:b5:93:b7:f7:a7:ad:51:
         df:b7:36:e6:5c:2a:91:30:71:0a:69:64:f5:54:56:18:c4:c6:
         14:64:31:8c:b5:65:76:1f:da:5e:c6:7b:b9:9a:64:06:e4:46:
         40:db:89:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 01:23:50 2026 by rpki-client