Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft
File:                     p6JnToSEYDkgd5o1LFWATlU2UBQ.mft (raw, json)
Hash identifier:          XoDwWod9WCKzbVs8rO9K/k2lXH2TQN1yZO3yAyjMV+E=
Subject key identifier:   35:19:64:ED:2C:ED:A1:77:CC:D4:75:C2:C7:62:11:5B:2C:82:F4:F5
Authority key identifier: A7:A2:67:4E:84:84:60:39:20:77:9A:35:2C:55:80:4E:55:36:50:14
Certificate issuer:       /CN=A9185CF3/serialNumber=A7A2674E8484603920779A352C55804E55365014
Certificate serial:       0C6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft
Manifest number:          0C57
Signing time:             Sat 04 Apr 2026 18:32:26 +0000
Manifest this update:     Sat 04 Apr 2026 18:32:26 +0000
Manifest next update:     Sat 11 Apr 2026 18:32:26 +0000
Files and hashes:         1: p6JnToSEYDkgd5o1LFWATlU2UBQ.crl (hash: aRuMap1bLt6lTw9ArreBjCtrBvYs25WIrUmI/CNAxqQ=)
                          2: 53B6182C213611EAB9F02B49C4F9AE02.roa (hash: 1/jQ9MAmfgrH/MlDHGH5XW5uHJapQAaNpW7+NA3g65w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.crl
                          rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 18:32:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3181 (0xc6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185CF3, serialNumber=A7A2674E8484603920779A352C55804E55365014
        Validity
            Not Before: Apr  4 18:32:26 2026 GMT
            Not After : Apr 11 18:32:26 2026 GMT
        Subject: CN=69d1593a-b681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:04:18:0e:0e:40:05:b2:79:ff:55:66:08:65:
                    90:59:7a:48:69:2e:20:43:6b:8c:6d:1f:35:82:eb:
                    f8:5f:3b:a3:0d:4b:ec:00:e7:fb:c8:70:0d:31:74:
                    31:41:ae:60:76:02:9f:3f:82:3c:93:05:35:3e:d6:
                    8a:9f:28:65:8b:a6:e3:6a:c2:d0:a6:ee:02:52:9f:
                    d2:77:d0:1e:db:01:a1:d4:ba:2b:0d:5e:70:f7:ed:
                    b4:71:2e:47:85:17:18:39:ce:7e:8f:dc:82:75:39:
                    e3:df:d0:2d:93:99:ec:e9:24:d8:a2:ee:ab:b4:70:
                    96:c4:ff:83:e5:c9:fc:b5:31:40:69:57:a8:ec:01:
                    5e:11:ae:09:df:d7:50:a3:f1:4d:ec:cb:96:4a:85:
                    03:f1:40:bd:33:c0:54:e6:f0:6f:0f:6e:db:5d:5e:
                    e4:28:0f:d4:89:50:64:18:50:1b:20:ba:e2:b1:5f:
                    d8:a1:ab:98:07:23:7e:bf:c9:11:1a:57:d8:31:5c:
                    1c:72:c3:80:ea:a8:2e:ab:e2:52:08:da:b2:2c:54:
                    18:f5:07:e0:29:d1:26:dd:59:a0:b6:70:fc:8b:ae:
                    f0:95:b1:6c:a5:8c:84:69:46:46:03:90:a8:d8:10:
                    f0:02:62:fb:4a:a1:38:58:af:59:bb:98:6c:8c:08:
                    fa:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:19:64:ED:2C:ED:A1:77:CC:D4:75:C2:C7:62:11:5B:2C:82:F4:F5
            X509v3 Authority Key Identifier:
                keyid:A7:A2:67:4E:84:84:60:39:20:77:9A:35:2C:55:80:4E:55:36:50:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:2a:6c:b4:33:de:60:ef:76:22:6c:dd:67:95:4f:37:a5:05:
         9b:e4:91:cf:5c:31:7c:00:c1:7e:2d:2b:2c:7c:bc:98:11:10:
         5f:9c:df:45:3b:a2:6e:18:b9:64:c4:88:17:41:cc:c0:54:00:
         f3:c1:a2:55:93:4f:17:4c:99:8d:38:73:ae:56:05:59:63:60:
         4a:df:59:27:b4:e3:a5:e8:46:5d:f5:67:ef:d3:a6:d1:8e:da:
         68:80:63:a7:f5:6e:cf:61:cc:63:00:8c:71:5f:f3:06:aa:73:
         d8:6a:2b:cc:40:e9:91:22:2a:ec:b5:fb:b6:8e:65:4c:87:12:
         29:f6:82:b5:da:20:5a:b3:20:8f:6c:b7:bb:5a:38:3b:a1:5d:
         41:bc:5a:dd:6a:89:38:9c:b2:82:54:c9:66:b9:cd:10:c5:f5:
         bd:6d:cf:69:d6:ec:4d:f2:68:e3:3a:c1:8b:fb:38:8b:58:21:
         8f:54:20:30:2f:d5:01:18:85:bd:0c:b0:46:f8:cd:10:78:5b:
         ce:e9:6d:df:86:b4:c0:74:72:fc:e9:5e:ee:e3:76:5c:48:29:
         73:3e:32:46:ae:8d:83:a3:6c:d7:67:4a:c6:d8:c6:e5:01:e8:
         93:9f:e9:97:51:39:05:58:2f:ac:da:dc:ed:ea:90:e2:11:02:
         a7:fe:a4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:48 2026 by rpki-client