Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197650/D2B615700D9611F1942361D32B3D8C67/6B98qs6m95z87OFlMxRpL94sTpQ.mft
File:                     6B98qs6m95z87OFlMxRpL94sTpQ.mft (raw, json)
Hash identifier:          uu+HBbS7vVKbDQUkH/MdarZBYMkUOH8H1aM5phazpmM=
Subject key identifier:   01:5D:6A:3B:B4:0F:64:A9:87:C5:88:A8:5E:E3:44:26:2C:DE:4B:F5
Authority key identifier: E8:1F:7C:AA:CE:A6:F7:9C:FC:EC:E1:65:33:14:69:2F:DE:2C:4E:94
Certificate issuer:       /CN=A9197650/serialNumber=E81F7CAACEA6F79CFCECE1653314692FDE2C4E94
Certificate serial:       36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6B98qs6m95z87OFlMxRpL94sTpQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197650/D2B615700D9611F1942361D32B3D8C67/6B98qs6m95z87OFlMxRpL94sTpQ.mft
Manifest number:          32
Signing time:             Tue 19 May 2026 08:33:20 +0000
Manifest this update:     Tue 19 May 2026 08:33:19 +0000
Manifest next update:     Tue 26 May 2026 08:33:19 +0000
Files and hashes:         1: 6B98qs6m95z87OFlMxRpL94sTpQ.crl (hash: XE6QZgFtjFnCZ8a58/bRolAptCyf2Q3ZogieCIc/Z88=)
                          2: F1550AF80D9711F198E5D2412C3D8C67.roa (hash: 3cG3KuaJ63N0g/ucQNpVQLysGS2l0hrNaxx97LdNuPU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197650/D2B615700D9611F1942361D32B3D8C67/6B98qs6m95z87OFlMxRpL94sTpQ.crl
                          rsync://rpki.apnic.net/member_repository/A9197650/D2B615700D9611F1942361D32B3D8C67/6B98qs6m95z87OFlMxRpL94sTpQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6B98qs6m95z87OFlMxRpL94sTpQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 May 2026 08:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197650, serialNumber=E81F7CAACEA6F79CFCECE1653314692FDE2C4E94
        Validity
            Not Before: May 19 08:33:19 2026 GMT
            Not After : May 26 08:33:19 2026 GMT
        Subject: CN=6a0c2050-9b79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:45:4b:b2:7e:91:59:a7:80:2e:99:69:41:c6:
                    18:9b:8e:98:40:b2:2d:50:c5:09:44:56:41:57:84:
                    3f:7c:ee:33:14:fd:4a:be:fd:90:48:82:4c:b8:cb:
                    21:64:71:9c:6a:f6:47:05:be:c8:a3:ed:7a:db:9a:
                    73:48:0e:83:be:a3:e7:86:5b:d5:3e:37:70:92:81:
                    81:49:93:1c:fe:60:2c:4a:d8:51:49:80:f7:74:55:
                    9a:f0:26:72:b3:55:48:eb:c3:27:13:a9:74:70:80:
                    6c:5b:cd:ec:bc:57:2c:17:c4:92:93:50:7b:6c:67:
                    b1:68:04:fd:db:bb:fe:48:92:11:ec:49:62:bb:8f:
                    44:e0:94:66:c3:aa:cf:95:46:8f:12:6b:39:41:ed:
                    3b:67:ba:1b:14:10:05:df:75:65:dc:f1:c1:91:9c:
                    10:01:a3:7c:ce:8c:0c:88:49:30:d2:bb:51:af:7c:
                    3e:7d:1e:8f:d5:77:15:b0:34:54:4a:f2:0b:78:2f:
                    50:b2:cf:6f:81:92:c8:84:3f:14:21:fd:c6:60:a6:
                    bf:e6:cd:8f:e8:8b:02:64:67:18:08:51:d0:f2:95:
                    9d:53:b1:92:31:59:0a:af:46:2c:c5:0c:d2:ca:22:
                    3e:f6:15:b6:90:fb:75:3f:dd:a6:96:cc:b3:f3:0d:
                    6f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:5D:6A:3B:B4:0F:64:A9:87:C5:88:A8:5E:E3:44:26:2C:DE:4B:F5
            X509v3 Authority Key Identifier:
                keyid:E8:1F:7C:AA:CE:A6:F7:9C:FC:EC:E1:65:33:14:69:2F:DE:2C:4E:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197650/D2B615700D9611F1942361D32B3D8C67/6B98qs6m95z87OFlMxRpL94sTpQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6B98qs6m95z87OFlMxRpL94sTpQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197650/D2B615700D9611F1942361D32B3D8C67/6B98qs6m95z87OFlMxRpL94sTpQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:75:bb:92:44:77:8f:34:f1:7b:85:54:50:25:4a:30:9b:18:
         7d:9e:08:d5:51:3f:b8:8a:d0:60:54:a0:71:7f:77:a0:cd:a4:
         06:da:dc:b4:0f:0a:1a:fa:54:7a:ff:fe:45:20:7b:cc:20:44:
         a6:21:53:a1:cd:2b:86:02:47:dd:9e:b3:57:76:0e:cd:90:b4:
         0b:44:f5:77:0e:9f:26:2c:04:ff:e0:fd:2b:dd:d3:0b:8f:86:
         e5:d0:77:d8:fa:01:08:ef:38:98:20:e6:fa:5a:ff:0e:b8:45:
         6d:74:5b:b0:d6:ea:ef:fe:a4:b6:bf:8c:34:3c:fd:56:70:dd:
         65:41:4f:02:6b:f3:a2:bc:39:23:c9:47:e7:4c:69:0e:f5:5d:
         ac:c6:ab:c5:3a:9f:54:a6:31:db:11:ab:c3:cf:bf:4a:35:d2:
         43:bd:71:d6:03:70:f4:75:15:c9:c0:d4:82:27:37:5d:1c:e2:
         38:2f:33:93:2b:f4:a4:f0:98:c2:d9:5f:a1:8a:16:e0:b9:1f:
         66:27:63:8b:54:f2:5c:c7:87:81:14:33:f5:8f:4f:73:f2:70:
         d4:4d:0f:c7:07:91:a6:e3:1a:0d:16:fa:09:c3:43:bf:5e:70:
         28:17:5c:41:6f:c5:bb:aa:ae:48:a3:c0:43:00:d4:50:2b:d8:
         5d:39:42:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:50 2026 by rpki-client