Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
File:                     CC8e6S_qY3P9odWuxG4vLYrorIc.mft (raw, json)
Hash identifier:          th7+cKWQJWoK6z76Eg2M3JHPfrAlgWTwe4HZ7+WzsZA=
Subject key identifier:   FA:CB:8B:0E:05:DD:DE:54:11:09:8A:57:C6:71:4B:15:28:2C:CF:18
Authority key identifier: 08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87
Certificate issuer:       /CN=A919F0DA/serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87
Certificate serial:       088E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
Manifest number:          6140
Signing time:             Sat 04 Apr 2026 14:15:26 +0000
Manifest this update:     Sat 04 Apr 2026 14:15:25 +0000
Manifest next update:     Sat 11 Apr 2026 14:15:25 +0000
Files and hashes:         1: CC8e6S_qY3P9odWuxG4vLYrorIc.crl (hash: nKIebdv9oeqRYlZxBeIH6vENG9oVHOeeOqMj22YqvAA=)
                          2: D64176D81B9911ECAB0E1678C4F9AE02.roa (hash: Bvd1DVqbTNJSqvO20x1gAUmMTRKzz6mu9NujNo2jErs=)
                          3: 8272E36003BD11EBB416B77DC4F9AE02.roa (hash: /zXttT1/Z+BZbViTAHk4/AzLjMQjrMWW94BldELHaro=)
                          4: 813E372A946711F081C10711C4F9AE02.roa (hash: 57qvv/Ci0wiylgCxyBLGHmCnzd/A0UFm3lCKkdUKpX8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl
                          rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 14:15:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2190 (0x88e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F0DA, serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87
        Validity
            Not Before: Apr  4 14:15:25 2026 GMT
            Not After : Apr 11 14:15:25 2026 GMT
        Subject: CN=69d11cfd-3980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bc:d8:86:54:b2:7a:4f:3f:e7:21:a7:0b:99:
                    37:aa:71:82:de:97:b9:54:10:ae:3f:56:7b:7d:28:
                    2d:41:3d:32:83:fb:36:57:65:10:1c:67:b5:7f:ad:
                    0a:c1:44:d8:15:bf:00:41:da:8d:9c:9a:08:1b:05:
                    3a:66:53:90:0a:cf:99:78:67:a0:99:ad:47:0d:62:
                    dd:1c:c6:15:8f:a7:4b:fc:e3:ab:1a:f8:97:f2:f7:
                    02:ea:66:10:e7:c8:1b:4c:94:5b:b9:5a:9b:0f:aa:
                    18:19:1e:c5:a4:0a:7b:ad:c2:d0:bf:90:1c:ae:96:
                    b4:f0:fd:b4:82:04:16:3c:46:f0:80:51:6e:f0:5b:
                    ed:d5:ee:13:5e:05:04:11:67:aa:0e:1a:38:34:09:
                    fc:d0:2e:b6:96:f4:06:ba:55:43:e8:f5:1a:85:d5:
                    19:91:f2:48:7f:ad:64:8e:3f:1a:2d:f5:31:58:ae:
                    06:f6:45:76:3e:81:d2:e9:37:cb:f3:c1:bb:fe:74:
                    78:4c:7f:26:1d:1d:f3:51:51:21:4d:62:0d:ec:59:
                    1f:39:3f:29:97:7a:df:6e:87:a8:85:1b:5d:9c:3d:
                    2e:b4:a1:03:9a:6c:15:66:96:ce:a2:a0:9f:72:a2:
                    6a:59:7a:4a:f9:40:1f:61:70:d1:af:bf:f1:00:ae:
                    48:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:CB:8B:0E:05:DD:DE:54:11:09:8A:57:C6:71:4B:15:28:2C:CF:18
            X509v3 Authority Key Identifier:
                keyid:08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:e2:54:c4:a6:8a:2b:fd:5b:fd:18:f8:bb:83:e9:82:39:0a:
         ec:e4:5b:7b:27:99:8e:95:8e:89:7d:ea:10:11:c3:7e:49:76:
         3a:a0:f7:2a:d6:a1:73:1d:3c:15:de:99:b1:30:3d:8a:25:4d:
         ac:4e:3a:b5:68:0e:dd:27:22:61:a4:46:dd:8f:3c:eb:49:ef:
         b2:0c:e6:b6:05:5f:49:f4:b4:96:56:bb:5e:6c:e6:26:6f:e5:
         ca:12:96:69:7c:85:bd:e7:40:46:e7:bb:88:84:c0:c1:c5:a2:
         ab:9e:68:84:ad:33:bd:0c:ec:ac:eb:be:26:6a:e5:d4:2a:a8:
         43:19:97:8c:0a:b7:12:41:96:ab:38:f9:54:11:b3:8b:43:e0:
         2e:09:2d:33:6b:2c:9c:66:ab:29:39:df:77:18:d5:8f:6f:4b:
         6a:3d:78:59:59:56:98:b0:d3:5f:46:c3:23:4c:a7:63:36:0d:
         6e:5a:30:b5:4f:38:1a:ba:98:98:e6:aa:cd:3c:6a:bf:79:68:
         e3:1c:d8:bd:dd:52:44:0e:f5:d5:4d:92:b1:e0:e2:74:2b:17:
         a2:69:a3:af:af:da:b7:7f:2d:24:42:99:e0:bb:98:76:74:95:
         8e:7e:05:bc:29:e8:bd:66:ee:0e:87:eb:0b:49:b9:44:8a:e7:
         1f:d4:59:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:26:30 2026 by rpki-client