Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A68C0/733A3762F0D511F08429E12B3B6F56BC/6xJT0Sw4-rR-7fJbamQeA8KGb5g.mft
File:                     6xJT0Sw4-rR-7fJbamQeA8KGb5g.mft (raw, json)
Hash identifier:          nHV3WX4wJuHs5fWwyFQC4dHm4ylpA+OKuaRuUEhar9E=
Subject key identifier:   06:8B:D4:15:BC:92:75:A6:B9:16:6C:30:7C:D9:AF:15:8D:B6:7E:B8
Authority key identifier: EB:12:53:D1:2C:38:FA:B4:7E:ED:F2:5B:6A:64:1E:03:C2:86:6F:98
Certificate issuer:       /CN=A91A68C0/serialNumber=EB1253D12C38FAB47EEDF25B6A641E03C2866F98
Certificate serial:       39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6xJT0Sw4-rR-7fJbamQeA8KGb5g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A68C0/733A3762F0D511F08429E12B3B6F56BC/6xJT0Sw4-rR-7fJbamQeA8KGb5g.mft
Manifest number:          37
Signing time:             Tue 21 Apr 2026 08:22:01 +0000
Manifest this update:     Tue 21 Apr 2026 08:22:01 +0000
Manifest next update:     Tue 28 Apr 2026 08:22:01 +0000
Files and hashes:         1: 6xJT0Sw4-rR-7fJbamQeA8KGb5g.crl (hash: mMRz0DkPgkQuHDlKmRTj51aOwSTGx7l4LYD8HIelTiY=)
                          2: 539136C6F0E511F09202A4D23F6F56BC.roa (hash: POQzXqy3RM4ojD7gxxBinSVyVZFrKpKfKTRx+tHtaA0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A68C0/733A3762F0D511F08429E12B3B6F56BC/6xJT0Sw4-rR-7fJbamQeA8KGb5g.crl
                          rsync://rpki.apnic.net/member_repository/A91A68C0/733A3762F0D511F08429E12B3B6F56BC/6xJT0Sw4-rR-7fJbamQeA8KGb5g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6xJT0Sw4-rR-7fJbamQeA8KGb5g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 08:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A68C0, serialNumber=EB1253D12C38FAB47EEDF25B6A641E03C2866F98
        Validity
            Not Before: Apr 21 08:22:01 2026 GMT
            Not After : Apr 28 08:22:01 2026 GMT
        Subject: CN=69e733a9-fe41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:17:d3:8a:5b:76:80:be:25:59:28:65:1f:cc:
                    8a:5f:f6:25:48:b0:75:5f:8b:37:d2:e0:bb:9e:19:
                    2b:50:9a:48:22:9d:83:4d:db:f7:10:cf:3d:7b:e8:
                    b5:31:c0:0b:79:c1:3e:21:79:03:f5:56:55:34:80:
                    ad:e3:2a:06:02:77:d5:08:55:33:b7:29:fd:76:3c:
                    62:ca:1d:8f:1a:b4:98:40:63:94:ba:92:f6:c6:db:
                    86:c1:16:42:06:32:05:5f:4b:13:1d:0f:9c:03:e8:
                    96:38:92:1e:12:c1:ed:71:05:ca:f5:ee:e0:4f:57:
                    1b:c0:1b:94:4d:cc:e0:0e:53:31:3e:2b:35:bd:ff:
                    ba:bb:dd:97:54:d3:18:d4:75:f9:01:39:36:f4:9e:
                    ec:fc:a1:91:3d:32:c6:26:34:31:04:ce:ec:30:e3:
                    44:4f:b6:78:f8:58:02:5c:b0:5e:6e:be:ee:bb:70:
                    11:ca:ed:b1:88:e8:eb:c8:47:72:09:e2:34:f2:86:
                    78:4d:0d:46:64:55:1d:d1:5e:d0:d6:f7:67:05:1f:
                    e4:4f:67:09:34:0c:f5:15:a9:e1:45:e9:4e:c0:77:
                    db:a8:44:9d:bf:8c:70:f4:57:14:9e:ce:aa:a3:f3:
                    46:c8:dc:8d:13:2f:58:da:6c:33:05:f1:45:e5:d4:
                    82:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:8B:D4:15:BC:92:75:A6:B9:16:6C:30:7C:D9:AF:15:8D:B6:7E:B8
            X509v3 Authority Key Identifier:
                keyid:EB:12:53:D1:2C:38:FA:B4:7E:ED:F2:5B:6A:64:1E:03:C2:86:6F:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A68C0/733A3762F0D511F08429E12B3B6F56BC/6xJT0Sw4-rR-7fJbamQeA8KGb5g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6xJT0Sw4-rR-7fJbamQeA8KGb5g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A68C0/733A3762F0D511F08429E12B3B6F56BC/6xJT0Sw4-rR-7fJbamQeA8KGb5g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:d6:34:2d:89:47:fb:ee:47:e2:22:cf:56:bc:07:5c:db:77:
         a1:38:76:3e:fc:6c:c9:ed:b9:cd:58:36:2d:93:bf:87:5d:e0:
         57:ba:74:fc:22:0d:42:2e:d0:f6:51:23:97:9a:91:77:13:fa:
         3c:1b:7a:06:ae:67:e8:5d:78:b3:b3:ea:a7:6d:9a:37:4b:5a:
         78:ed:27:51:c4:83:74:ee:f2:5e:b0:fe:d3:72:8f:c3:64:80:
         81:1a:2f:d9:b8:9d:c5:77:e8:a5:6b:5b:e4:88:49:1a:10:56:
         ae:83:a1:06:ae:c9:c1:e2:ec:8b:27:df:59:79:a7:f9:c0:62:
         4e:2b:7f:17:33:e2:0c:da:b2:42:72:9e:15:d2:4c:63:45:5a:
         ab:77:2b:18:55:45:8e:50:e8:91:fb:8e:14:6f:4b:5d:05:1f:
         9b:59:6b:14:0b:c4:50:ab:f4:15:1a:9c:b7:05:e4:da:f8:fd:
         8e:42:69:b7:be:17:54:ca:d6:ba:67:9b:b5:41:91:07:2c:0d:
         2f:d3:49:90:1f:a3:3f:47:5d:d3:10:d7:68:3f:53:33:32:cc:
         6c:e2:2c:7f:26:38:c2:49:41:3c:a4:fc:22:89:01:69:6f:b6:
         39:ba:44:fa:66:8c:20:df:f5:74:10:a5:05:4f:ad:d4:13:ff:
         55:5b:39:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 00:11:11 2026 by rpki-client