Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft
File:                     6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft (raw, json)
Hash identifier:          8FhOM6rX8aDqDJmv/BCOpFuhmzxzIkAvKJoxsDiuTik=
Subject key identifier:   B7:D4:4E:E0:AF:11:65:B0:C5:96:06:E8:5D:A1:F2:33:4F:F7:2F:00
Authority key identifier: E8:CF:22:A0:8E:43:91:CA:D1:50:FA:31:B4:4D:C9:3C:8A:B8:25:EA
Certificate issuer:       /CN=A91A9083/serialNumber=E8CF22A08E4391CAD150FA31B44DC93C8AB825EA
Certificate serial:       0119
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft
Manifest number:          0111
Signing time:             Mon 01 Jun 2026 06:53:25 +0000
Manifest this update:     Mon 01 Jun 2026 06:53:25 +0000
Manifest next update:     Mon 08 Jun 2026 06:53:25 +0000
Files and hashes:         1: 6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl (hash: 2II4UBmXO+ai1rni4AdxB2gaYYGoiMiXPPOPq5mqqEk=)
                          2: 0C2077B6D1B511EF944F205DC4F9AE02.roa (hash: e4ktGAuo5yxFoy1xqQC4gIok83+jqbiUpRIx09FMOG8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl
                          rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 06:53:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 281 (0x119)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9083, serialNumber=E8CF22A08E4391CAD150FA31B44DC93C8AB825EA
        Validity
            Not Before: Jun  1 06:53:25 2026 GMT
            Not After : Jun  8 06:53:25 2026 GMT
        Subject: CN=6a1d2c65-3211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:0d:41:57:65:62:4b:d9:e6:65:55:f5:76:d2:
                    43:a9:d1:1d:2b:4d:3e:6c:3e:be:5a:22:02:73:bd:
                    66:67:eb:81:02:5d:29:23:16:a9:ea:ec:97:f9:9f:
                    d8:8c:cc:8b:2a:9d:7d:3d:6f:64:80:93:20:67:d3:
                    cd:96:f1:85:6d:1b:56:6e:b3:ad:b0:80:10:a8:0a:
                    2d:e2:44:af:98:ce:22:a4:9b:57:8d:65:03:5c:a5:
                    8b:a1:22:21:7d:81:06:cd:95:5b:b8:43:c4:e4:d4:
                    7c:62:85:38:e5:c0:cb:02:4b:aa:92:a0:23:5d:95:
                    52:e1:c0:d8:ed:30:dc:6b:0d:5a:5f:39:0a:ec:00:
                    35:fd:db:98:65:94:06:02:d1:6b:a1:dc:04:d5:e7:
                    e4:7b:69:36:86:bf:f9:60:ab:c7:5a:80:56:ba:e5:
                    50:e3:fc:d4:ee:11:ea:b5:1a:ab:86:8c:d7:a9:77:
                    f3:49:0e:9b:bf:54:4f:53:1f:14:78:29:42:1c:3b:
                    79:e2:6c:d9:1e:70:8a:30:0a:c6:2d:94:f3:85:f0:
                    63:29:4d:c2:e9:68:4c:38:30:a3:4d:12:f2:25:82:
                    a5:cf:81:17:20:41:2f:8d:9a:da:c4:97:54:8a:bc:
                    c0:5d:45:e6:b9:bd:4f:cb:08:40:74:23:0e:c5:ec:
                    89:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D4:4E:E0:AF:11:65:B0:C5:96:06:E8:5D:A1:F2:33:4F:F7:2F:00
            X509v3 Authority Key Identifier:
                keyid:E8:CF:22:A0:8E:43:91:CA:D1:50:FA:31:B4:4D:C9:3C:8A:B8:25:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:2b:56:a1:08:c7:c7:d3:54:02:70:0c:cc:b3:f2:f3:d9:bf:
         35:1f:64:30:fd:b8:80:c3:6b:b8:53:d3:9d:01:c4:2f:41:dc:
         67:e6:ad:61:58:41:64:9b:9d:ec:71:cd:ee:7f:95:cf:2e:d9:
         17:9f:57:5f:09:74:71:b1:80:ff:c2:53:7d:08:a1:50:71:07:
         3f:73:ea:9d:4d:dc:a2:ae:3d:ae:ed:31:63:c9:fd:d1:60:23:
         11:0c:bd:70:67:95:7b:02:f5:cf:ed:15:ee:89:4e:0b:7c:09:
         df:8f:0f:a1:fb:4f:31:33:a0:97:34:36:cd:f7:04:00:6b:c7:
         aa:34:8a:a2:df:fa:6b:6d:0e:c7:63:0a:7b:ea:9c:36:6c:08:
         70:07:db:aa:98:50:04:61:4f:7b:8e:32:49:09:3f:6f:19:9f:
         61:82:6c:30:1d:15:cb:1e:1e:99:53:30:5d:85:1c:81:a6:fc:
         25:bd:77:de:67:6e:92:5e:ac:d2:f1:f4:96:c7:97:7c:fc:77:
         d7:ad:28:59:92:7f:5f:4b:14:6f:a8:86:6c:12:f2:76:e1:3e:
         21:d5:2c:58:0d:40:8f:99:63:49:38:d1:54:93:d5:ce:5f:23:
         14:00:84:0f:64:22:6a:25:5e:77:b7:25:87:ae:ba:8d:9c:5f:
         44:07:91:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:31 2026 by rpki-client