Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/6AZAMTRS0FNHrrnqq2DbjgDCGQs.mft
File:                     6AZAMTRS0FNHrrnqq2DbjgDCGQs.mft (raw, json)
Hash identifier:          k+miRGtG6BYhnoAQu1tvS6Y/n5/GRhVTHA/Ru42CY6c=
Subject key identifier:   85:AB:70:85:D5:27:91:82:0B:DE:F2:8E:54:53:98:F9:98:1E:ED:21
Authority key identifier: E8:06:40:31:34:52:D0:53:47:AE:B9:EA:AB:60:DB:8E:00:C2:19:0B
Certificate issuer:       /CN=A91AA85A/serialNumber=E80640313452D05347AEB9EAAB60DB8E00C2190B
Certificate serial:       3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AZAMTRS0FNHrrnqq2DbjgDCGQs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/6AZAMTRS0FNHrrnqq2DbjgDCGQs.mft
Manifest number:          35
Signing time:             Thu 21 May 2026 08:48:04 +0000
Manifest this update:     Thu 21 May 2026 08:48:04 +0000
Manifest next update:     Thu 28 May 2026 08:48:04 +0000
Files and hashes:         1: 6AZAMTRS0FNHrrnqq2DbjgDCGQs.crl (hash: MrI9u03mObjNtp9O9Cm+M9T3cQc8lB/ziN1nw8HaM8Y=)
                          2: D7C18BB20DFF11F1BA7C27AF053D8C67.roa (hash: hWKKvsTt7zCxD5Fv8v2sGwk7XoSlQUlgVYDrraM8C1E=)
                          3: 9ABBE50C0DFD11F18537B598053D8C67.roa (hash: B/TqzACGEfySc+XaR76BsEZga/Tqj8LPu2hT0skPKbE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/6AZAMTRS0FNHrrnqq2DbjgDCGQs.crl
                          rsync://rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/6AZAMTRS0FNHrrnqq2DbjgDCGQs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AZAMTRS0FNHrrnqq2DbjgDCGQs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 08:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA85A, serialNumber=E80640313452D05347AEB9EAAB60DB8E00C2190B
        Validity
            Not Before: May 21 08:48:04 2026 GMT
            Not After : May 28 08:48:04 2026 GMT
        Subject: CN=6a0ec6c4-4c8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b6:a8:61:a0:58:02:8b:86:c8:fc:3a:86:06:
                    19:02:5e:d5:93:bb:74:78:b4:e9:01:b6:7e:d0:2c:
                    55:c8:32:7f:a7:0b:52:46:07:26:72:2c:dc:33:9f:
                    b3:62:01:16:7b:c6:11:18:98:ce:9c:5f:c0:3b:21:
                    2d:45:9e:fe:3d:8e:3c:b9:3e:92:2f:58:06:42:cf:
                    cf:57:2e:af:f0:18:fe:63:4b:aa:82:2c:9a:4f:e2:
                    94:09:2c:f8:3f:f0:a3:6a:2f:5e:09:b4:8e:9d:13:
                    23:77:c1:31:ba:24:18:5f:1b:64:f3:06:95:67:42:
                    56:b8:17:7d:bf:40:1a:3f:d9:54:f7:d2:bb:78:7d:
                    72:06:de:d1:af:2e:e8:6a:ee:5f:6f:c6:b7:ef:0c:
                    93:fd:85:7a:02:0b:cb:04:8d:90:6e:76:89:66:70:
                    ec:7b:f2:28:c4:32:a1:23:d4:6b:99:a0:6c:a7:9e:
                    36:04:e0:dc:a6:1a:79:8f:f0:b8:e2:a4:45:51:5d:
                    cc:6a:69:10:b4:b3:b0:db:ec:4b:43:0b:6c:01:83:
                    b4:17:47:55:eb:f5:21:9f:24:ba:5a:8c:97:61:99:
                    90:be:b9:28:22:1c:95:55:aa:65:c7:c9:12:17:98:
                    9b:a6:ce:8a:37:66:75:94:ac:1b:cc:f6:6e:dc:8d:
                    66:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:AB:70:85:D5:27:91:82:0B:DE:F2:8E:54:53:98:F9:98:1E:ED:21
            X509v3 Authority Key Identifier:
                keyid:E8:06:40:31:34:52:D0:53:47:AE:B9:EA:AB:60:DB:8E:00:C2:19:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/6AZAMTRS0FNHrrnqq2DbjgDCGQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AZAMTRS0FNHrrnqq2DbjgDCGQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/6AZAMTRS0FNHrrnqq2DbjgDCGQs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:f7:99:13:b6:0c:ba:e2:ca:1b:e2:32:19:07:26:8f:1c:60:
         2a:1c:71:7a:cd:6a:e6:b9:26:c7:61:9e:d5:f2:0b:93:25:32:
         a9:80:13:0e:4f:8b:f1:15:88:09:34:aa:e2:46:8c:39:60:36:
         62:92:98:71:8f:af:8c:1e:33:4d:58:67:bb:24:6a:ad:2b:ea:
         cf:2a:3f:75:07:ef:07:71:76:6d:8a:cc:1f:3e:18:3d:5b:c9:
         c2:e0:5c:84:49:e7:9a:ed:40:d7:e5:f1:5d:6f:1a:42:f3:b6:
         a6:e2:4a:55:c8:af:33:e5:08:89:f3:36:cc:5f:aa:6f:05:53:
         b6:f1:d4:9b:0d:3a:9e:84:3f:b5:49:b4:19:8a:f4:67:5a:b7:
         4a:a5:42:36:8b:e3:a8:52:b8:ae:ae:ad:3b:94:46:64:91:26:
         24:e6:cc:68:fc:51:8e:97:e4:f0:78:66:95:f6:a9:8b:26:82:
         2d:83:65:fa:ee:cd:14:92:80:81:71:e1:50:7f:1b:ec:5f:82:
         ad:60:5b:51:04:0b:73:0b:d5:25:e2:59:3f:71:c4:66:79:1f:
         16:1b:f1:e3:35:82:c3:b7:b9:cd:85:ea:48:f5:a6:01:fd:7a:
         df:83:07:1a:ec:68:3b:a9:49:01:cb:b3:39:96:e6:df:bc:2d:
         9e:5f:39:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:54:08 2026 by rpki-client