Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
File:                     6N-NXkyE2ofXKac8HE6GETgassE.mft (raw, json)
Hash identifier:          944REj+2A7xk/eRNoOCquxTrVwvugr5qpzf0nF88k7w=
Subject key identifier:   E8:85:F8:C8:DE:FE:B0:03:86:91:D6:81:E7:9E:88:92:E9:F5:6F:7A
Authority key identifier: E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1
Certificate issuer:       /CN=A91B01C7/serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1
Certificate serial:       2ADF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
Manifest number:          2AB3
Signing time:             Sat 04 Apr 2026 15:31:30 +0000
Manifest this update:     Sat 04 Apr 2026 15:31:29 +0000
Manifest next update:     Sat 11 Apr 2026 15:31:29 +0000
Files and hashes:         1: 6N-NXkyE2ofXKac8HE6GETgassE.crl (hash: SeWPyPeGOBSZzxrq8ci+E441baktMooSmXic/3mB2JE=)
                          2: 445DB498796011EFA7E9391DC4F9AE02.roa (hash: k2tDc+ez6BNq63hqlmOcWT3woUQyCLcLZFk7DkkdvX8=)
                          3: E86E188A795F11EFBF3B491CC4F9AE02.roa (hash: XjnN+h9msR5bdiDBc0pY+bbyuYDH3qgvu5jG8SVLQ0Y=)
                          4: 3785190EF0FE11EEA034D07EC4F9AE02.roa (hash: ViUN1ktDgOXxiF30cbqP6I4Vb/rzbxLloaN/i3nx4IY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl
                          rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 15:31:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10975 (0x2adf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B01C7, serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1
        Validity
            Not Before: Apr  4 15:31:29 2026 GMT
            Not After : Apr 11 15:31:29 2026 GMT
        Subject: CN=69d12ed2-0d8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c6:1f:fb:7a:d2:6f:e8:bb:47:4a:c4:9f:b9:
                    cf:9e:39:a5:c5:9a:92:ca:94:be:8d:b0:2f:2f:89:
                    2f:bf:a2:4e:1b:9c:09:ee:94:cd:f0:fb:72:d0:69:
                    6c:be:62:df:d5:04:0d:75:5a:89:d8:c5:ee:7e:73:
                    30:81:e0:71:df:87:14:a4:97:83:a1:43:1c:06:f5:
                    b1:fa:e6:86:a8:d7:6c:ba:23:8f:aa:33:3f:5b:3c:
                    cf:95:f5:d7:e2:8b:81:69:45:9e:2a:f2:c3:62:3c:
                    7b:68:12:06:22:a5:32:7d:97:a9:7c:52:05:2c:a8:
                    de:94:1a:86:c3:0c:ce:1d:4d:7d:99:d3:b4:aa:56:
                    f4:46:12:d5:13:1b:d7:0e:75:a1:3f:1b:ae:a5:04:
                    2d:24:78:fc:60:ef:bd:43:54:83:17:3e:77:66:29:
                    42:45:91:7f:0c:d0:f2:ca:81:bb:33:a6:3d:0a:6c:
                    05:38:04:ed:c6:fa:9d:9e:b3:53:65:3a:e2:e6:be:
                    44:5f:4f:fe:db:4b:22:c3:3c:ec:ff:44:7e:f7:c8:
                    36:24:e9:4f:d8:19:58:f3:3e:27:54:e2:d9:7a:46:
                    c6:10:ff:3e:45:a9:10:c6:cb:e9:86:41:e7:28:2b:
                    0a:9e:64:75:83:ac:8b:4f:4c:a8:2e:ca:a9:9b:ad:
                    1f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:85:F8:C8:DE:FE:B0:03:86:91:D6:81:E7:9E:88:92:E9:F5:6F:7A
            X509v3 Authority Key Identifier:
                keyid:E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:b0:1a:a8:67:79:d4:a3:8b:16:fb:c8:fb:bf:55:44:06:27:
         65:75:1f:4e:30:33:6d:eb:a7:ee:f6:55:39:0e:e8:20:59:33:
         97:29:95:cb:1b:a7:b3:00:83:37:0c:c3:06:01:21:16:99:81:
         80:d1:85:1c:b3:5b:38:c0:e5:83:ef:0f:31:a7:df:81:ca:d2:
         05:fb:c0:77:5e:0f:fb:fd:25:6e:76:5c:e1:18:a4:c5:98:23:
         24:48:d4:c6:e8:64:14:76:9a:71:34:58:a0:f2:b8:63:bc:03:
         ef:4d:12:a7:20:41:88:af:2a:f4:b7:23:2e:fc:85:13:0f:fe:
         86:ab:30:b4:30:60:b3:5c:2f:e3:5e:5e:4a:14:c3:ae:a3:05:
         8f:b4:15:ae:49:b0:6c:65:c0:e7:ee:27:7e:0b:68:5e:d6:fb:
         58:83:7f:45:31:ea:a8:62:4c:e0:31:12:23:22:1d:4f:7a:d3:
         1e:d8:87:4a:96:9b:3c:cd:2c:fb:57:9b:a9:47:e6:9f:08:be:
         8b:dc:ab:c3:ba:94:2c:aa:0a:e0:e4:84:ad:46:39:14:b6:70:
         e2:03:04:b6:1c:27:57:97:a6:ba:79:e2:ce:4a:4c:52:72:ca:
         c9:17:f5:0c:01:f6:f3:92:e7:4b:af:e2:d9:be:0a:9d:6c:51:
         5a:a1:bb:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:56:14 2026 by rpki-client