Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft
File:                     -6JuPNfggZmzoY8WNmp1fwTN8FQ.mft (raw, json)
Hash identifier:          Zx4ip7GFGyMn3VkhNtgLIjpkDV2btzJYEVchFMBwN9E=
Subject key identifier:   B6:76:65:09:BC:61:92:8B:1F:4A:69:12:2B:6D:6D:99:E9:03:FC:67
Authority key identifier: FB:A2:6E:3C:D7:E0:81:99:B3:A1:8F:16:36:6A:75:7F:04:CD:F0:54
Certificate issuer:       /CN=A91B7709/serialNumber=FBA26E3CD7E08199B3A18F16366A757F04CDF054
Certificate serial:       011B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6JuPNfggZmzoY8WNmp1fwTN8FQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft
Manifest number:          0117
Signing time:             Sun 05 Apr 2026 05:16:48 +0000
Manifest this update:     Sun 05 Apr 2026 05:16:47 +0000
Manifest next update:     Sun 12 Apr 2026 05:16:47 +0000
Files and hashes:         1: -6JuPNfggZmzoY8WNmp1fwTN8FQ.crl (hash: J/NS67oEJmFcV+rE98DLExN2i6i9tcjWsYrX+XYCiZ8=)
                          2: 25FFA3768BB711EF9C572630C4F9AE02.roa (hash: w+zyCkFV0FZRY4/3WWU9VNMt7oZyJ+HRThPvvwfkALE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6JuPNfggZmzoY8WNmp1fwTN8FQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:16:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283 (0x11b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7709, serialNumber=FBA26E3CD7E08199B3A18F16366A757F04CDF054
        Validity
            Not Before: Apr  5 05:16:47 2026 GMT
            Not After : Apr 12 05:16:47 2026 GMT
        Subject: CN=69d1f040-013a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a0:93:b6:85:18:d3:ec:99:c6:b7:52:e2:f3:
                    97:26:ab:bc:25:1c:a6:bf:d0:65:d5:17:af:ec:1f:
                    ea:f1:39:d8:4b:84:15:55:49:69:c0:1f:4b:62:81:
                    84:73:e9:58:9b:ba:b3:62:9e:06:c4:f6:04:28:4b:
                    c3:0a:04:e7:de:37:53:f6:dc:2f:23:3f:1d:94:69:
                    96:77:29:89:5c:bc:7d:9b:17:dd:20:b9:bd:77:52:
                    f7:88:4d:dd:6a:db:1e:df:91:72:c4:aa:d0:b1:f6:
                    ee:cd:e1:4d:12:25:50:7c:ee:b3:65:97:14:32:f1:
                    6b:4f:1e:d5:af:aa:31:58:58:10:22:5f:60:db:78:
                    52:c4:76:14:8c:62:a5:15:ad:81:ca:ef:e2:2b:38:
                    2c:34:69:49:43:59:cf:ce:d0:d5:c7:9f:d7:78:3a:
                    b7:26:e9:f8:9e:8e:3f:ba:19:ba:ad:d8:8f:ed:42:
                    6b:cd:41:ad:33:8f:77:8f:61:2b:42:fb:16:09:65:
                    bc:17:e7:94:2f:7a:7d:09:f0:a0:9d:c7:71:e2:03:
                    9f:2a:83:26:08:53:2b:10:32:dc:2f:86:79:68:bb:
                    f5:72:9c:e2:9f:d2:82:a0:ba:cd:b7:d4:26:ea:eb:
                    30:77:d3:77:f6:c6:d9:d5:aa:4b:3e:31:70:d9:ad:
                    85:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:76:65:09:BC:61:92:8B:1F:4A:69:12:2B:6D:6D:99:E9:03:FC:67
            X509v3 Authority Key Identifier:
                keyid:FB:A2:6E:3C:D7:E0:81:99:B3:A1:8F:16:36:6A:75:7F:04:CD:F0:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6JuPNfggZmzoY8WNmp1fwTN8FQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:ac:ed:3d:b2:da:94:2f:d2:66:a3:07:c8:f1:1c:ec:0b:92:
         bc:44:f7:32:7e:4e:f2:88:2a:f9:53:64:65:75:15:c5:aa:75:
         6a:22:bc:29:db:b5:bd:a1:50:3a:f9:1b:19:9d:db:1b:ee:a3:
         97:77:ca:44:de:f6:2b:af:bf:b8:e6:79:d7:e6:66:e0:84:de:
         6c:07:f6:11:e5:07:3a:3b:05:2b:9e:86:1b:b2:1c:21:f7:e5:
         b1:f3:a0:cd:87:d4:a8:d1:9c:13:75:fd:55:34:f6:44:b7:c5:
         92:f9:b8:70:7c:c0:55:25:91:42:b1:9d:8c:98:f2:d2:30:01:
         cf:20:73:9d:59:c7:fc:23:0e:71:cb:82:0f:2e:0f:33:62:94:
         1b:fa:8c:af:cc:26:e6:4e:44:56:45:7d:35:99:5f:51:d0:e0:
         f3:00:86:51:bf:8c:f4:00:22:a3:03:14:f2:31:f3:9b:00:2a:
         cb:f1:07:4b:d9:67:6d:19:12:a6:23:3a:07:45:2d:82:a1:c9:
         65:0c:ed:4a:ef:bc:ce:02:73:80:84:b1:3b:98:9a:2f:25:8f:
         1a:b5:bc:a1:ad:18:4c:d8:99:c3:31:ea:88:d5:35:b0:73:54:
         04:df:e1:1f:f1:12:e8:92:76:63:42:0a:79:e2:e0:b8:f3:58:
         8b:0e:3d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:15 2026 by rpki-client