Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
File:                     R6cRTih-sdyDXQfpgEXvRvU-fFc.mft (raw, json)
Hash identifier:          kIIHoAwWX10FoPKhYrFSbCz4a33NvHbgzvlSvcxlTak=
Subject key identifier:   A0:8B:3B:3F:8B:D6:D5:B5:76:AF:5C:84:09:63:49:B4:41:8F:04:C8
Authority key identifier: 47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57
Certificate issuer:       /CN=A91C16B5/serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57
Certificate serial:       1E18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
Manifest number:          1E02
Signing time:             Sat 28 Mar 2026 16:02:29 +0000
Manifest this update:     Sat 28 Mar 2026 16:02:28 +0000
Manifest next update:     Sat 04 Apr 2026 16:02:28 +0000
Files and hashes:         1: R6cRTih-sdyDXQfpgEXvRvU-fFc.crl (hash: OGZl+ris0PsQULOp56N4hCmT7ZgpFoKThMvPrkMidTU=)
                          2: B842F0DEDB8A11F09F03163163D3641D.roa (hash: ks313B+YVez30ZvOkXppIDe7jBhr+JL2wzA7+C6C6as=)
                          3: B7BA9860DB8A11F09F03163163D3641D.roa (hash: O53sGlqKt1W1OA/6Skh5fLhJK6tOZwiFqxR6V2JMvYc=)
                          4: A264F35C8BAC11E7AFBAB71AC4F9AE02.roa (hash: SlJiezfKVA682d59XvPf2AbS2jgh+2UE1l8E3xESDCc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl
                          rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 Apr 2026 16:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7704 (0x1e18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C16B5, serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57
        Validity
            Not Before: Mar 28 16:02:28 2026 GMT
            Not After : Apr  4 16:02:28 2026 GMT
        Subject: CN=69c7fb94-8e4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:73:e3:de:e0:23:6e:1c:4b:11:73:3e:6a:ec:
                    5b:8a:4c:a6:df:25:42:49:a8:71:57:a1:21:64:bc:
                    ee:e6:c7:44:12:e9:8b:92:95:a0:39:d5:45:d6:ac:
                    52:f6:5d:5b:c3:fe:4c:74:07:32:07:16:c1:0f:08:
                    c1:03:8f:68:9b:4f:26:84:66:00:97:c0:50:a1:11:
                    33:58:97:73:51:16:7c:aa:ce:72:4e:70:da:5c:09:
                    27:86:14:f1:26:59:c6:78:da:f4:1f:d3:1b:10:f9:
                    52:9c:e2:32:16:f5:4d:86:29:2f:bd:e4:a5:30:3f:
                    99:c7:15:47:d3:4a:41:16:f6:2a:7c:84:a8:b9:9c:
                    5c:0f:fb:db:27:03:43:03:c2:8d:a7:e1:97:3b:f3:
                    8f:d2:94:12:14:7f:79:c2:9c:76:b6:0f:19:0b:e8:
                    31:bc:58:26:69:ee:59:5a:03:03:a5:82:97:de:20:
                    b8:7d:95:93:c6:cb:ca:8c:45:74:85:43:b1:ae:37:
                    92:99:28:f4:3c:c1:c0:78:c1:b5:a4:18:17:e2:0c:
                    e8:af:2b:a8:ff:8e:95:57:7c:ad:27:44:25:56:7d:
                    3d:c6:74:ca:fc:8e:e5:0f:73:7c:4e:c6:4f:b8:1f:
                    55:00:cb:20:c0:08:aa:1f:2d:68:24:c6:c7:d9:a6:
                    e0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:8B:3B:3F:8B:D6:D5:B5:76:AF:5C:84:09:63:49:B4:41:8F:04:C8
            X509v3 Authority Key Identifier:
                keyid:47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:b2:3c:54:03:ca:aa:c3:69:26:7a:18:93:f2:4d:b5:79:87:
         47:72:d6:64:9f:d6:cc:67:61:9c:64:6e:fb:ad:d0:be:bb:4f:
         22:75:4f:0a:ba:01:e5:4f:c2:a5:27:ed:52:b7:84:f9:ba:a9:
         20:c9:9e:96:dc:dc:b2:13:97:d0:28:7d:4e:06:25:c5:6f:f0:
         e1:d3:03:7d:61:e8:a9:80:c5:f0:6a:b8:a9:8f:e6:8f:d7:bf:
         dd:f8:b5:6a:28:71:49:a6:54:ee:0c:31:86:8f:81:5b:6e:41:
         76:6d:95:11:82:96:6e:7b:b4:a3:c9:bc:9b:8c:ea:6b:07:4e:
         84:e7:cf:73:98:08:8e:2d:34:f5:42:94:c5:be:22:cc:f1:35:
         2d:92:a3:26:0f:f3:07:3a:41:1a:81:1b:69:72:dc:cb:c1:9c:
         73:01:91:3b:60:b2:20:6f:45:f0:cd:65:b6:bf:f8:d0:7c:1c:
         72:e0:72:dd:6f:d8:44:0b:02:7c:bc:07:e1:13:33:61:ac:16:
         d0:09:8b:84:39:94:e1:ee:e4:d4:42:f6:25:8b:dd:6f:56:fa:
         e7:55:d6:9c:d4:c5:e5:d1:98:a6:58:d8:b5:80:d8:f5:e0:75:
         d5:50:31:16:13:bd:54:ec:39:80:34:27:87:d3:d4:18:a8:6e:
         0f:bb:10:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:09:31 2026 by rpki-client