Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/6lpgP_sqBA47OEsgYbciJy8KljA.mft
File:                     6lpgP_sqBA47OEsgYbciJy8KljA.mft (raw, json)
Hash identifier:          9P03o+zQ3359yTygs8jOIp1TFudB1AllcF37jIwQz90=
Subject key identifier:   D8:88:98:75:F2:54:44:69:9F:92:29:37:6F:58:3D:FC:2B:50:75:E2
Authority key identifier: EA:5A:60:3F:FB:2A:04:0E:3B:38:4B:20:61:B7:22:27:2F:0A:96:30
Certificate issuer:       /CN=A91CF188/serialNumber=EA5A603FFB2A040E3B384B2061B722272F0A9630
Certificate serial:       40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lpgP_sqBA47OEsgYbciJy8KljA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/6lpgP_sqBA47OEsgYbciJy8KljA.mft
Manifest number:          3B
Signing time:             Sun 19 Apr 2026 08:07:46 +0000
Manifest this update:     Sun 19 Apr 2026 08:07:46 +0000
Manifest next update:     Sun 26 Apr 2026 08:07:46 +0000
Files and hashes:         1: 6lpgP_sqBA47OEsgYbciJy8KljA.crl (hash: +hYEjf8V5ecJZUoaH2wKDgK7oi9sajhW1SVjlgYrXAU=)
                          2: 13C4E664EB7C11F08E054CC1506F56BC.roa (hash: olbzdRL6AsNPeS/zgMXxNELZ6EWkpdF2QWq2F03rVGM=)
                          3: E9AA7826EB7B11F08DB6A8BC506F56BC.roa (hash: QnpiKBICTz8gktVGumWZfFFqtGpL9XWz/57p1aG/fO0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/6lpgP_sqBA47OEsgYbciJy8KljA.crl
                          rsync://rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/6lpgP_sqBA47OEsgYbciJy8KljA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lpgP_sqBA47OEsgYbciJy8KljA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 08:07:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF188, serialNumber=EA5A603FFB2A040E3B384B2061B722272F0A9630
        Validity
            Not Before: Apr 19 08:07:46 2026 GMT
            Not After : Apr 26 08:07:46 2026 GMT
        Subject: CN=69e48d52-49eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:92:5c:e9:a8:ec:e7:b6:bd:a3:3a:5f:42:a8:
                    2b:8a:bb:1e:20:52:f5:80:b5:44:a8:53:6e:f1:72:
                    c9:75:ef:0a:ee:c3:2f:4c:a5:8b:2c:75:6a:a9:5d:
                    8d:6b:34:71:5a:7d:cb:90:2e:ad:bd:40:ee:ed:3d:
                    d9:e2:b7:4f:95:93:d1:c2:78:73:25:fc:3f:e5:42:
                    25:ab:4c:f0:8d:5a:d6:f9:10:10:38:b5:53:c9:6a:
                    13:c0:ab:a8:c9:df:0d:7c:30:5f:98:eb:da:fc:98:
                    b3:85:ca:e7:1c:db:aa:cc:d1:68:dd:62:ac:07:16:
                    8a:59:2d:83:9c:eb:01:2c:3a:27:a2:4c:a3:bc:b5:
                    7f:71:09:56:79:72:a4:a9:72:7b:f8:27:60:68:fc:
                    b9:5d:8a:4e:d7:2e:ae:c4:e9:2f:6d:09:a1:e0:e1:
                    10:08:58:68:6a:65:da:f8:56:30:ee:06:d0:ff:2e:
                    f7:21:9d:1b:fc:29:b8:ec:11:ce:45:ea:a3:7c:e3:
                    1a:d0:31:ee:cd:f2:fb:cf:3d:38:a2:f6:ea:12:7b:
                    06:48:7c:7c:35:79:e1:6e:72:27:87:5d:9d:f4:26:
                    81:86:04:ce:5a:17:07:d8:df:48:ee:bd:8e:78:83:
                    60:d0:d1:97:de:39:69:b5:e8:54:5b:fd:24:69:b5:
                    db:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:88:98:75:F2:54:44:69:9F:92:29:37:6F:58:3D:FC:2B:50:75:E2
            X509v3 Authority Key Identifier:
                keyid:EA:5A:60:3F:FB:2A:04:0E:3B:38:4B:20:61:B7:22:27:2F:0A:96:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/6lpgP_sqBA47OEsgYbciJy8KljA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lpgP_sqBA47OEsgYbciJy8KljA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF188/E2EE5C6AEB7A11F081AA5792506F56BC/6lpgP_sqBA47OEsgYbciJy8KljA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:bb:2f:ef:c6:0d:ec:bd:a2:e4:6f:12:8f:b3:ca:c6:63:b2:
         9f:6d:e6:b3:bc:e3:f0:4f:53:8f:c5:99:84:c7:b9:a0:ca:a0:
         39:e8:d0:18:dd:e5:f0:51:52:f4:72:28:a7:4c:8a:f6:ea:e1:
         02:3f:e8:b8:6e:44:0b:ed:e3:f4:f9:b8:5f:db:cb:b8:23:c5:
         f5:e1:57:a1:9a:91:4b:ff:7a:72:e6:11:4b:04:22:4d:a3:a4:
         8b:8c:3b:c4:5c:39:39:d4:b8:a8:b1:15:d8:80:c8:27:e8:dd:
         0f:34:a1:c2:7d:3a:d5:e6:73:93:57:64:7a:b5:66:63:d2:5a:
         b7:91:52:ce:a4:1f:af:7e:39:71:36:14:29:51:42:a8:16:32:
         c7:11:a2:8f:b7:55:1c:53:ab:34:34:13:e0:d0:e7:f9:8e:d9:
         b8:7e:34:f8:bf:d4:f4:ed:4d:0c:1a:d2:ad:38:c5:2d:03:f8:
         18:e8:8d:b3:ca:1b:b0:77:18:c1:88:0f:b4:a3:da:5f:fb:a1:
         91:2b:bd:7a:ed:67:c5:ed:ac:26:55:83:56:d2:6c:c9:a7:f5:
         b8:f8:12:0b:f5:4e:d6:ec:af:75:91:da:d9:15:53:d0:e9:6f:
         46:56:ad:fa:57:b9:c5:a1:31:2f:17:d0:4c:06:54:d3:3a:da:
         e7:83:49:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 21:42:24 2026 by rpki-client