Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3125/7172E09821B611F1893FBCFD183D8C67/p6EQyKQCniUhVGPO4h2lf7ZLiuQ.mft
File:                     p6EQyKQCniUhVGPO4h2lf7ZLiuQ.mft (raw, json)
Hash identifier:          ckIZJXSnzIR9tLi8Ox1hQVy6mNLr2HWnFoCrsh0VhiE=
Subject key identifier:   21:A3:3C:BB:3B:91:9D:28:08:E2:92:CC:58:AA:E1:D8:CB:D2:7F:07
Authority key identifier: A7:A1:10:C8:A4:02:9E:25:21:54:63:CE:E2:1D:A5:7F:B6:4B:8A:E4
Certificate issuer:       /CN=A91E3125/serialNumber=A7A110C8A4029E25215463CEE21DA57FB64B8AE4
Certificate serial:       23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6EQyKQCniUhVGPO4h2lf7ZLiuQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3125/7172E09821B611F1893FBCFD183D8C67/p6EQyKQCniUhVGPO4h2lf7ZLiuQ.mft
Manifest number:          22
Signing time:             Tue 19 May 2026 08:42:43 +0000
Manifest this update:     Tue 19 May 2026 08:42:42 +0000
Manifest next update:     Tue 26 May 2026 08:42:42 +0000
Files and hashes:         1: p6EQyKQCniUhVGPO4h2lf7ZLiuQ.crl (hash: dyxiJQO0+UJsdTU+xduZI+Qfmq6TSom3ZmWfpNovmac=)
                          2: BB455B6A21B611F180955D50193D8C67.roa (hash: T5dGYO6xIA3iT8OTT5zsMy1BjQKaQzVyRcAZAGPI9p0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3125/7172E09821B611F1893FBCFD183D8C67/p6EQyKQCniUhVGPO4h2lf7ZLiuQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E3125/7172E09821B611F1893FBCFD183D8C67/p6EQyKQCniUhVGPO4h2lf7ZLiuQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6EQyKQCniUhVGPO4h2lf7ZLiuQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 May 2026 08:42:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3125, serialNumber=A7A110C8A4029E25215463CEE21DA57FB64B8AE4
        Validity
            Not Before: May 19 08:42:42 2026 GMT
            Not After : May 26 08:42:42 2026 GMT
        Subject: CN=6a0c2282-b0ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:08:c8:6c:2b:9d:9f:d1:ef:62:98:06:08:9e:
                    5c:33:d6:cf:3a:b4:91:cc:c7:c7:87:02:57:cc:da:
                    3e:4c:4c:6d:4a:36:1a:39:37:52:ef:04:1f:d1:e1:
                    18:13:cc:ac:00:84:0b:83:a2:63:a3:2a:63:0c:c7:
                    39:79:c4:b7:d8:04:6b:d1:76:a0:b2:a9:58:48:9e:
                    fe:59:92:21:5b:5a:54:a8:03:4c:87:c0:3b:0a:c7:
                    b4:2d:31:9d:db:7e:39:55:90:3d:34:05:e3:ec:8e:
                    af:0a:4d:42:51:ff:c6:fa:ee:e5:b1:26:8a:52:e6:
                    48:5e:26:b5:14:63:06:d1:51:78:05:44:92:3f:cd:
                    c0:b6:90:29:91:72:eb:38:ff:cb:a6:ef:cd:ef:8e:
                    57:3f:4f:9e:6b:38:03:f7:3b:6f:12:98:f2:30:dd:
                    56:df:14:d4:73:33:06:a9:f7:6b:7b:a3:2d:25:e2:
                    c8:e9:6c:3a:e4:49:30:ef:bf:dd:70:7a:b1:7d:43:
                    76:b0:2d:90:ec:bb:3f:04:cb:ec:d4:b6:d7:07:65:
                    d2:60:e6:af:b9:31:91:aa:3c:6d:61:47:8a:48:c8:
                    11:35:76:26:a8:df:45:6d:f0:25:b2:2a:8d:71:86:
                    3e:c0:17:f4:fc:a5:9d:7c:2c:f6:cf:46:8f:2e:2f:
                    d9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:A3:3C:BB:3B:91:9D:28:08:E2:92:CC:58:AA:E1:D8:CB:D2:7F:07
            X509v3 Authority Key Identifier:
                keyid:A7:A1:10:C8:A4:02:9E:25:21:54:63:CE:E2:1D:A5:7F:B6:4B:8A:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3125/7172E09821B611F1893FBCFD183D8C67/p6EQyKQCniUhVGPO4h2lf7ZLiuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6EQyKQCniUhVGPO4h2lf7ZLiuQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3125/7172E09821B611F1893FBCFD183D8C67/p6EQyKQCniUhVGPO4h2lf7ZLiuQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:be:ca:0c:69:7c:4a:46:bb:39:47:a5:2a:0d:ed:ec:12:56:
         8d:a6:80:1c:53:9e:23:05:60:bb:35:ba:05:db:2f:d6:ef:3d:
         a7:70:3c:2f:89:20:ca:c7:a0:90:23:bd:53:96:cc:cd:b7:6f:
         46:98:32:59:91:24:15:75:5e:55:45:ae:57:31:dc:88:68:96:
         70:54:ba:1c:58:21:48:4e:b8:92:d2:65:fb:e5:04:0b:0a:63:
         3e:7e:65:7c:76:9a:59:55:fe:94:0b:9e:63:0c:2b:ae:57:5a:
         91:e8:f0:b1:95:94:1c:15:c2:73:cc:b2:b2:9d:a7:19:ed:d0:
         c7:0d:f7:ed:23:9d:a0:e0:58:9e:1d:a0:d1:66:5b:9a:cc:15:
         ba:f8:7a:52:d0:e5:5f:50:b6:03:15:c2:14:8c:26:4f:01:3a:
         34:2b:8c:f9:85:bf:07:11:97:5d:4c:a5:4c:a4:61:a6:a1:fd:
         c4:86:a4:c5:61:7f:6f:da:d0:f7:7e:e9:aa:79:0e:a7:19:3c:
         cf:41:65:47:1d:42:57:67:7b:7d:60:ba:b6:4d:c7:80:8a:04:
         5d:6c:d1:b7:77:83:d7:02:73:f8:44:a8:1b:64:ed:57:26:6f:
         cb:5f:a9:94:52:39:0d:3a:08:d6:87:fd:61:4b:d7:a1:a8:b3:
         98:3c:94:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:51 2026 by rpki-client