Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.mft
File:                     6GwPcg6WodXwYNlgrkIiElVg3Eo.mft (raw, json)
Hash identifier:          UxJc1r2IT9FFDRT1gTYm+3MLcUjERY8CkV5MDHJZtMc=
Subject key identifier:   84:32:59:60:DE:8A:A1:0D:A7:73:80:A7:04:AC:6B:83:85:41:2B:E8
Authority key identifier: E8:6C:0F:72:0E:96:A1:D5:F0:60:D9:60:AE:42:22:12:55:60:DC:4A
Certificate issuer:       /CN=A91E6314/serialNumber=E86C0F720E96A1D5F060D960AE4222125560DC4A
Certificate serial:       12C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GwPcg6WodXwYNlgrkIiElVg3Eo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.mft
Manifest number:          12B3
Signing time:             Sat 04 Apr 2026 16:57:22 +0000
Manifest this update:     Sat 04 Apr 2026 16:57:21 +0000
Manifest next update:     Sat 11 Apr 2026 16:57:21 +0000
Files and hashes:         1: 6GwPcg6WodXwYNlgrkIiElVg3Eo.crl (hash: E2IWxYIGjm3UVfBvJ1E4xiRoYErMR2MmQ6o/ntVuwdI=)
                          2: E1A56FBAE0D311E88A46432AC4F9AE02.roa (hash: +CoEOPC9ENpdvVSY9T7CJBQL5WVmw+Ihk9P6+ohhARE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.crl
                          rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GwPcg6WodXwYNlgrkIiElVg3Eo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 16:57:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4805 (0x12c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6314, serialNumber=E86C0F720E96A1D5F060D960AE4222125560DC4A
        Validity
            Not Before: Apr  4 16:57:21 2026 GMT
            Not After : Apr 11 16:57:21 2026 GMT
        Subject: CN=69d142f2-2b1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e3:25:17:e6:3d:0b:bf:35:fc:91:92:1f:fb:
                    25:3b:11:cb:c5:9b:18:95:d4:76:0c:5f:9a:e2:56:
                    bb:b7:71:3f:b0:46:62:f0:ea:55:dc:53:3e:13:73:
                    9d:58:3c:52:eb:aa:a3:64:3f:98:4e:52:94:79:ca:
                    41:e6:3b:5b:75:c8:7c:f9:d2:32:37:9b:d0:6a:0e:
                    86:5c:68:dd:b5:c6:b6:cd:c6:f9:27:8e:87:44:22:
                    6e:7f:1a:4e:12:ca:31:6b:6f:46:3b:03:f2:27:3e:
                    bf:4d:2b:cf:22:96:03:51:23:6f:43:63:85:25:5d:
                    3f:d9:f5:b2:f8:d6:ae:90:54:eb:a5:8d:ac:ad:a0:
                    50:79:2f:3c:ca:a8:6e:09:64:7a:8d:c3:8e:01:1c:
                    d7:25:08:29:24:0c:95:6c:14:c6:b5:40:61:4d:93:
                    37:77:de:61:de:d8:3a:c5:31:d1:b0:81:6f:b7:b8:
                    0f:a2:a8:6e:57:ef:a2:36:c4:3f:08:a4:47:6b:ec:
                    78:40:7a:7d:99:3d:cf:46:83:7d:41:df:7a:32:92:
                    5a:d9:f5:09:cd:14:7d:0a:0e:7f:c8:fc:cf:2d:9b:
                    e0:47:34:0d:89:d1:9a:f9:09:64:f7:2c:95:5f:3c:
                    4c:eb:d1:d7:73:f1:e7:58:9c:d1:f0:3a:a9:91:18:
                    a4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:32:59:60:DE:8A:A1:0D:A7:73:80:A7:04:AC:6B:83:85:41:2B:E8
            X509v3 Authority Key Identifier:
                keyid:E8:6C:0F:72:0E:96:A1:D5:F0:60:D9:60:AE:42:22:12:55:60:DC:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GwPcg6WodXwYNlgrkIiElVg3Eo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6314/96FE3006E0D211E8A6313425C4F9AE02/6GwPcg6WodXwYNlgrkIiElVg3Eo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:b1:32:7a:d9:b0:fa:f5:7b:0b:cd:af:78:8d:39:9a:db:41:
         06:34:a0:1b:c4:00:43:1f:e4:61:ac:1f:3e:0a:09:6a:71:44:
         44:9e:46:58:4c:54:3b:60:c2:03:b3:67:c3:56:1f:1c:16:b2:
         ac:16:26:99:7c:06:e7:26:6e:6a:07:8e:28:bb:f6:79:64:16:
         ca:6a:a4:c4:c1:cf:61:76:96:8b:d2:84:c2:94:ad:74:de:b7:
         fd:63:4c:ae:e4:20:da:20:80:a7:ca:de:77:c7:0a:53:dd:ac:
         c8:20:39:58:25:f4:41:13:81:f7:e0:ae:9e:04:c5:84:73:16:
         ce:08:b8:3c:2b:82:bb:bc:1b:26:22:ab:30:e7:53:4a:16:c4:
         94:17:64:6d:52:0c:8e:d6:6c:fe:67:9e:49:c9:ed:2e:c2:f1:
         65:28:bb:18:8f:76:6b:88:bb:2b:fe:a5:f2:e0:7a:0c:ed:2b:
         c8:df:c2:04:49:5f:61:e6:89:0e:77:00:aa:b8:ea:54:d6:7e:
         82:69:cf:b2:d7:75:2f:7e:02:a8:b3:7c:5a:db:6e:eb:5e:1a:
         40:0e:c2:d2:78:7f:51:d6:3a:74:24:b0:83:4f:67:79:aa:5b:
         06:ca:52:cb:39:e5:cf:29:b7:03:04:1c:84:83:d1:7a:da:49:
         82:39:48:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:57:32 2026 by rpki-client