Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BEC0/88448ECAA9C411F1BAD43F9D6E11F970/F6gIZniOytzh9tCsYYLRDDnXf4k.mft
File:                     F6gIZniOytzh9tCsYYLRDDnXf4k.mft (raw, json)
Hash identifier:          sJZP2lcdcKnCIYM7Dw23lmBpzywx0wRrrXleLoHlyq4=
Subject key identifier:   3A:06:7F:22:0E:2B:B0:7E:21:20:3B:43:E5:CD:F0:3A:61:95:BB:EE
Authority key identifier: 17:A8:08:66:78:8E:CA:DC:E1:F6:D0:AC:61:82:D1:0C:39:D7:7F:89
Certificate issuer:       /CN=A911BEC0/serialNumber=17A80866788ECADCE1F6D0AC6182D10C39D77F89
Certificate serial:       13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6gIZniOytzh9tCsYYLRDDnXf4k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BEC0/88448ECAA9C411F1BAD43F9D6E11F970/F6gIZniOytzh9tCsYYLRDDnXf4k.mft
Manifest number:          0E
Signing time:             Mon 21 Sep 2026 09:10:21 +0000
Manifest this update:     Mon 21 Sep 2026 09:10:20 +0000
Manifest next update:     Mon 28 Sep 2026 09:10:20 +0000
Files and hashes:         1: F6gIZniOytzh9tCsYYLRDDnXf4k.crl (hash: AZ/9JyVQFt31jLcK0e2uWXZxNvEpPKjHrMCOkhpX5Y4=)
                          2: DF1733D8A9C411F19B888AE56E11F970.roa (hash: bpFa5fTmur708cOVcV2AQHkyMDdSCS88Rji9UEjFKko=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BEC0/88448ECAA9C411F1BAD43F9D6E11F970/F6gIZniOytzh9tCsYYLRDDnXf4k.crl
                          rsync://rpki.apnic.net/member_repository/A911BEC0/88448ECAA9C411F1BAD43F9D6E11F970/F6gIZniOytzh9tCsYYLRDDnXf4k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6gIZniOytzh9tCsYYLRDDnXf4k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 09:10:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BEC0, serialNumber=17A80866788ECADCE1F6D0AC6182D10C39D77F89
        Validity
            Not Before: Sep 21 09:10:20 2026 GMT
            Not After : Sep 28 09:10:20 2026 GMT
        Subject: CN=6ab0f47d-5767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6a:3f:85:c2:13:95:2f:80:7a:b0:1f:23:a5:
                    94:85:7b:fd:32:c6:a1:d7:96:59:eb:c9:ab:89:fb:
                    fc:29:8b:37:fa:95:b2:23:55:91:a5:9f:79:4e:70:
                    bc:ee:b2:b2:3e:a4:a2:4a:67:ec:d7:e9:9e:a6:3e:
                    6a:fd:04:f6:27:b5:23:bb:24:cb:83:18:e2:6f:6b:
                    2b:d9:cc:d0:80:dd:1a:9b:87:8e:51:8d:c5:e2:12:
                    3b:fb:0c:99:a8:a6:a7:9d:ad:40:b7:29:9d:eb:ba:
                    04:54:e7:13:51:3a:1f:4e:53:00:8e:fb:36:21:7b:
                    07:7d:30:33:b9:e5:af:73:3d:bb:b9:54:8d:3e:e9:
                    29:c9:27:5e:b6:cf:75:90:a3:1f:b0:9c:8d:9e:4d:
                    78:06:63:9f:03:cb:65:eb:a2:08:e0:34:52:57:84:
                    09:57:1a:a7:19:6a:33:5d:a4:53:5b:68:6c:aa:12:
                    e7:0a:7b:0d:fa:62:44:52:88:9a:8a:49:4c:fa:d1:
                    4e:45:f2:50:24:c7:bb:ff:09:91:15:28:eb:19:a3:
                    ec:c7:34:4e:d3:d0:7e:e2:7f:57:0d:cf:c1:be:10:
                    0d:da:86:12:68:bc:c9:24:c1:da:dc:91:81:f0:14:
                    a8:f7:dc:6b:b4:e4:0c:bc:e9:85:04:8e:0e:23:8a:
                    88:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:06:7F:22:0E:2B:B0:7E:21:20:3B:43:E5:CD:F0:3A:61:95:BB:EE
            X509v3 Authority Key Identifier:
                keyid:17:A8:08:66:78:8E:CA:DC:E1:F6:D0:AC:61:82:D1:0C:39:D7:7F:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BEC0/88448ECAA9C411F1BAD43F9D6E11F970/F6gIZniOytzh9tCsYYLRDDnXf4k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6gIZniOytzh9tCsYYLRDDnXf4k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BEC0/88448ECAA9C411F1BAD43F9D6E11F970/F6gIZniOytzh9tCsYYLRDDnXf4k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:bb:07:24:79:48:ca:c5:f4:e4:f5:32:2c:52:32:fd:00:ed:
         27:60:18:2b:be:0c:d3:ff:44:d1:a3:de:c7:40:26:89:69:c1:
         48:0d:0d:4a:0c:03:07:24:ef:78:11:91:77:db:5a:a3:0d:04:
         14:87:4e:7c:29:89:84:a3:50:0c:b1:78:38:98:22:2e:f6:09:
         f7:3d:54:f2:c1:53:93:74:da:6e:92:79:6e:57:ed:33:fa:96:
         d7:dd:7c:7d:c1:03:17:07:60:ca:1f:2b:c0:1b:77:ae:2a:b6:
         de:ec:17:07:13:11:f0:16:3e:27:2a:d5:33:24:aa:48:db:35:
         64:93:8c:aa:7a:5b:06:ee:d4:b1:3b:db:79:c9:4a:c8:ad:3e:
         b8:72:08:58:2f:ee:7e:d8:5d:84:3e:dd:4d:2a:72:f6:ae:fd:
         de:aa:6b:5b:ce:32:b6:0a:1c:40:53:72:f7:36:4d:40:e5:bd:
         ea:e8:2d:c6:78:4b:66:0c:41:3c:59:11:b3:27:29:ae:57:58:
         0d:66:38:76:a7:3a:d9:30:a6:6b:c4:bb:de:00:42:96:a0:a6:
         37:48:81:ac:8a:33:9c:ce:f8:87:99:0b:a6:44:56:80:9f:d2:
         c0:a6:97:49:18:37:24:dc:16:bd:e2:83:c1:74:29:2d:03:24:
         cc:cb:2e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:14:20 2026 by rpki-client