Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft
File:                     6XH_tEATQSECHGJem3DrGuWij2A.mft (raw, json)
Hash identifier:          GT2ZGVopwN64chhdIxJT5sq/juw32RIAFPAeqvW5iFU=
Subject key identifier:   81:D4:3E:F4:CE:FD:C4:A8:D7:D0:7A:EB:2F:FF:5F:05:42:EF:8D:75
Authority key identifier: E9:71:FF:B4:40:13:41:21:02:1C:62:5E:9B:70:EB:1A:E5:A2:8F:60
Certificate issuer:       /CN=A911EDE5/serialNumber=E971FFB440134121021C625E9B70EB1AE5A28F60
Certificate serial:       0E4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft
Manifest number:          0E3E
Signing time:             Wed 14 Oct 2026 17:54:06 +0000
Manifest this update:     Wed 14 Oct 2026 17:54:06 +0000
Manifest next update:     Wed 21 Oct 2026 17:54:06 +0000
Files and hashes:         1: 6XH_tEATQSECHGJem3DrGuWij2A.crl (hash: DIt861vmpn5IuIxlcv9QDXi3eHx0goyErQeOxCksKaw=)
                          2: 89D124B6D51311E98A41293BC4F9AE02.roa (hash: MCiCoDcn9iWsMnw+W4ic1bgrDj5hNzV2NifUiMBx2Ro=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.crl
                          rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Oct 2026 17:54:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3658 (0xe4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EDE5, serialNumber=E971FFB440134121021C625E9B70EB1AE5A28F60
        Validity
            Not Before: Oct 14 17:54:06 2026 GMT
            Not After : Oct 21 17:54:06 2026 GMT
        Subject: CN=6acfc1be-b082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f5:09:46:03:85:cc:04:85:2d:86:e4:03:f3:
                    d1:38:23:67:89:39:22:89:ed:7f:d9:98:43:38:43:
                    39:9a:77:3b:10:e9:e4:ec:70:78:4d:eb:e6:b0:40:
                    e2:0c:1b:e2:39:87:4c:cc:7b:c6:30:a7:e4:52:f7:
                    bb:93:91:44:a6:c7:b1:93:33:74:15:d7:a5:7a:78:
                    0a:08:62:18:e7:37:21:d5:97:79:c8:27:74:3a:b6:
                    b5:b3:be:0b:5e:b5:ae:08:58:7e:24:7f:b7:78:e7:
                    ae:c3:44:3d:7e:64:e1:e7:7d:0b:3d:7c:0b:e7:16:
                    19:df:86:ef:a7:f2:c1:fe:51:f8:71:9f:b2:cd:cf:
                    47:65:b8:d4:b7:db:62:22:f3:bd:e3:b9:69:8a:db:
                    f4:6d:c4:90:53:05:9e:3d:12:d2:1c:de:1b:1e:4a:
                    1c:95:1f:64:6d:c1:2a:f8:42:a7:d4:11:7f:d2:97:
                    f4:c4:02:ac:a7:23:c6:e6:85:02:04:ff:7d:3c:70:
                    b4:b8:79:0d:52:27:e2:78:02:d0:45:8a:16:87:95:
                    84:b5:6b:d3:7f:68:73:f1:94:17:eb:1d:b5:b2:6d:
                    37:45:cd:a7:6f:da:3b:51:31:00:c8:c4:cc:f1:13:
                    24:ed:b8:fe:1a:bc:1b:d2:27:ea:94:e6:14:c6:6f:
                    f0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D4:3E:F4:CE:FD:C4:A8:D7:D0:7A:EB:2F:FF:5F:05:42:EF:8D:75
            X509v3 Authority Key Identifier:
                keyid:E9:71:FF:B4:40:13:41:21:02:1C:62:5E:9B:70:EB:1A:E5:A2:8F:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:f9:90:a1:e3:27:5c:c8:85:6d:ad:a5:60:08:72:bd:dd:70:
         fb:af:c7:29:35:ed:1a:7c:6b:8e:82:5b:b0:11:4c:90:60:4d:
         5f:cf:f6:36:ea:22:6b:13:df:2f:3a:05:a9:aa:8d:21:7d:c2:
         84:8a:e2:10:08:ac:62:f8:6f:e4:38:1b:ba:b1:b0:e5:91:9c:
         b9:6b:01:ab:2b:b1:c1:72:5d:96:f6:7b:d4:c0:f4:d6:8b:c7:
         11:b5:83:14:b0:73:9b:62:91:42:f0:07:92:9e:26:16:96:f1:
         4b:06:ec:fb:00:2a:18:9f:e5:7f:13:7b:cb:f5:0f:8a:3c:0a:
         e6:86:17:18:f0:5f:71:c4:c0:c0:61:32:da:bf:87:81:e9:26:
         38:cb:36:d1:ab:30:d5:66:2c:a4:0a:5a:ac:9d:40:d1:5e:20:
         f9:66:89:31:48:f9:72:25:16:81:e9:f2:cf:3e:fc:3c:23:62:
         9c:9f:8f:67:8e:b9:a8:99:31:9a:38:32:b1:18:53:f3:53:1d:
         8c:ce:8d:4b:89:35:9e:1a:34:62:6c:cb:96:de:93:10:82:96:
         aa:74:9a:0b:63:e9:d0:af:df:27:21:6e:16:81:76:1e:29:77:
         c6:b0:14:60:6b:ca:1a:1e:2a:ff:6b:0b:84:d9:11:0d:ee:5f:
         98:9b:ab:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 12:31:44 2026 by rpki-client