Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/mP6mxE_1MoSDXoHQcN_BggttUOk.mft
File:                     mP6mxE_1MoSDXoHQcN_BggttUOk.mft (raw, json)
Hash identifier:          QqdAxZzBa9wKQvZUbpzTAdGJz4TI/Ap2iMzxEjWO7y4=
Subject key identifier:   4B:05:AD:F6:CD:A0:C8:0A:B7:0E:A8:C6:AF:49:44:29:80:B1:AD:62
Authority key identifier: 98:FE:A6:C4:4F:F5:32:84:83:5E:81:D0:70:DF:C1:82:0B:6D:50:E9
Certificate issuer:       /CN=A912F6E3/serialNumber=98FEA6C44FF53284835E81D070DFC1820B6D50E9
Certificate serial:       015F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mP6mxE_1MoSDXoHQcN_BggttUOk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/mP6mxE_1MoSDXoHQcN_BggttUOk.mft
Manifest number:          0157
Signing time:             Mon 21 Sep 2026 05:16:35 +0000
Manifest this update:     Mon 21 Sep 2026 05:16:35 +0000
Manifest next update:     Mon 28 Sep 2026 05:16:35 +0000
Files and hashes:         1: mP6mxE_1MoSDXoHQcN_BggttUOk.crl (hash: Bc5QLNtOTT+U0NQX54x8S28r7NhBHNve9tsVS60E6WI=)
                          2: B21566C0EE5911EF87651F0AC4F9AE02.roa (hash: DfVZI77hpfh54+6/FrxIu9n2AVdo9X/i5TCPodhUnSU=)
                          3: C241D8CCE1DD11EF9D21BB10C4F9AE02.roa (hash: mIOpDyIPpf6ASTI5R5/RlF1Z8yMeub9X5S2pHqMvSFw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/mP6mxE_1MoSDXoHQcN_BggttUOk.crl
                          rsync://rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/mP6mxE_1MoSDXoHQcN_BggttUOk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mP6mxE_1MoSDXoHQcN_BggttUOk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 05:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 351 (0x15f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F6E3, serialNumber=98FEA6C44FF53284835E81D070DFC1820B6D50E9
        Validity
            Not Before: Sep 21 05:16:35 2026 GMT
            Not After : Sep 28 05:16:35 2026 GMT
        Subject: CN=6ab0bdb3-bd23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:39:4e:5e:db:2b:5a:2d:62:a9:9c:49:f8:b8:
                    77:41:e7:21:c0:f8:6b:5f:00:34:f4:b0:23:51:2d:
                    1e:0f:ba:01:b6:0f:d8:16:36:88:df:11:08:df:cf:
                    07:56:79:0e:36:f5:21:d4:b5:e2:11:45:ec:cb:ff:
                    66:eb:cb:1b:b2:01:58:9c:22:5e:b9:98:4d:e7:7a:
                    5a:7d:bb:f5:8f:f3:35:9f:d9:21:d3:1d:9f:54:81:
                    c0:1f:7c:e6:1e:08:82:3d:0a:02:32:10:de:02:5c:
                    5c:0e:2e:e1:33:2b:15:2c:36:c0:c2:ee:3c:83:62:
                    69:8f:43:12:31:86:ce:cc:6c:49:76:b5:62:f3:43:
                    62:d7:8d:70:96:6c:37:76:84:86:c0:42:e9:b0:b6:
                    a4:8a:38:fa:25:68:4d:be:3e:ae:a5:a0:1d:ee:c5:
                    4d:ce:57:72:c7:8f:cf:3b:da:d7:03:db:06:b1:70:
                    37:73:a3:c6:a2:e7:df:c3:d6:83:40:3d:db:59:14:
                    17:ef:86:dc:e5:5b:d0:41:1a:50:b4:97:c8:7a:35:
                    ee:67:17:ad:4a:94:e2:a4:c3:85:ee:31:0e:c9:3f:
                    6a:ff:6c:e2:0c:ac:7f:a3:fe:a4:cf:11:ed:64:28:
                    7d:ad:6f:e6:b2:9c:5c:2e:30:15:e8:62:ae:d3:f2:
                    bb:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:05:AD:F6:CD:A0:C8:0A:B7:0E:A8:C6:AF:49:44:29:80:B1:AD:62
            X509v3 Authority Key Identifier:
                keyid:98:FE:A6:C4:4F:F5:32:84:83:5E:81:D0:70:DF:C1:82:0B:6D:50:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/mP6mxE_1MoSDXoHQcN_BggttUOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mP6mxE_1MoSDXoHQcN_BggttUOk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/mP6mxE_1MoSDXoHQcN_BggttUOk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:b5:82:15:d1:b3:1f:e7:ee:fb:02:08:48:74:55:fa:87:81:
         46:ef:38:35:81:e0:4c:6a:16:0c:80:a2:4f:84:b5:68:74:68:
         97:1b:e6:a2:05:87:6f:5f:0f:87:29:cc:57:93:33:48:33:e7:
         c2:3d:ee:cd:cd:fc:76:ae:11:a1:72:dd:68:e2:fa:17:d8:73:
         c4:69:b3:52:6b:f0:c4:db:59:a8:21:54:2d:e3:b3:4b:e8:3b:
         80:85:2c:eb:9c:fa:4e:c7:52:86:b4:ce:d6:29:2e:1a:d4:3c:
         cd:16:89:a4:1c:1f:42:ec:f7:92:b4:65:73:0b:ea:96:e2:36:
         53:a2:e1:af:b0:c0:15:20:ad:c6:af:48:47:b0:20:2d:2c:71:
         be:45:40:66:d1:a7:63:2d:fb:d4:f3:ed:df:19:e7:7d:02:88:
         9d:ac:1b:fa:93:9f:76:d1:01:59:bb:c4:c9:c6:10:aa:cd:f7:
         1b:26:68:6d:fa:d0:04:79:c1:7a:f5:81:fe:95:5e:a2:72:07:
         6e:eb:4c:0a:4a:9c:df:d9:5f:14:74:86:26:09:32:60:0b:5a:
         3c:d9:9a:fa:93:af:28:ae:5e:f9:1a:bb:9b:12:4e:6c:14:c0:
         3a:04:fe:29:a9:9e:d7:45:0e:c9:32:e6:f2:ba:df:78:97:71:
         05:5b:4c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:57:46 2026 by rpki-client