Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft
File:                     6CbZQgvPRaEIfTATu05KhJYNYcc.mft (raw, json)
Hash identifier:          DGBXk0P7zKqduNg1AsZkxifTLXsTO0dzoCR7AUu2BRo=
Subject key identifier:   F0:F3:0D:2C:A9:D3:9E:C4:78:DD:BB:68:EC:8D:5E:19:0B:81:CC:8A
Authority key identifier: E8:26:D9:42:0B:CF:45:A1:08:7D:30:13:BB:4E:4A:84:96:0D:61:C7
Certificate issuer:       /CN=A914EAE4/serialNumber=E826D9420BCF45A1087D3013BB4E4A84960D61C7
Certificate serial:       1C0E
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6CbZQgvPRaEIfTATu05KhJYNYcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft
Manifest number:          1C09
Signing time:             Sat 26 Sep 2026 16:16:44 +0000
Manifest this update:     Sat 26 Sep 2026 16:16:44 +0000
Manifest next update:     Sat 03 Oct 2026 16:16:44 +0000
Files and hashes:         1: 6CbZQgvPRaEIfTATu05KhJYNYcc.crl (hash: 6nbAz2sdzh3VqYKb6z9ZJrk+9XracAcLUqIPgB83Flo=)
                          2: D810AAAAB60B11EFB476C022C4F9AE02.roa (hash: t80tcfh1wapFWD/hgCnkYH948NOtpZNQBi/Hg1KijJ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.crl
                          rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6CbZQgvPRaEIfTATu05KhJYNYcc.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 16:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7182 (0x1c0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE4, serialNumber=E826D9420BCF45A1087D3013BB4E4A84960D61C7
        Validity
            Not Before: Sep 26 16:16:44 2026 GMT
            Not After : Oct  3 16:16:44 2026 GMT
        Subject: CN=6ab7efec-c72b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d4:89:ee:3f:58:63:52:43:78:2e:5c:58:56:
                    35:bc:03:fb:e2:9f:f8:0b:dc:30:68:f5:be:0f:bc:
                    dd:82:16:c5:0b:81:2c:b3:2d:6b:d4:b4:64:f0:7f:
                    f5:65:1c:67:b4:03:a9:8b:95:2b:53:6d:6a:cc:6a:
                    9f:af:3a:3a:16:03:39:8b:9e:4a:18:3a:04:39:4c:
                    93:14:88:05:a8:9e:74:5d:6f:65:a8:08:c2:05:c0:
                    68:1f:c6:97:b5:2c:1b:86:c5:09:40:98:5b:52:3e:
                    6a:f0:ac:4b:0c:6d:ad:17:64:10:41:82:a4:82:fb:
                    73:98:a1:98:86:9b:44:cb:4a:6d:67:1e:d2:25:4d:
                    4e:27:fb:40:6e:0f:0c:38:cc:ba:05:08:ee:b1:0c:
                    c1:2c:7c:3f:b1:65:32:0f:da:82:f9:38:e2:24:94:
                    2b:5c:b1:c4:23:7e:44:86:6d:dd:b1:a2:26:b4:f3:
                    cb:3c:1c:1b:39:7f:b9:c4:d1:9b:97:f6:7f:0d:9f:
                    e3:27:29:ac:49:6d:2f:ea:78:09:1c:55:ae:64:39:
                    e9:dd:1b:7c:f1:48:46:c3:4b:d7:1c:6c:89:44:3c:
                    cd:9f:dc:2d:21:a3:67:ce:72:b4:e4:f4:87:b4:9f:
                    d7:9c:3c:c3:ac:b6:ba:90:f4:7a:a6:5d:aa:82:f8:
                    50:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F3:0D:2C:A9:D3:9E:C4:78:DD:BB:68:EC:8D:5E:19:0B:81:CC:8A
            X509v3 Authority Key Identifier:
                keyid:E8:26:D9:42:0B:CF:45:A1:08:7D:30:13:BB:4E:4A:84:96:0D:61:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6CbZQgvPRaEIfTATu05KhJYNYcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:71:49:47:84:47:90:be:07:67:33:14:3c:6f:05:8c:83:d5:
         07:3e:b2:53:d9:8c:f3:e7:43:53:cc:8f:2a:42:34:7e:83:a1:
         80:c8:ec:cf:c3:9b:1d:41:49:65:31:4f:65:87:26:86:ef:b5:
         25:21:2f:32:7d:72:5b:b0:a3:0e:32:fa:1e:04:cc:f4:2b:3f:
         0b:73:1f:c3:a5:22:a1:8a:3b:13:68:02:95:53:a7:78:21:57:
         93:87:60:20:4a:af:ab:0b:e8:a8:e4:c6:5a:b3:03:45:7b:b9:
         f0:f8:86:49:15:e3:23:92:9e:c0:30:2e:22:55:98:f4:a4:e7:
         a1:42:b0:e6:3b:ee:34:11:12:0f:88:59:7c:31:c5:66:42:c9:
         62:91:f1:a5:4a:b4:67:8d:42:06:23:e1:88:d8:5b:f1:41:6b:
         4a:ab:ce:e3:ab:db:8b:12:7d:31:4d:be:df:82:6b:d0:62:f4:
         8f:35:9a:59:5a:e2:6b:1a:8c:39:01:45:82:76:98:b5:6f:66:
         5f:59:dc:67:4f:05:3f:2f:ad:e7:6b:79:e7:7b:f5:8e:e6:81:
         ca:fe:8f:47:45:86:40:16:39:9c:fa:43:68:e5:87:d3:7b:52:
         80:dd:8e:f4:0f:63:d4:f6:44:e8:eb:6a:71:c8:ff:67:f0:a6:
         78:0a:b3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:36:23 2026 by rpki-client