Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft
File:                     r7qhUW6eF_JM-RRbjHzUuoGlekA.mft (raw, json)
Hash identifier:          N0ZR8Iim0bHnsuoQdSA7nldUgsMTL3b3WNoSKKtSxmw=
Subject key identifier:   BF:16:02:1C:84:18:B0:B8:8D:87:65:38:4E:A2:97:39:8B:52:B3:32
Authority key identifier: AF:BA:A1:51:6E:9E:17:F2:4C:F9:14:5B:8C:7C:D4:BA:81:A5:7A:40
Certificate issuer:       /CN=A91568A0/serialNumber=AFBAA1516E9E17F24CF9145B8C7CD4BA81A57A40
Certificate serial:       D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft
Manifest number:          C6
Signing time:             Wed 23 Sep 2026 06:37:13 +0000
Manifest this update:     Wed 23 Sep 2026 06:37:12 +0000
Manifest next update:     Wed 30 Sep 2026 06:37:12 +0000
Files and hashes:         1: r7qhUW6eF_JM-RRbjHzUuoGlekA.crl (hash: derfmMktW90KT5X4hPVpNHzEbdhPR8n8WWkutIzyXnA=)
                          2: 1D0A29A68E2911F08D963C69C4F9AE02.roa (hash: N6CBwqrOqMiPVhe2XON5ueLRVOAkc+Y5PryJUTw3C2g=)
                          3: 492317188E2A11F0B9BB726BC4F9AE02.roa (hash: HYvMLgC1MHFAUoLdJHhGm7IqHD4gMmLft4YLWobMVbI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.crl
                          rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 06:37:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208 (0xd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91568A0, serialNumber=AFBAA1516E9E17F24CF9145B8C7CD4BA81A57A40
        Validity
            Not Before: Sep 23 06:37:12 2026 GMT
            Not After : Sep 30 06:37:12 2026 GMT
        Subject: CN=6ab37399-aaac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:4a:a4:9c:dd:5c:3e:64:f9:9e:31:84:2d:12:
                    b9:d7:28:17:d0:bc:d7:8b:81:40:ba:3b:0a:6b:68:
                    0e:b9:9b:c4:fd:3b:b9:0b:45:fd:10:0e:35:4d:de:
                    46:dc:02:f3:fc:9d:80:19:d5:41:3b:06:5b:f8:76:
                    74:7a:84:b4:02:97:f6:32:b5:d5:9b:62:5a:d2:40:
                    2e:42:f4:92:97:6c:11:15:b6:d5:29:f3:cd:b9:20:
                    1b:78:83:97:09:7d:36:24:ae:4e:d5:90:13:3b:9b:
                    79:87:6c:ac:92:9a:ba:9a:f7:e3:6c:79:23:dc:4c:
                    5f:8f:a4:ae:e8:1e:d7:35:42:9c:5e:cf:c9:e2:60:
                    ae:79:a3:d0:03:a4:ad:06:1d:11:01:ed:65:31:72:
                    b4:4a:68:53:da:9b:d7:e3:e7:19:f9:63:f2:c5:70:
                    bc:33:f5:07:06:35:33:9b:13:f9:43:92:7d:d1:ee:
                    24:b2:b3:27:b7:71:95:18:5f:6b:88:68:b5:c2:46:
                    cc:c7:ef:ed:de:77:74:49:8d:c2:c9:99:2d:ed:0a:
                    af:17:2b:aa:45:c8:36:93:bd:13:22:fd:95:3e:af:
                    99:9f:88:5c:46:01:30:c0:31:f8:f0:7e:40:50:31:
                    dc:8f:0c:5f:68:44:bd:ea:14:53:99:59:bf:cc:a1:
                    36:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:16:02:1C:84:18:B0:B8:8D:87:65:38:4E:A2:97:39:8B:52:B3:32
            X509v3 Authority Key Identifier:
                keyid:AF:BA:A1:51:6E:9E:17:F2:4C:F9:14:5B:8C:7C:D4:BA:81:A5:7A:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:c8:37:a7:ef:7a:83:c0:95:e2:b2:b5:8a:6d:c4:12:a1:22:
         29:4a:7e:f3:14:ee:7d:50:a7:c0:d8:58:b5:cc:1f:cf:c8:3b:
         38:05:40:69:93:38:4e:93:3c:4f:e1:e9:a1:2d:e7:0d:88:4a:
         d7:47:6b:22:4b:d0:26:c2:57:fa:9e:15:ed:2a:48:aa:c9:4a:
         3e:59:42:f4:35:55:1a:d0:d8:ad:55:a4:f1:4b:e3:1e:6e:13:
         73:0a:5a:c7:ee:cb:6c:e8:be:da:a6:b2:17:ae:c3:01:15:69:
         51:96:71:a1:8d:88:d1:31:f7:66:b1:c9:46:0b:1a:ee:3c:17:
         d2:37:62:37:f0:22:47:f6:c8:1e:e0:2b:3d:46:84:4f:a8:33:
         88:cb:7c:d8:09:66:ec:24:e8:79:22:18:b8:bc:e8:5f:e3:83:
         47:7d:62:fe:ba:36:1b:de:29:15:a5:e6:8c:40:a3:fd:02:87:
         69:c0:7d:a3:9d:70:ca:aa:c0:44:f5:f9:6f:93:0a:41:55:0d:
         b5:91:a6:a0:54:9e:1e:1a:a4:68:9c:94:38:83:18:ab:3d:80:
         a8:3f:fd:d3:2a:6e:94:40:85:15:08:21:76:0e:62:1b:f8:52:
         71:1b:94:0e:5a:ee:e6:ce:3f:b9:fc:9a:8d:ab:24:a9:ad:e0:
         ec:ac:69:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:21:47 2026 by rpki-client