Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
File:                     6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft (raw, json)
Hash identifier:          G/G8AJaue/TMHn7Y5wmH9sTPPEDQuZcIuYfwGIyZx+A=
Subject key identifier:   0A:8E:7B:71:71:20:53:88:3B:FC:E9:90:9D:00:0A:96:88:87:B2:4A
Authority key identifier: E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A
Certificate issuer:       /CN=A9171560/serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A
Certificate serial:       0E0E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
Manifest number:          0DFF
Signing time:             Wed 14 Oct 2026 17:58:34 +0000
Manifest this update:     Wed 14 Oct 2026 17:58:33 +0000
Manifest next update:     Wed 21 Oct 2026 17:58:33 +0000
Files and hashes:         1: 6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl (hash: MBlNk9JS6sjgw9prPJLDzu6Ij5FwYoHdPzYUrLVQAtY=)
                          2: 65AF30D422D211EAB3ABA447C4F9AE02.roa (hash: SpbIbEkDahuE0FpgXQMAQxNKykLsdisk7Ee0ynoLpdc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl
                          rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Oct 2026 17:58:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3598 (0xe0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171560, serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A
        Validity
            Not Before: Oct 14 17:58:33 2026 GMT
            Not After : Oct 21 17:58:33 2026 GMT
        Subject: CN=6acfc2c9-8f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a4:88:f8:6f:17:7c:02:cf:00:7c:fd:07:19:
                    43:76:29:14:df:41:1a:fc:f0:21:90:29:b1:59:0b:
                    97:b7:cf:15:7f:2b:3a:f4:19:f9:fe:0a:95:8e:76:
                    b2:36:2e:6b:2f:1a:67:9d:a7:2c:83:d0:9f:f6:af:
                    f9:1d:7c:a8:30:31:d0:90:af:d1:71:55:a9:37:59:
                    c5:56:9a:b4:93:9a:37:2f:b4:dd:73:eb:6c:04:46:
                    93:9e:d6:21:22:91:31:90:9a:4c:96:6f:0c:3d:3f:
                    0c:2c:c7:f5:70:03:43:ee:a4:0f:cb:88:95:07:5e:
                    e7:8f:18:fb:0d:4e:69:26:e3:9f:10:78:6a:07:16:
                    48:5c:ae:5e:33:86:85:eb:8e:77:e8:23:3e:ee:01:
                    c6:9d:d6:a9:e4:cb:be:d4:6c:e3:a7:29:79:e7:19:
                    bd:41:2b:63:d9:5f:4d:47:a6:c6:7d:11:20:d1:2f:
                    e0:52:fe:4d:b2:96:7f:b9:37:61:37:6b:52:8f:a9:
                    32:ec:dd:a9:25:7a:f9:f6:96:f4:c7:5b:d0:41:af:
                    84:13:90:47:88:d1:88:80:ea:a3:e6:db:59:c4:0f:
                    31:ab:78:e6:04:0c:56:18:41:f5:3d:9b:16:e9:85:
                    8d:23:bf:2a:3b:84:d7:92:fa:af:d7:90:08:f8:73:
                    f9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:8E:7B:71:71:20:53:88:3B:FC:E9:90:9D:00:0A:96:88:87:B2:4A
            X509v3 Authority Key Identifier:
                keyid:E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:68:03:92:15:75:fc:36:7f:09:f6:74:6d:4c:56:57:e0:c5:
         0a:df:46:60:3b:ed:6f:53:36:b9:eb:39:8a:5e:5f:2f:74:24:
         f1:91:91:cd:c0:88:a7:6d:6e:27:ef:96:d2:7b:bc:d2:33:39:
         4c:47:fc:bc:9e:ea:40:4c:3d:85:27:4b:8c:12:71:36:2e:16:
         cc:0c:eb:38:af:fc:2c:8e:f4:a8:6d:9f:7f:a5:a0:11:40:c0:
         af:43:b0:1d:73:19:e3:d0:9d:87:e8:3b:ff:80:f3:3d:a2:cd:
         00:0c:d6:f0:fc:12:ca:25:91:c8:2f:5c:c2:aa:27:60:d3:07:
         93:a1:f0:5b:23:6e:ec:21:49:c1:1e:71:84:d2:41:e1:ae:cb:
         f7:b1:97:f8:83:31:68:00:d8:37:bf:f6:ea:97:35:f3:4f:08:
         1d:b3:1a:28:8c:bc:80:ff:37:0b:2e:b5:90:45:d2:b1:28:49:
         3e:7a:dd:b6:a5:e7:9e:7b:cc:bd:4f:d5:f7:42:40:48:06:64:
         fd:9c:d0:14:94:26:8b:c1:10:fc:08:b1:d9:70:50:a0:fb:99:
         3f:4b:8c:6c:26:80:ac:86:e7:4f:00:db:8b:ea:90:61:2d:b0:
         9a:e8:9a:ca:b0:00:0b:75:57:7a:26:9d:1d:75:bc:5d:16:2d:
         fb:e8:cd:b6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzE1NjAxMTAvBgNVBAUTKEU5QzQxMEM3RERENTI2NzBBQjhGODIxNkM4NzYxNEIx
MEVDMzE3N0EwHhcNMjYxMDE0MTc1ODMzWhcNMjYxMDIxMTc1ODMzWjAYMRYwFAYD
VQQDEw02YWNmYzJjOS04ZjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzKSI+G8XfALPAHz9BxlDdikU30Ea/PAhkCmxWQuXt88Vfys69Bn5/gqVjnay
Ni5rLxpnnacsg9Cf9q/5HXyoMDHQkK/RcVWpN1nFVpq0k5o3L7Tdc+tsBEaTntYh
IpExkJpMlm8MPT8MLMf1cAND7qQPy4iVB17njxj7DU5pJuOfEHhqBxZIXK5eM4aF
64536CM+7gHGndap5Mu+1Gzjpyl55xm9QStj2V9NR6bGfREg0S/gUv5NspZ/uTdh
N2tSj6ky7N2pJXr59pb0x1vQQa+EE5BHiNGIgOqj5ttZxA8xq3jmBAxWGEH1PZsW
6YWNI78qO4TXkvqv15AI+HP5wQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAqOe3Fx
IFOIO/zpkJ0ACpaIh7JKMB8GA1UdIwQYMBaAFOnEEMfd1SZwq4+CFsh2FLEOwxd6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTU2MC9BNzcwM0U5RUU0
MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi82Y1FReDkzVkpuQ3JqNElXeUhZVXNRN0RG
M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzZjUVF4OTNWSm5Dcmo0SVd5SFlVc1E3REYzby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MTU2MC9BNzcwM0U5RUU0MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi82Y1FReDkzVkpu
Q3JqNElXeUhZVXNRN0RGM28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAomgDkhV1/DZ/CfZ0bUxWV+DFCt9GYDvtb1M2ues5il5fL3Qk8ZGRzcCIp21u
J++W0nu80jM5TEf8vJ7qQEw9hSdLjBJxNi4WzAzrOK/8LI70qG2ff6WgEUDAr0Ow
HXMZ49Cdh+g7/4DzPaLNAAzW8PwSyiWRyC9cwqonYNMHk6HwWyNu7CFJwR5xhNJB
4a7L97GX+IMxaADYN7/26pc1808IHbMaKIy8gP83Cy61kEXSsShJPnrdtqXnnnvM
vU/V90JASAZk/ZzQFJQmi8EQ/Aix2XBQoPuZP0uMbCaArIbnTwDbi+qQYS2wmuia
yrAAC3VXeiadHXW8XRYt++jNtg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 08:35:52 2026 by rpki-client