Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft
File:                     cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft (raw, json)
Hash identifier:          65thkGE+0SwYoQlQqcUPCRvUOUzf/gN+/OWJ418qAj4=
Subject key identifier:   B6:69:5D:BE:4B:21:AA:F3:4B:EA:76:2E:17:66:8E:3D:73:B8:13:49
Authority key identifier: 70:4C:39:E9:B2:30:2E:C9:7A:9C:AE:99:EC:E7:94:5B:81:F2:CB:ED
Certificate issuer:       /CN=A9171996/serialNumber=704C39E9B2302EC97A9CAE99ECE7945B81F2CBED
Certificate serial:       B8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft
Manifest number:          B6
Signing time:             Fri 09 Oct 2026 07:39:01 +0000
Manifest this update:     Fri 09 Oct 2026 07:39:00 +0000
Manifest next update:     Fri 16 Oct 2026 07:39:00 +0000
Files and hashes:         1: cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl (hash: e9d5CC5e1a2L6GOroYNo4YQ+mHUTQO8kTKOGnQ0fFHo=)
                          2: 125C30DAAE6811F09E31E129C4F9AE02.roa (hash: ZQnPx0Gfa+D/DsNGzSZbn0CDbcNNkPZZEr8XRi55tUI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl
                          rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 07:38:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171996, serialNumber=704C39E9B2302EC97A9CAE99ECE7945B81F2CBED
        Validity
            Not Before: Oct  9 07:39:00 2026 GMT
            Not After : Oct 16 07:39:00 2026 GMT
        Subject: CN=6ac89a15-18e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e7:67:15:69:18:c8:ca:75:12:c7:87:68:9a:
                    cd:f3:16:2e:c5:a1:8c:3e:bd:36:93:ba:31:22:8b:
                    3b:44:16:8d:53:59:e0:36:0f:02:7b:c9:1c:28:70:
                    63:3b:20:45:10:13:ab:2f:a4:4a:c1:a3:f4:35:4b:
                    a4:93:1b:83:97:47:cc:9d:a3:39:6b:ac:af:21:a9:
                    bc:5e:6a:b8:22:f8:de:be:6b:d4:78:69:57:61:5f:
                    42:6c:5a:f5:1e:f5:d9:8e:aa:5c:29:de:2e:97:26:
                    97:9b:bd:cd:e5:79:c5:32:0b:e2:c8:c5:42:b7:c0:
                    0b:88:99:5a:f1:94:57:82:55:f2:94:7f:e7:0d:61:
                    bf:46:6c:72:4d:04:9b:22:87:2b:57:e0:23:87:76:
                    4d:57:4a:59:79:d4:90:72:86:60:9d:23:29:4f:2b:
                    d1:f8:be:38:1c:98:f5:f8:47:80:17:85:36:df:df:
                    73:bb:57:88:fc:a5:fc:fa:a3:77:08:95:54:94:3d:
                    b2:bb:df:27:55:6f:e7:58:74:c1:85:c5:92:79:a6:
                    54:3c:5b:71:cc:63:53:72:ef:f0:61:6a:0f:b9:11:
                    17:b8:fc:19:ab:2f:d8:f6:91:b4:15:04:20:86:5f:
                    44:11:b9:4e:5d:5b:dd:a7:42:18:59:3f:cd:09:29:
                    b0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:69:5D:BE:4B:21:AA:F3:4B:EA:76:2E:17:66:8E:3D:73:B8:13:49
            X509v3 Authority Key Identifier:
                keyid:70:4C:39:E9:B2:30:2E:C9:7A:9C:AE:99:EC:E7:94:5B:81:F2:CB:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:af:1a:6d:5f:72:a3:c3:8c:6e:7b:48:6a:1b:ab:6e:0e:ad:
         cf:5c:1e:db:38:35:42:90:d1:2a:5d:85:d0:ea:31:ef:44:6c:
         bc:2e:de:64:5c:13:e0:56:b2:84:72:53:e1:1d:68:02:b3:b4:
         5f:40:d6:e8:cd:b9:ae:f3:35:bb:9f:7f:67:4f:cb:5e:c7:f9:
         15:6c:08:b2:e7:69:e7:6c:b2:b4:88:62:42:5e:f3:8b:76:40:
         bb:4b:83:0d:8f:f8:24:3c:e7:7e:3b:20:69:21:86:47:33:78:
         73:03:17:90:29:5e:0c:00:f0:1f:36:ed:67:3f:7c:68:48:fa:
         f7:53:b6:92:56:ca:a2:f9:e7:8d:a9:ae:f8:1d:ba:3f:47:aa:
         51:44:05:29:f0:e4:ac:11:7f:d3:cb:3e:dc:6e:a7:2d:52:5b:
         af:ae:34:04:64:61:c8:8a:7f:ce:4e:ba:98:90:77:01:a7:d2:
         75:e3:56:c0:38:ce:57:b8:33:40:46:a1:d9:ad:d9:14:93:a0:
         36:72:6a:6b:f1:74:ad:f6:ca:b8:12:3f:dd:31:5e:2d:74:86:
         e7:35:82:60:20:b4:fd:a3:ae:31:5b:d7:53:fa:97:48:3d:83:
         92:c9:5c:cd:c8:f8:b3:65:04:56:27:1a:d0:5c:30:cc:6c:fd:
         e2:0a:ec:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:35:48 2026 by rpki-client