Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
File:                     u6vT8W4QD9nJXUdIhOTanLb6do0.mft (raw, json)
Hash identifier:          CXOwA9fInWj3qCsUq60EvlUwYK09fwHFm3ZFBRE822Q=
Subject key identifier:   D2:2D:D6:59:68:72:6A:BA:F6:CE:40:E0:0A:39:85:85:49:CE:B1:54
Authority key identifier: BB:AB:D3:F1:6E:10:0F:D9:C9:5D:47:48:84:E4:DA:9C:B6:FA:76:8D
Certificate issuer:       /CN=A91886E3/serialNumber=BBABD3F16E100FD9C95D474884E4DA9CB6FA768D
Certificate serial:       02E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
Manifest number:          02DA
Signing time:             Tue 13 Oct 2026 01:31:40 +0000
Manifest this update:     Tue 13 Oct 2026 01:31:39 +0000
Manifest next update:     Tue 20 Oct 2026 01:31:39 +0000
Files and hashes:         1: u6vT8W4QD9nJXUdIhOTanLb6do0.crl (hash: hib7gPUHarA/kh9c0/DjleWQhpe2zMNFpjRkgid/DG4=)
                          2: 61141C1671AC11EDAA89DE61C4F9AE02.roa (hash: onPZDg24JU1SAnJ+1qdctr4Q+6RG244WKpPI60NUB8Y=)
                          3: 60820A4271AC11EDAA89DE61C4F9AE02.roa (hash: AF+OSPPeJ/k4cpuI6pm2/IpiY0n6OFKaOYlrZAsamTo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.crl
                          rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 01:31:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 742 (0x2e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91886E3, serialNumber=BBABD3F16E100FD9C95D474884E4DA9CB6FA768D
        Validity
            Not Before: Oct 13 01:31:39 2026 GMT
            Not After : Oct 20 01:31:39 2026 GMT
        Subject: CN=6acd89fb-902d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:dc:b4:13:e0:af:b7:d2:59:81:93:5d:a5:c4:
                    c4:1b:75:14:25:cd:97:e3:11:29:3c:47:0e:e8:a5:
                    47:7f:df:9d:f4:c1:f6:b5:2c:17:34:f7:5d:b8:ba:
                    53:f1:26:90:a4:2d:b3:96:8b:b8:5f:1a:0d:45:2f:
                    19:57:d7:85:2f:b7:dc:15:32:ef:a2:aa:71:7d:73:
                    ff:00:6d:61:31:f0:df:1c:ce:6c:2f:80:2c:da:b3:
                    f3:ac:6f:36:f7:09:db:97:a4:62:09:c2:10:82:67:
                    5c:cd:0f:bb:15:88:0e:38:99:db:de:c4:a8:a2:d0:
                    75:d1:5c:c2:5c:30:7c:af:75:33:4b:42:1c:0b:27:
                    11:9a:26:53:74:8d:d0:65:64:c3:f5:66:fe:ea:8b:
                    67:9e:6c:c0:da:42:db:76:94:59:d1:87:e6:5a:3d:
                    38:f2:06:88:04:d6:67:6b:28:75:b5:e5:68:db:fc:
                    43:80:cc:cf:2b:4b:c3:0e:ed:2b:3a:3a:fc:80:f4:
                    99:be:7d:33:80:a5:d3:53:83:7c:c7:69:4f:00:29:
                    10:47:db:78:d2:15:42:8e:af:cd:13:59:4d:10:65:
                    d7:13:0c:d0:06:6c:ad:43:c7:f4:6a:a6:41:22:92:
                    37:32:d1:13:40:bb:f2:43:9b:1c:15:55:ec:17:c7:
                    41:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:2D:D6:59:68:72:6A:BA:F6:CE:40:E0:0A:39:85:85:49:CE:B1:54
            X509v3 Authority Key Identifier:
                keyid:BB:AB:D3:F1:6E:10:0F:D9:C9:5D:47:48:84:E4:DA:9C:B6:FA:76:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:e6:a1:fa:93:0b:89:a5:3e:77:80:f5:34:e7:23:e5:21:64:
         d9:86:4e:8f:3c:f8:20:ab:c4:06:d6:55:df:93:8d:39:93:8a:
         c5:8a:74:22:b4:fc:89:b3:15:35:af:75:b1:71:5b:e8:35:48:
         7a:e7:97:38:dd:c1:5e:de:1b:13:cb:7b:80:ca:c1:b1:00:a7:
         28:d1:af:c9:ab:f1:6d:cc:c0:22:99:6f:c9:e2:18:58:7d:f6:
         8d:b9:8b:cb:c0:a5:a0:e0:1b:30:88:56:66:27:dc:78:c4:50:
         8b:7f:c4:84:01:60:17:ca:ab:b5:f1:dd:8b:23:c7:2d:6e:31:
         79:a6:b0:c0:2e:e2:08:4e:52:25:12:88:e5:c8:63:ea:41:6f:
         f2:d2:ab:c1:05:83:3f:0d:0e:8e:b3:9a:25:94:45:ad:66:fb:
         1b:2f:65:cf:c4:49:bf:fe:78:f6:32:18:ec:14:6d:15:58:84:
         95:4c:e3:dd:45:b5:a1:fa:dd:ca:65:06:87:8b:6c:69:68:e8:
         b9:37:dd:51:fb:9e:f6:86:4e:90:03:25:2a:00:34:91:08:4c:
         c7:3c:1b:5c:da:fa:10:4c:c1:bf:5a:92:ed:d9:6f:ef:a1:a8:
         c5:bb:ee:2b:2d:8d:d6:b4:9d:db:8b:c5:e3:78:c0:cd:88:eb:
         58:9d:4c:4a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAuYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODg2RTMxMTAvBgNVBAUTKEJCQUJEM0YxNkUxMDBGRDlDOTVENDc0ODg0RTREQTlD
QjZGQTc2OEQwHhcNMjYxMDEzMDEzMTM5WhcNMjYxMDIwMDEzMTM5WjAYMRYwFAYD
VQQDEw02YWNkODlmYi05MDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6dy0E+Cvt9JZgZNdpcTEG3UUJc2X4xEpPEcO6KVHf9+d9MH2tSwXNPdduLpT
8SaQpC2zlou4XxoNRS8ZV9eFL7fcFTLvoqpxfXP/AG1hMfDfHM5sL4As2rPzrG82
9wnbl6RiCcIQgmdczQ+7FYgOOJnb3sSootB10VzCXDB8r3UzS0IcCycRmiZTdI3Q
ZWTD9Wb+6otnnmzA2kLbdpRZ0YfmWj048gaIBNZnayh1teVo2/xDgMzPK0vDDu0r
Ojr8gPSZvn0zgKXTU4N8x2lPACkQR9t40hVCjq/NE1lNEGXXEwzQBmytQ8f0aqZB
IpI3MtETQLvyQ5scFVXsF8dBfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNIt1llo
cmq69s5A4Ao5hYVJzrFUMB8GA1UdIwQYMBaAFLur0/FuEA/ZyV1HSITk2py2+naN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZFMy8xMjQ3Qjg2MDY2
OTIxMUVEODJCRTcxMzNDNEY5QUUwMi91NnZUOFc0UUQ5bkpYVWRJaE9UYW5MYjZk
bzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3U2dlQ4VzRRRDluSlhVZEloT1RhbkxiNmRvMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
ODZFMy8xMjQ3Qjg2MDY2OTIxMUVEODJCRTcxMzNDNEY5QUUwMi91NnZUOFc0UUQ5
bkpYVWRJaE9UYW5MYjZkbzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdOah+pMLiaU+d4D1NOcj5SFk2YZOjzz4IKvEBtZV35ONOZOKxYp0IrT8ibMV
Na91sXFb6DVIeueXON3BXt4bE8t7gMrBsQCnKNGvyavxbczAIplvyeIYWH32jbmL
y8CloOAbMIhWZifceMRQi3/EhAFgF8qrtfHdiyPHLW4xeaawwC7iCE5SJRKI5chj
6kFv8tKrwQWDPw0OjrOaJZRFrWb7Gy9lz8RJv/549jIY7BRtFViElUzj3UW1ofrd
ymUGh4tsaWjouTfdUfue9oZOkAMlKgA0kQhMxzwbXNr6EEzBv1qS7dlv76Goxbvu
Ky2N1rSd24vF43jAzYjrWJ1MSg==
-----END CERTIFICATE-----
Generated at Tue Oct 13 08:34:08 2026 by rpki-client