Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft
File:                     C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft (raw, json)
Hash identifier:          KDoJU7ZKHvJ66H0OTHvL0WTq6JeQ6fpRHGr9Tnt0oWE=
Subject key identifier:   44:86:1E:D0:5C:C7:B0:2C:9C:9B:2A:CC:D1:B6:BA:DE:92:F4:9C:AB
Authority key identifier: 0B:A6:82:E8:03:8D:77:1A:37:07:EA:FA:82:FD:D0:4C:42:9A:4F:86
Certificate issuer:       /CN=A9197E5D/serialNumber=0BA682E8038D771A3707EAFA82FDD04C429A4F86
Certificate serial:       0286
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6aC6AONdxo3B-r6gv3QTEKaT4Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft
Manifest number:          0280
Signing time:             Mon 05 Oct 2026 02:12:26 +0000
Manifest this update:     Mon 05 Oct 2026 02:12:25 +0000
Manifest next update:     Mon 12 Oct 2026 02:12:25 +0000
Files and hashes:         1: C6aC6AONdxo3B-r6gv3QTEKaT4Y.crl (hash: ZlaZgtaAS1hpHMzqVRKxpyU6l4PzcyAK25GjUveihFw=)
                          2: 582836EAF0BF11ED9EC0094AC4F9AE02.roa (hash: WZyXijNT2/qLi4CbFT1eB1AVRbLAqbleS+ktkCs1S8g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.crl
                          rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6aC6AONdxo3B-r6gv3QTEKaT4Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 02:12:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 646 (0x286)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197E5D, serialNumber=0BA682E8038D771A3707EAFA82FDD04C429A4F86
        Validity
            Not Before: Oct  5 02:12:25 2026 GMT
            Not After : Oct 12 02:12:25 2026 GMT
        Subject: CN=6ac3078a-3a9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:de:c0:c8:d8:f8:38:f6:fa:87:f5:ae:b0:0a:
                    b5:b4:2b:f2:df:80:b5:14:78:60:c4:bf:9c:dd:a4:
                    b8:65:0f:6d:33:96:9d:95:9d:96:e4:df:88:bc:a4:
                    8d:dc:3c:c2:db:b7:c6:42:7e:77:64:e9:5e:97:07:
                    ea:f4:d8:53:f2:f7:ba:26:07:e7:38:47:18:c0:4e:
                    21:4b:f6:fd:af:f2:e8:fc:41:07:e7:6a:3b:44:7b:
                    b2:c8:eb:03:15:60:68:04:e0:4a:e5:f3:ea:e2:a6:
                    07:88:b0:f3:f8:e8:25:b4:d3:21:42:53:c0:b1:6e:
                    45:8c:ca:d6:fa:41:d6:c6:b5:01:3b:64:08:b2:15:
                    12:ba:3d:e3:f3:73:9a:c1:16:f1:9e:ab:e4:6d:51:
                    e5:1e:0f:c0:e3:8c:5b:28:3a:d8:91:12:0d:e6:3a:
                    96:e0:f4:0e:a5:57:79:bb:17:d7:e0:75:c5:5f:97:
                    69:94:05:78:81:7a:2c:64:e7:33:61:79:e0:20:c7:
                    b9:b4:d7:54:be:35:9a:ee:aa:a6:2d:ae:1e:74:58:
                    de:5a:96:b6:fc:85:3f:a0:11:d4:93:8b:59:ee:1c:
                    28:98:87:5f:6d:53:e3:85:fd:89:38:dd:ee:fa:ec:
                    d4:44:5d:91:45:73:ec:5a:4f:39:e4:57:9c:d2:34:
                    85:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:86:1E:D0:5C:C7:B0:2C:9C:9B:2A:CC:D1:B6:BA:DE:92:F4:9C:AB
            X509v3 Authority Key Identifier:
                keyid:0B:A6:82:E8:03:8D:77:1A:37:07:EA:FA:82:FD:D0:4C:42:9A:4F:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6aC6AONdxo3B-r6gv3QTEKaT4Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:30:d3:9e:e7:72:ce:98:0e:8d:ce:cb:35:46:d0:f0:39:ee:
         bf:64:fb:c2:18:2e:01:3e:e9:0f:42:7c:7f:d0:8e:ca:91:c7:
         be:66:18:58:d8:5d:f4:f2:ae:5d:6c:ed:14:02:64:6c:15:81:
         cc:5f:99:33:3c:2a:8a:bf:4f:61:f5:c8:8e:bf:07:33:c3:c3:
         90:bd:90:71:0d:26:84:2f:98:e4:8f:a5:43:77:3b:f1:92:7f:
         d3:45:16:af:a5:4a:8c:fb:10:4a:35:d5:bd:1c:42:71:d6:cd:
         0a:f7:23:d3:74:18:44:e2:b0:a0:be:7d:e6:33:1d:2c:f2:25:
         07:1b:12:0e:bb:94:77:78:3c:b1:b0:01:a5:d4:7e:f3:2a:7a:
         3e:44:f8:18:6a:ca:c1:41:c0:84:06:ff:c6:e5:68:38:fb:2a:
         88:16:8e:bd:ed:83:58:97:0d:07:7e:ca:21:be:f6:8b:d3:18:
         74:53:c4:02:bc:52:db:73:61:7f:d4:a3:83:16:a6:13:81:dc:
         f6:7a:6b:5a:19:4a:47:15:de:7d:f1:70:eb:33:7f:ac:a6:5b:
         6b:85:b0:d3:78:d5:07:62:13:94:10:2c:b3:a7:c4:64:e3:4f:
         4d:ad:1d:4c:1a:69:6c:22:7e:4c:c9:e1:a6:9c:40:5c:3f:89:
         f4:37:38:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:12:48 2026 by rpki-client