Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919BC76/F1AD3E3EE8BB11ED8538DA1FC4F9AE02/h6EudRSbPYpNJyoTCT72rJslLPM.mft
File:                     h6EudRSbPYpNJyoTCT72rJslLPM.mft (raw, json)
Hash identifier:          uMWPvAQR9+/mptBvHSnkK8HSqoB/XB3x/z9TVcY65n0=
Subject key identifier:   6A:B2:63:6A:B5:E8:92:C7:3F:77:02:35:56:96:9B:69:51:9D:0E:4B
Authority key identifier: 87:A1:2E:75:14:9B:3D:8A:4D:27:2A:13:09:3E:F6:AC:9B:25:2C:F3
Certificate issuer:       /CN=A919BC76/serialNumber=87A12E75149B3D8A4D272A13093EF6AC9B252CF3
Certificate serial:       0291
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6EudRSbPYpNJyoTCT72rJslLPM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919BC76/F1AD3E3EE8BB11ED8538DA1FC4F9AE02/h6EudRSbPYpNJyoTCT72rJslLPM.mft
Manifest number:          0281
Signing time:             Mon 21 Sep 2026 01:56:12 +0000
Manifest this update:     Mon 21 Sep 2026 01:56:11 +0000
Manifest next update:     Mon 28 Sep 2026 01:56:11 +0000
Files and hashes:         1: h6EudRSbPYpNJyoTCT72rJslLPM.crl (hash: g7ORw1O53jouifTBv16BipJ6VkHlWBsVRkjeK64Nm2M=)
                          2: 62DD62F6D09111EE87557671C4F9AE02.roa (hash: mOu/k8QrgGU3NOXhQsaiL1CV0nsa/ebId8v9QXH3JwQ=)
                          3: 91A7AB90D79F11EE8DB3B465C4F9AE02.roa (hash: PF5TOfQ7GtB8dLfp6H8cIcUZYf5Y0gHIqox0AMufg1Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919BC76/F1AD3E3EE8BB11ED8538DA1FC4F9AE02/h6EudRSbPYpNJyoTCT72rJslLPM.crl
                          rsync://rpki.apnic.net/member_repository/A919BC76/F1AD3E3EE8BB11ED8538DA1FC4F9AE02/h6EudRSbPYpNJyoTCT72rJslLPM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6EudRSbPYpNJyoTCT72rJslLPM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 01:56:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 657 (0x291)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919BC76, serialNumber=87A12E75149B3D8A4D272A13093EF6AC9B252CF3
        Validity
            Not Before: Sep 21 01:56:11 2026 GMT
            Not After : Sep 28 01:56:11 2026 GMT
        Subject: CN=6ab08ebc-2563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0c:1b:9b:e2:5c:13:a4:32:0f:cc:36:4d:e0:
                    0e:51:19:cf:77:e8:cd:82:e6:b2:d4:50:15:22:91:
                    46:3a:02:aa:31:ec:af:04:45:e9:1f:ee:c0:e6:5a:
                    fa:2a:ca:d7:07:1f:46:55:8b:32:d6:04:1c:63:05:
                    8b:d8:ce:3f:01:bc:cb:d2:98:80:79:10:d1:7c:64:
                    6a:36:9d:21:af:da:06:bb:d9:32:ae:48:13:d6:cf:
                    16:4c:ca:c5:d3:7a:21:8f:eb:f0:b2:67:e7:97:a4:
                    08:e9:ab:ac:8a:a9:99:33:69:82:ff:99:e6:00:aa:
                    9d:b5:8b:7f:2b:ea:19:77:fb:95:f8:e0:bf:d6:a1:
                    03:26:4d:0b:b9:83:ce:52:8b:b3:45:e4:bf:c2:49:
                    6a:7f:76:a0:15:3b:db:a5:32:ee:a9:0b:74:93:d0:
                    51:7c:55:d3:77:37:68:26:3b:c8:99:48:70:f5:e8:
                    ac:db:bf:50:10:c3:7c:3a:57:b5:22:1f:dd:d6:9b:
                    f9:30:c2:f7:f3:47:5b:3e:45:86:90:81:19:0f:22:
                    f2:65:b7:79:f7:ee:9b:df:30:36:c6:27:4f:ba:9c:
                    cd:f1:1d:93:6c:1a:19:4b:0c:c2:ed:88:ec:35:7c:
                    80:cb:a1:fd:f7:54:9a:24:6d:08:33:9c:95:b3:f2:
                    ee:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B2:63:6A:B5:E8:92:C7:3F:77:02:35:56:96:9B:69:51:9D:0E:4B
            X509v3 Authority Key Identifier:
                keyid:87:A1:2E:75:14:9B:3D:8A:4D:27:2A:13:09:3E:F6:AC:9B:25:2C:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919BC76/F1AD3E3EE8BB11ED8538DA1FC4F9AE02/h6EudRSbPYpNJyoTCT72rJslLPM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6EudRSbPYpNJyoTCT72rJslLPM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BC76/F1AD3E3EE8BB11ED8538DA1FC4F9AE02/h6EudRSbPYpNJyoTCT72rJslLPM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:95:ac:6d:82:25:bb:75:64:81:54:05:2f:8e:ad:be:4e:50:
         6a:e3:86:85:a7:7c:fb:da:0a:d1:2c:5b:39:00:d4:be:cf:6d:
         97:2b:94:84:d2:53:e9:83:f1:e4:4f:cc:6d:78:63:8c:65:63:
         00:6b:36:ab:4d:66:77:9c:96:6b:5a:bd:66:35:05:b1:b1:e5:
         cf:f1:8e:c3:7f:8b:d8:06:1a:bd:bd:45:76:95:53:8c:a4:a6:
         9c:cb:74:42:d3:e2:1d:7a:9b:a3:52:e1:32:73:d1:a8:84:ea:
         70:9e:de:38:ee:a6:59:82:7e:8e:8a:0d:43:a3:64:19:e0:bd:
         f5:77:b2:1f:e0:72:28:76:50:ff:14:4c:da:6b:1f:0e:dc:43:
         cc:40:91:59:fe:89:dc:ab:61:d0:5f:43:6b:41:fd:dd:e9:b6:
         54:94:9d:2e:b0:66:30:9e:d6:0b:ac:49:b5:d0:ab:61:4b:79:
         de:eb:f8:d3:4b:39:90:ab:2e:02:85:67:d5:d5:43:98:ce:5f:
         68:1d:a4:42:b5:47:55:7b:6e:b1:0f:bc:02:f8:4e:5f:ba:97:
         d1:09:f0:1c:44:e2:d3:cc:6a:87:66:e2:69:de:a9:fd:23:62:
         fc:45:90:c9:f2:65:8b:db:8f:a0:cd:43:b0:bc:bb:1b:62:d0:
         b3:9d:9b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:33:12 2026 by rpki-client