Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft
File:                     6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft (raw, json)
Hash identifier:          gBDIKVL5v685EzPQ9KoIppvjr/4NlTEKVCNkRfnQ0Q0=
Subject key identifier:   CE:B2:BB:C0:8D:56:88:47:6F:1E:BE:90:E7:1A:1D:2E:C4:FA:7E:21
Authority key identifier: E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5
Certificate issuer:       /CN=A91A2359/serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5
Certificate serial:       0C70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft
Manifest number:          0C28
Signing time:             Wed 14 Oct 2026 19:01:57 +0000
Manifest this update:     Wed 14 Oct 2026 19:01:57 +0000
Manifest next update:     Wed 21 Oct 2026 19:01:57 +0000
Files and hashes:         1: 6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl (hash: IVFnUrAEmo2YyJQTVfaS+OkIDj1NprJJgwoMXp6mMlE=)
                          2: 1FCC64AC719511F090F7F83BC4F9AE02.roa (hash: HDz+1GzuPpUTidanGB4G4ykVBkwdTS/Q6fpag6ihvfc=)
                          3: 46D0A6A8BDDA11F086EB9613C4F9AE02.roa (hash: huORanbeeLTQyC8vfHVhR2qi15Mp9g0ge9RJFONvZrM=)
                          4: D5955AB6975511EF94255C5EC4F9AE02.roa (hash: JVd2FG3UkH9H5B617YmFMPIf/lKVb8TVBIpvLq/w07A=)
                          5: BF298F4A8FBF11F1A58CF95C6811F970.roa (hash: TXnS1wgMzdsHK//NBv2o4dJxtrP2qDhE6dk5MgyfgUk=)
                          6: 33594416A5CB11F192F6B2263211F970.roa (hash: uLBBKTV4jICzQ/mWQ1LKIOawh72/Drbo5Q8arRx4JAc=)
                          7: D3A76C6AA79511F1804DFF334711F970.roa (hash: 1lhzRowk8kpqPzQe8llaZ3GiNx0/OiKBfZbBNsojsKY=)
                          8: 9838FE1A8D7711F1A55DF04E3311F970.roa (hash: T+KRQV/dB8Hd2xlGQ+yU1W0dlIAwzoKR9V8LIy0HV4c=)
                          9: 65AE18E08D7711F1A08E75473311F970.roa (hash: t46Iad5IKDgkUQWsQkVOGeZs8TaWKbpSe+5Yv00pD6Q=)
                          10: 6B3307CE4D8411EFBAD45B86C4F9AE02.roa (hash: zhvQ2OwFKuDGlesdZErwFsvm54e1zw6iRxJQhNg3+u4=)
                          11: 32929FB4A5CB11F192F6B2263211F970.roa (hash: YZPUFo5668pvFwJOgc3nMlRYKTXXaKkJAI9+Hif3WJM=)
                          12: 6386643C8D7711F1A08E75473311F970.roa (hash: rY2ImM00O8nNXsqAOk5TK3NiPhHTAKt2HMSL9mEi0LM=)
                          13: 648B3E5C8D7711F1A08E75473311F970.roa (hash: KSLF+3Cp6b50j3nKRsuJ2U0pgtXSQWOvxY7L/NsvFDA=)
                          14: 6DADCA1C2F1C11EDA3E29B09C4F9AE02.roa (hash: IxMPHfcO4FMJHXeamW9Ntxik/OpowXLrenedL/WZ9v0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl
                          rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Oct 2026 19:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3184 (0xc70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2359, serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5
        Validity
            Not Before: Oct 14 19:01:57 2026 GMT
            Not After : Oct 21 19:01:57 2026 GMT
        Subject: CN=6acfd1a5-407d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:98:14:b0:d8:b3:b8:2d:39:9e:36:67:f3:b3:
                    a7:ee:6a:df:60:b1:c5:82:e3:c3:29:ef:1e:51:36:
                    39:43:83:b7:f6:f1:92:e8:aa:1b:8e:58:55:8a:a9:
                    25:f6:af:8f:fa:34:b4:d7:b8:a1:c0:4a:8f:e1:b1:
                    1d:9a:aa:1c:72:51:ae:e8:fc:de:63:a1:08:ae:fc:
                    3e:c1:b0:00:b8:58:68:cd:da:b0:e5:e1:d2:2c:75:
                    ed:ba:8a:7f:4e:04:fd:e2:d1:f2:6f:87:23:04:28:
                    d0:3f:8a:15:fb:8a:39:2c:ba:ab:db:22:c2:c3:d2:
                    2b:c7:8e:8d:56:4d:cb:4a:9a:59:f9:f5:8a:07:72:
                    53:33:77:90:84:d5:bb:6c:f1:eb:0d:cc:bb:8e:e3:
                    36:80:6e:79:82:5c:98:93:5e:7a:02:84:26:87:4c:
                    6f:b5:9b:7a:e8:a8:12:ac:d2:37:8d:22:ea:e0:39:
                    81:e4:36:6c:2e:ad:fd:ab:dd:88:d2:29:7b:08:16:
                    69:c9:32:19:eb:0f:c0:8e:ac:b7:99:43:d2:70:4b:
                    b1:db:dc:6e:67:8a:39:b3:87:92:b2:44:a0:cc:f6:
                    1d:e0:15:f6:93:7a:78:bc:00:0e:43:06:6d:9a:aa:
                    c8:a5:05:a2:3a:3a:17:6d:8d:e3:c1:29:c5:97:4f:
                    3b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B2:BB:C0:8D:56:88:47:6F:1E:BE:90:E7:1A:1D:2E:C4:FA:7E:21
            X509v3 Authority Key Identifier:
                keyid:E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:d3:2b:7b:17:5e:a1:05:fa:d3:e5:bd:ce:56:e4:59:0a:29:
         f4:45:ae:6f:eb:11:69:14:91:ca:06:b5:39:41:ae:2e:77:34:
         57:a9:a9:2e:b6:8d:41:4b:d6:6f:17:98:6d:76:5d:07:93:6f:
         57:39:fc:36:54:03:d7:dd:da:58:bd:29:e0:d7:95:f9:db:5b:
         8c:88:d3:ce:18:76:db:4a:c6:a2:d3:11:40:96:2d:4a:f5:ca:
         23:40:df:14:f6:bf:f7:ee:b1:09:da:1f:3b:fe:e5:f6:ff:9a:
         a7:b1:de:dd:51:3e:6e:2f:5c:2d:2b:33:87:b0:a0:53:62:4d:
         b4:4f:71:c7:7d:d6:5b:55:fb:5a:e2:db:c6:9b:70:c0:4b:da:
         ad:01:1b:a9:b6:ee:6e:7f:c4:9d:9a:ab:9e:b2:ac:1b:b6:3b:
         dc:c6:d4:9d:84:e4:63:6c:0d:06:c0:6e:4b:be:48:98:d9:e1:
         2a:0d:24:0f:43:af:20:e5:7b:51:1b:f3:8a:a9:4b:6e:50:f1:
         90:99:20:cf:9c:b8:7e:c9:52:80:3a:06:03:22:09:1e:03:69:
         7d:5c:c1:50:7e:a3:7f:6d:81:b1:9e:ae:42:18:94:7a:2b:4a:
         fb:cf:31:d4:25:fd:ab:8e:bb:c9:d0:d4:51:b1:87:9c:9b:94:
         36:45:2e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 08:35:44 2026 by rpki-client