Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft
File:                     6f7YwwxxXQSs4XWunL1wDBl3BgI.mft (raw, json)
Hash identifier:          lWceNA0fT8Cd5FzFaq3msn5ju6sCr5e3WlY4HVYrYP4=
Subject key identifier:   E8:54:BB:FC:B1:7E:CB:76:4C:65:38:C9:E3:71:9F:97:61:FA:44:3B
Authority key identifier: E9:FE:D8:C3:0C:71:5D:04:AC:E1:75:AE:9C:BD:70:0C:19:77:06:02
Certificate issuer:       /CN=A91C3EF6/serialNumber=E9FED8C30C715D04ACE175AE9CBD700C19770602
Certificate serial:       15CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft
Manifest number:          15C2
Signing time:             Sun 20 Sep 2026 16:42:23 +0000
Manifest this update:     Sun 20 Sep 2026 16:42:23 +0000
Manifest next update:     Sun 27 Sep 2026 16:42:23 +0000
Files and hashes:         1: 6f7YwwxxXQSs4XWunL1wDBl3BgI.crl (hash: x0FOrCkDPv7YGbBRWYzmOQPihrVvNGYHfFVmonhJ0NI=)
                          2: D056896E592A11E889035A70C4F9AE02.roa (hash: wMrnBc+Fy9ncOYECFmCc29mBuZDB9OsutBTOfjxW2mY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.crl
                          rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 16:42:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5583 (0x15cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3EF6, serialNumber=E9FED8C30C715D04ACE175AE9CBD700C19770602
        Validity
            Not Before: Sep 20 16:42:23 2026 GMT
            Not After : Sep 27 16:42:23 2026 GMT
        Subject: CN=6ab00cef-66c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0b:7e:75:29:81:3c:20:86:57:66:d1:e6:81:
                    7b:15:df:2d:2d:65:ce:91:fe:ce:06:36:2f:cb:ea:
                    09:56:b2:33:98:59:b0:e7:d9:4f:e8:3d:15:7d:6f:
                    cb:93:19:35:4f:74:74:62:6d:05:b0:7c:25:ad:f4:
                    d0:8e:99:61:5e:22:96:58:99:e2:00:3a:a3:17:68:
                    32:03:ed:9c:00:5c:f0:44:26:0d:c4:97:55:76:24:
                    eb:a9:ea:b4:64:4a:1e:4e:c1:54:64:4c:4e:8b:c5:
                    1e:96:2e:57:f8:c4:39:d1:fe:a2:60:ec:89:68:bf:
                    55:b4:bd:b8:c0:dc:26:07:f9:73:41:d9:62:f0:d5:
                    08:a2:36:36:e2:60:ca:3f:21:e2:da:0b:21:9d:a8:
                    48:9e:d9:65:ee:ff:ae:63:d2:d2:95:48:24:72:49:
                    1f:85:95:ab:ae:f3:a7:f2:88:d6:ab:ab:ce:c3:c4:
                    12:8b:55:08:d7:81:d5:f2:f8:65:c5:46:aa:6b:2b:
                    3d:63:69:7b:77:7c:05:93:45:7e:a7:16:e6:b4:e0:
                    e6:5b:c0:08:88:94:51:23:e8:2b:82:18:1c:94:2c:
                    d8:7a:64:44:87:ca:b3:df:7d:67:18:a4:f8:5c:de:
                    f1:81:cc:b0:e4:71:cd:d8:79:8a:3f:a4:eb:06:19:
                    20:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:54:BB:FC:B1:7E:CB:76:4C:65:38:C9:E3:71:9F:97:61:FA:44:3B
            X509v3 Authority Key Identifier:
                keyid:E9:FE:D8:C3:0C:71:5D:04:AC:E1:75:AE:9C:BD:70:0C:19:77:06:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:f1:ef:0c:9d:92:22:0f:14:9d:dd:0c:ee:8a:18:c3:2d:d7:
         30:f1:ba:be:2f:52:66:67:49:03:96:47:3f:ef:31:62:10:a4:
         5d:30:b7:4a:c2:7f:10:c7:11:08:d0:3e:c7:22:1a:c4:aa:2b:
         83:e5:6f:9a:1f:a5:75:28:97:75:71:f9:90:ea:04:64:b4:99:
         b5:cd:7c:f2:bd:39:a8:55:df:f4:ef:3c:06:bc:a2:9c:93:28:
         4d:59:44:51:2b:bd:35:6d:de:4f:4e:6e:b8:c0:e1:1a:df:5f:
         76:69:54:f1:ca:b2:ea:54:7f:49:2c:6c:76:9a:fd:95:3c:7d:
         fc:b5:b4:52:f7:0f:1f:bf:25:a3:ab:77:83:5f:23:32:35:bb:
         1c:29:6d:e8:56:48:b9:5e:7d:4a:89:fa:7b:cc:38:4c:8a:3a:
         04:12:1f:a1:47:c9:42:e4:99:b6:28:6a:5c:b2:3d:ad:83:10:
         75:e6:d2:95:d6:4f:53:b6:c9:11:7c:14:9c:c0:61:fe:99:bb:
         e6:49:39:ff:f8:c0:fe:e2:f6:1d:9e:9e:f5:04:1e:e6:cc:26:
         c3:a4:31:0e:05:03:37:6d:d0:23:29:47:dd:7d:cc:4a:2f:42:
         a0:17:3d:14:36:d9:6e:b5:23:d5:33:16:53:41:f5:35:34:9d:
         3e:73:16:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:53:47 2026 by rpki-client