Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D0E05/7644EA10AB1A11F196C58DD46311F970/6WUln9vxY5hflhfkakAqUPEDQvc.mft
File:                     6WUln9vxY5hflhfkakAqUPEDQvc.mft (raw, json)
Hash identifier:          f3mjXjtFAVm5F68+ka7El81dGWDuj/KDU+U483ogdPo=
Subject key identifier:   94:80:03:F5:5A:36:1A:76:FA:94:8D:1F:55:AD:08:1E:66:05:DC:73
Authority key identifier: E9:65:25:9F:DB:F1:63:98:5F:96:17:E4:6A:40:2A:50:F1:03:42:F7
Certificate issuer:       /CN=A91D0E05/serialNumber=E965259FDBF163985F9617E46A402A50F10342F7
Certificate serial:       0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WUln9vxY5hflhfkakAqUPEDQvc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0E05/7644EA10AB1A11F196C58DD46311F970/6WUln9vxY5hflhfkakAqUPEDQvc.mft
Manifest number:          09
Signing time:             Mon 21 Sep 2026 09:11:02 +0000
Manifest this update:     Mon 21 Sep 2026 09:11:01 +0000
Manifest next update:     Mon 28 Sep 2026 09:11:01 +0000
Files and hashes:         1: 6WUln9vxY5hflhfkakAqUPEDQvc.crl (hash: XVTYfzzz2SA58bDIuwl07c6KW8jyTKemFYWzr6DOvI0=)
                          2: F1B59B04AB1A11F189E03FC76411F970.roa (hash: W6eDHvQwqhmqblMlDk4s8ZqzxnxcUPVH/5YBZOccaqM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0E05/7644EA10AB1A11F196C58DD46311F970/6WUln9vxY5hflhfkakAqUPEDQvc.crl
                          rsync://rpki.apnic.net/member_repository/A91D0E05/7644EA10AB1A11F196C58DD46311F970/6WUln9vxY5hflhfkakAqUPEDQvc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WUln9vxY5hflhfkakAqUPEDQvc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 09:11:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0E05, serialNumber=E965259FDBF163985F9617E46A402A50F10342F7
        Validity
            Not Before: Sep 21 09:11:01 2026 GMT
            Not After : Sep 28 09:11:01 2026 GMT
        Subject: CN=6ab0f4a6-4e99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8c:be:ec:32:98:6c:55:93:35:2f:c0:8e:ef:
                    34:28:1a:88:26:f5:1e:73:7d:11:17:66:39:9c:50:
                    7a:85:90:cc:af:8b:d3:af:80:7b:76:d2:70:7a:05:
                    07:0c:ff:54:b1:b0:8e:9c:d7:1b:85:51:80:dc:10:
                    6c:2a:5e:8c:44:db:45:c7:eb:7c:4e:c8:ef:e6:c2:
                    ef:08:de:ab:2d:25:cb:c5:f5:65:03:1e:0f:1f:99:
                    b5:05:5b:a4:eb:a8:2b:3d:f2:99:25:84:97:e4:dd:
                    cd:ea:0f:47:bc:6f:ee:6c:7b:f7:b1:ba:4d:06:3f:
                    ad:eb:be:7d:b2:41:93:fd:69:20:7a:09:e0:18:c6:
                    75:47:a4:3a:77:5e:61:63:a0:03:ec:43:cc:7c:3d:
                    e2:29:fb:07:7b:73:74:5d:85:04:62:4e:62:d0:74:
                    48:2f:e4:4a:d9:57:f2:56:ee:9d:1a:59:4a:a2:15:
                    0b:97:47:d8:cf:7f:21:93:27:c7:ef:02:63:bb:a7:
                    8f:c9:e6:82:52:d1:83:09:08:b0:bf:75:7a:00:41:
                    31:e7:69:59:84:29:e7:c5:53:12:5b:e7:34:af:34:
                    5d:52:1b:ee:96:cc:d3:47:93:e2:82:15:ca:ee:12:
                    2a:23:4f:0e:70:4f:e7:c5:82:66:a8:0b:e4:c7:9c:
                    ce:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:80:03:F5:5A:36:1A:76:FA:94:8D:1F:55:AD:08:1E:66:05:DC:73
            X509v3 Authority Key Identifier:
                keyid:E9:65:25:9F:DB:F1:63:98:5F:96:17:E4:6A:40:2A:50:F1:03:42:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0E05/7644EA10AB1A11F196C58DD46311F970/6WUln9vxY5hflhfkakAqUPEDQvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WUln9vxY5hflhfkakAqUPEDQvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0E05/7644EA10AB1A11F196C58DD46311F970/6WUln9vxY5hflhfkakAqUPEDQvc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:87:c5:d7:43:46:5a:9b:5f:f2:59:72:d7:95:d1:b1:14:79:
         3d:1e:9c:55:ff:a0:b4:4a:6f:20:62:e1:9c:1e:2e:f5:74:b8:
         ee:25:be:bb:8e:bb:a5:2b:8d:16:74:bd:c8:b4:59:96:71:46:
         b3:2a:ac:4e:59:62:a1:e5:fc:4b:98:72:ce:ee:81:50:02:de:
         aa:73:a6:1b:e2:5d:bd:fb:b6:04:28:8e:ec:8d:ba:3a:59:b5:
         bd:f8:df:95:ab:aa:3c:63:7b:31:68:c5:84:59:b8:c3:7c:9e:
         c4:eb:4a:9f:05:61:92:f4:5c:44:b5:76:43:3f:25:51:60:00:
         cc:21:67:3b:6a:a9:fd:8b:89:39:cd:e0:f3:1c:37:25:6c:30:
         9e:80:b7:69:1e:34:9a:d5:af:de:9b:71:43:f6:13:d4:9a:c7:
         a1:9c:1b:ca:55:3c:65:65:00:2f:a0:e0:58:0f:35:61:79:cf:
         fc:df:ed:3d:f7:a2:41:59:7e:7a:af:e0:d7:c2:eb:48:91:8c:
         a9:4d:84:a9:5a:ac:4d:94:a5:ce:17:2a:06:f8:a9:93:5b:28:
         d4:25:6d:42:14:79:4a:23:b8:c8:6d:da:ba:51:bf:e1:45:aa:
         be:7c:45:8a:c5:97:33:ee:e8:2b:c8:12:22:60:6d:88:c1:82:
         da:6c:3c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:27:31 2026 by rpki-client