Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft
File:                     h6XSzfwKU6WS2h-P8ndToSk0N_g.mft (raw, json)
Hash identifier:          spuWRw0bVMkd/KKtHHGnQIhq+2uOEq2WeHkIrM1IfTQ=
Subject key identifier:   78:E1:F5:6B:85:FC:8F:C8:F2:71:9D:6E:C6:07:C1:63:2A:8D:FD:34
Authority key identifier: 87:A5:D2:CD:FC:0A:53:A5:92:DA:1F:8F:F2:77:53:A1:29:34:37:F8
Certificate issuer:       /CN=A91E1BB0/serialNumber=87A5D2CDFC0A53A592DA1F8FF27753A1293437F8
Certificate serial:       A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6XSzfwKU6WS2h-P8ndToSk0N_g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft
Manifest number:          A1
Signing time:             Sun 27 Sep 2026 07:46:20 +0000
Manifest this update:     Sun 27 Sep 2026 07:46:19 +0000
Manifest next update:     Sun 04 Oct 2026 07:46:19 +0000
Files and hashes:         1: h6XSzfwKU6WS2h-P8ndToSk0N_g.crl (hash: gv4YclOEdQ8GwHwBHAqqe4jg/B6QCrR4/lm7RgytWao=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.crl
                          rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6XSzfwKU6WS2h-P8ndToSk0N_g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 07:26:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161 (0xa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1BB0, serialNumber=87A5D2CDFC0A53A592DA1F8FF27753A1293437F8
        Validity
            Not Before: Sep 27 07:46:19 2026 GMT
            Not After : Oct  4 07:46:19 2026 GMT
        Subject: CN=6ab8c9cc-336a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:8e:bc:88:0c:bf:7b:ff:b2:30:38:38:0e:e5:
                    c9:df:f7:ad:75:1f:5e:8e:d3:c0:41:3b:ba:49:44:
                    81:84:78:57:e7:3a:40:4f:c8:fb:f5:5b:26:5c:03:
                    48:c9:35:fa:f5:b7:5c:80:77:e4:86:27:7f:ff:78:
                    d4:d0:6c:91:42:14:86:86:04:cd:90:34:75:ec:bb:
                    64:b2:c1:81:e7:8e:c1:4b:75:3a:e2:69:47:64:d1:
                    2d:58:7c:fd:2c:4e:8e:66:ba:88:13:a6:36:fc:45:
                    cf:7c:a0:e0:5a:31:7d:27:ff:7e:8e:21:ec:c4:5a:
                    56:26:52:54:af:da:37:d6:fd:dc:87:c8:66:6d:32:
                    c9:ff:68:c6:a3:69:b5:11:bd:58:9e:7d:8b:32:b0:
                    cc:02:da:b3:3a:78:de:6e:7b:30:89:e9:4c:5b:2b:
                    f7:0a:7f:00:0c:82:57:1a:0c:bd:b7:a1:b1:99:00:
                    f7:4c:1d:3d:8e:6f:51:ef:1e:5d:d2:81:2a:b9:71:
                    d2:e4:03:19:ff:98:9e:d6:a1:c1:c2:b8:ec:17:e4:
                    49:05:29:25:69:90:1b:8a:03:de:5c:c9:38:a6:88:
                    13:23:2e:4d:2c:b8:43:22:82:a0:33:10:89:5d:78:
                    c8:e6:42:27:ad:3d:95:bc:2c:ff:8a:f4:08:f4:a0:
                    7a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E1:F5:6B:85:FC:8F:C8:F2:71:9D:6E:C6:07:C1:63:2A:8D:FD:34
            X509v3 Authority Key Identifier:
                keyid:87:A5:D2:CD:FC:0A:53:A5:92:DA:1F:8F:F2:77:53:A1:29:34:37:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6XSzfwKU6WS2h-P8ndToSk0N_g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:9d:e9:7c:c1:92:e3:9e:4c:d4:b4:68:be:d2:83:c5:8f:fe:
         5c:f7:f7:cc:f1:c1:49:b3:1a:6b:6a:f9:a0:8f:6b:03:21:7c:
         a6:5a:e9:bd:2a:5f:6b:a1:a5:c1:ca:4f:23:7c:88:ee:b0:b8:
         1c:40:5d:2b:54:8b:7a:46:d8:95:ec:2a:04:6e:93:40:f3:b9:
         cb:be:92:64:8f:e9:fb:69:75:32:15:09:ce:8a:11:2b:35:bd:
         75:5d:6f:04:67:b1:c2:7b:8c:1d:eb:51:88:85:46:ed:f2:17:
         5b:4a:c7:6d:8a:38:e4:45:e9:a8:fb:43:07:89:d5:73:4d:69:
         e2:06:d2:22:45:14:90:a5:ff:9c:eb:09:cb:98:b9:83:4a:18:
         af:03:88:23:b2:10:e8:4f:fc:83:ef:c6:1f:b3:29:1d:97:c8:
         59:a0:2d:aa:32:38:44:aa:21:57:ca:40:0d:81:9b:11:52:42:
         3b:94:cc:35:4a:36:fa:5b:6e:9d:2e:c8:3d:a1:b3:c2:12:34:
         db:12:f4:c4:a2:7f:a3:b7:b4:15:ac:ec:84:86:ff:dc:c8:91:
         06:5a:5f:36:c6:84:31:ca:61:f4:0b:12:ad:06:14:89:5e:77:
         e4:15:9e:e8:86:61:cb:a7:e4:f7:da:c1:0c:5f:ee:c3:d9:a1:
         2e:3b:b3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:35:42 2026 by rpki-client