Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft
File:                     6O2nHIlk0p8GwkorbRt3FTyo84k.mft (raw, json)
Hash identifier:          sMYVgbB6B/WVxGJVraH3kR9iR99XVMCsspHWpMzKTtQ=
Subject key identifier:   66:0F:E7:0B:BC:7F:29:1B:74:79:90:56:07:DB:6A:BD:36:60:76:94
Authority key identifier: E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89
Certificate issuer:       /CN=A91F724B/serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389
Certificate serial:       2182
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft
Manifest number:          2159
Signing time:             Mon 28 Sep 2026 15:57:12 +0000
Manifest this update:     Mon 28 Sep 2026 15:57:12 +0000
Manifest next update:     Mon 05 Oct 2026 15:57:12 +0000
Files and hashes:         1: 6O2nHIlk0p8GwkorbRt3FTyo84k.crl (hash: fJtfCJv28WcD8ibQI/GUljiLW2X8C1/wS0w/ek7/48M=)
                          2: 36AB4096C51611E7AECA8B79C4F9AE02.roa (hash: MGk7Hv0oGH/cadOMgEkpIwvLj9yE4m4r9Wud6jaS3Qs=)
                          3: D6702FB2C51411E7A0AC1A77C4F9AE02.roa (hash: +tvaJ54I6jm5pWGSD/+mc9Tf5oV3zMzWVdx1mR4kWxw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl
                          rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 15:57:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8578 (0x2182)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F724B, serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389
        Validity
            Not Before: Sep 28 15:57:12 2026 GMT
            Not After : Oct  5 15:57:12 2026 GMT
        Subject: CN=6aba8e58-c30b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:31:08:eb:a3:0b:80:4a:6a:03:9f:ef:d3:82:
                    e3:7d:bf:09:b1:d8:df:38:a6:fb:ad:29:04:9a:42:
                    b4:4d:d7:c8:f0:cf:6c:2c:13:f2:d0:ee:ce:af:b4:
                    29:b1:d4:3c:b7:8e:32:3b:86:59:2b:cc:da:f6:13:
                    a3:9a:b5:2a:d0:13:56:20:d4:62:aa:3c:4b:1c:58:
                    f0:e8:55:5a:cb:28:ed:73:9b:6d:30:84:71:84:29:
                    3c:e6:17:6d:c5:e9:1a:0b:fe:2b:72:e5:35:6b:2d:
                    10:6b:d0:76:8f:f3:2d:1a:22:99:c2:f7:fd:06:b8:
                    6d:ce:60:5e:09:d5:cf:5e:bd:90:0a:b9:37:90:55:
                    4f:c2:b0:b0:28:06:ab:8a:97:e5:9b:9c:a1:f6:34:
                    ca:de:7b:49:6b:1e:35:ac:42:c1:f3:50:4c:c6:8b:
                    6e:c2:ac:b9:f6:00:c1:48:9f:ab:e8:d8:96:38:98:
                    a1:98:41:68:38:36:5a:d6:a0:52:78:d9:a5:40:cd:
                    c4:e7:c1:3b:e9:02:ac:53:cb:8e:72:ad:a6:d3:3b:
                    2f:5e:94:90:63:17:3d:0f:04:77:0f:f3:a0:79:48:
                    71:88:e3:d4:1a:d4:c4:96:8b:2f:29:2e:02:cd:e7:
                    72:0a:c2:64:8a:9f:aa:80:9b:14:14:0d:f8:af:a8:
                    84:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:0F:E7:0B:BC:7F:29:1B:74:79:90:56:07:DB:6A:BD:36:60:76:94
            X509v3 Authority Key Identifier:
                keyid:E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:f1:68:ec:e8:ad:b5:c4:78:8d:04:1a:ff:8b:5f:04:87:98:
         49:17:60:aa:57:21:eb:ed:bc:f0:94:f8:6f:24:5c:64:83:cd:
         06:06:d7:4f:0c:97:6b:6c:4f:57:eb:4a:d0:33:8f:e9:57:55:
         37:70:70:b9:2b:5c:b1:91:ee:11:dd:d0:9b:f9:fd:0d:f9:40:
         13:e5:f4:10:15:10:b3:db:78:bd:c7:2a:cb:67:9c:e5:5b:eb:
         f2:88:bc:88:0a:94:fe:e3:9d:4f:a2:0d:02:f3:c2:35:ff:e7:
         7b:f0:fb:14:ed:fe:cb:11:e7:57:57:ca:8b:88:44:b8:a0:8f:
         67:79:75:c1:ef:bd:8c:a6:bc:86:78:f3:03:82:43:1a:e3:96:
         d5:c7:03:70:15:26:d6:53:33:bb:a3:88:ed:90:2b:44:8e:7a:
         b1:a4:63:18:93:6b:d4:00:bf:e0:be:4a:a5:c1:86:6d:08:bd:
         bc:02:7c:06:26:78:6e:c9:b9:f6:47:f0:88:6e:b4:a8:40:15:
         0c:44:86:a8:7c:fb:dd:77:1a:90:e5:e2:97:6f:b4:09:ed:37:
         51:39:65:fa:4f:58:de:28:b7:46:3e:28:69:b1:a6:43:f2:85:
         20:42:8c:99:0e:5e:26:dd:e4:3b:d6:89:ba:b1:84:86:1c:06:
         eb:d8:51:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 04:44:24 2026 by rpki-client