Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft
File:                     -6D4tMTQWqlqqvV6OUQDcbyNBDc.mft (raw, json)
Hash identifier:          poIryqI3lNy34CaVGJ9zeayO7Q0z3dvFvNQEy7yVFlk=
Subject key identifier:   14:2C:D9:99:F2:E1:2A:3C:4C:63:10:37:86:FB:2A:02:37:01:B6:D0
Authority key identifier: FB:A0:F8:B4:C4:D0:5A:A9:6A:AA:F5:7A:39:44:03:71:BC:8D:04:37
Certificate issuer:       /CN=A91F9ECA/serialNumber=FBA0F8B4C4D05AA96AAAF57A39440371BC8D0437
Certificate serial:       063A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6D4tMTQWqlqqvV6OUQDcbyNBDc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft
Manifest number:          0632
Signing time:             Sat 26 Sep 2026 22:48:54 +0000
Manifest this update:     Sat 26 Sep 2026 22:48:53 +0000
Manifest next update:     Sat 03 Oct 2026 22:48:53 +0000
Files and hashes:         1: -6D4tMTQWqlqqvV6OUQDcbyNBDc.crl (hash: UpZKIntH5GcMBXo9kDLvGM4wEBSAMtjg1+xKyuDNLXk=)
                          2: 9F2BA98AF90611EBB8E0C27FC4F9AE02.roa (hash: WeIg3bs5PGtMvVNpUjCwRpl9zBFufB/EoVY/t8C0Xpg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.crl
                          rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6D4tMTQWqlqqvV6OUQDcbyNBDc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 18:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1594 (0x63a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9ECA, serialNumber=FBA0F8B4C4D05AA96AAAF57A39440371BC8D0437
        Validity
            Not Before: Sep 26 22:48:53 2026 GMT
            Not After : Oct  3 22:48:53 2026 GMT
        Subject: CN=6ab84bd6-dc7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:70:5a:1e:05:4b:4f:f3:25:81:39:9f:ac:03:
                    d5:31:56:1b:ed:9c:2a:e5:b2:35:d0:68:b5:f8:49:
                    e3:86:7b:00:fa:d9:ff:4f:2e:7d:c7:f7:a9:ab:87:
                    17:e0:2d:95:0a:18:a5:e1:41:30:4a:ba:31:f8:8e:
                    05:9f:61:ec:4a:ab:26:c7:f4:b4:b7:31:0f:31:50:
                    04:bc:75:67:6e:f9:48:be:d0:2a:c2:71:a8:ef:33:
                    d0:39:0c:ad:42:c1:a1:d5:d0:e4:a7:00:89:af:6c:
                    3f:8a:1b:f5:4a:db:7a:98:fb:f9:6a:05:b8:a8:99:
                    bb:25:ab:9a:87:bf:dd:1f:15:56:5f:3a:69:e4:2c:
                    60:b5:44:d6:8d:46:c6:6e:9d:7e:0f:bc:bc:3e:20:
                    79:c8:8b:68:36:4c:9d:5b:07:40:c9:9b:c8:7c:50:
                    4a:a4:f7:09:3f:6d:68:03:ae:fb:13:48:1d:f5:73:
                    9c:90:80:ff:72:5d:01:e8:d8:30:b2:ca:fd:fa:19:
                    81:83:70:03:f6:03:be:62:cd:5b:8e:a1:df:6e:4c:
                    db:fc:8c:0d:a8:6e:4d:f1:0d:62:ec:ed:b6:0c:8c:
                    0d:f5:98:f7:57:2e:dc:26:08:96:b5:94:ff:6e:00:
                    7b:1b:9b:82:f4:aa:df:8f:4c:6d:45:1d:02:95:16:
                    73:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2C:D9:99:F2:E1:2A:3C:4C:63:10:37:86:FB:2A:02:37:01:B6:D0
            X509v3 Authority Key Identifier:
                keyid:FB:A0:F8:B4:C4:D0:5A:A9:6A:AA:F5:7A:39:44:03:71:BC:8D:04:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6D4tMTQWqlqqvV6OUQDcbyNBDc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:58:be:b1:17:9d:d6:59:b6:c7:d2:80:4c:9c:f9:84:1c:a6:
         8a:9b:fc:46:3e:b3:75:0a:5e:de:2d:12:9d:82:93:a4:1a:f3:
         3f:79:bc:32:37:38:d0:55:78:fa:7b:3a:78:ba:26:cc:e7:f5:
         41:bf:19:15:95:03:f6:f0:ee:a5:32:f2:49:28:2a:2b:0b:0f:
         24:24:8f:82:df:e1:41:3e:90:67:38:53:94:35:d0:ba:dd:01:
         36:ca:b4:9e:66:3e:91:9d:ef:f2:f6:34:a1:ab:e6:fc:99:07:
         b3:9e:9b:84:7e:5f:1c:c9:21:14:81:5c:e2:4c:07:5b:20:f2:
         e4:01:d6:bb:19:e1:24:2d:f4:00:05:68:68:db:14:f1:b7:2b:
         5f:09:46:c7:02:10:3e:8f:8f:52:ac:8a:5e:99:6e:49:37:98:
         10:e9:e1:0d:d3:35:9f:bc:d9:d1:b9:a4:0f:f5:57:18:c4:4c:
         ba:a6:6c:25:fa:3e:32:73:04:c7:28:70:b3:81:6e:fb:3e:25:
         c9:38:8b:ea:62:1d:4f:2e:e4:86:4e:19:82:04:1c:d3:00:9c:
         ff:00:97:d6:cf:a1:15:8e:b8:2d:14:a8:6e:00:0c:1f:ee:a1:
         4d:71:e0:40:3e:06:d8:12:e3:3e:fb:42:0a:3d:63:92:9c:d0:
         87:dc:d1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:29:12 2026 by rpki-client