Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft
File:                     6CbZQgvPRaEIfTATu05KhJYNYcc.mft (raw, json)
Hash identifier:          3oYMEexhSuiBESHk9nVbd7REE74/S0ikC65fNVt5TME=
Subject key identifier:   FC:D2:D0:ED:DA:C1:50:21:31:FA:25:CB:1C:E1:C6:57:1F:65:D0:DD
Authority key identifier: E8:26:D9:42:0B:CF:45:A1:08:7D:30:13:BB:4E:4A:84:96:0D:61:C7
Certificate issuer:       /CN=A914EAE4/serialNumber=E826D9420BCF45A1087D3013BB4E4A84960D61C7
Certificate serial:       1C20
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6CbZQgvPRaEIfTATu05KhJYNYcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft
Manifest number:          1C1A
Signing time:             Mon 26 Oct 2026 16:13:41 +0000
Manifest this update:     Mon 26 Oct 2026 16:13:40 +0000
Manifest next update:     Mon 02 Nov 2026 16:13:40 +0000
Files and hashes:         1: 6CbZQgvPRaEIfTATu05KhJYNYcc.crl (hash: +AuiJlzbLB4pErWQoH32oe1SvDypM2lar/ohJUsCS7M=)
                          2: D810AAAAB60B11EFB476C022C4F9AE02.roa (hash: /f2pv9LXv5sDkFBIKGk0qECtZm0YoxQYNrWZQgG81EM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.crl
                          rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6CbZQgvPRaEIfTATu05KhJYNYcc.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 16:13:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7200 (0x1c20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE4, serialNumber=E826D9420BCF45A1087D3013BB4E4A84960D61C7
        Validity
            Not Before: Oct 26 16:13:40 2026 GMT
            Not After : Nov  2 16:13:40 2026 GMT
        Subject: CN=6adf7c35-148c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:84:6e:b1:18:06:52:e0:37:d4:38:7a:af:b5:
                    b7:7d:e0:d8:d8:36:5d:8c:84:70:c8:bd:36:ac:7e:
                    26:1d:42:fc:c4:53:12:5e:44:ea:f2:00:81:87:a6:
                    e5:d9:10:36:22:86:46:99:1b:fe:91:62:3f:9c:03:
                    62:4b:c9:c0:ef:c6:7d:3e:8f:2a:19:79:f9:43:3b:
                    24:78:be:d9:be:84:12:16:91:57:84:9c:b9:b5:76:
                    ea:e8:bd:ba:2f:4f:17:d0:6f:37:d1:6d:2c:56:3e:
                    3c:b9:c6:dc:4a:29:5d:22:d0:e5:c0:42:c7:03:e7:
                    24:5c:76:34:8c:0d:11:3d:8e:67:c9:7e:b9:0d:3e:
                    c6:d8:db:c2:c5:fc:c3:9e:cb:e1:b5:22:59:38:5b:
                    e2:a5:ed:d4:ba:f6:73:93:f4:be:43:73:1b:7c:a8:
                    10:c8:91:1e:70:49:b4:d2:68:d7:22:66:61:48:9c:
                    f6:05:7c:73:cd:9c:06:c4:69:50:7a:f4:a4:10:e1:
                    00:04:57:bc:f5:35:4a:e4:1c:f8:81:16:cf:c7:ce:
                    d6:e6:f9:70:90:ac:2c:80:24:83:6f:db:5f:8f:fa:
                    d0:4e:d1:a5:b6:09:da:a2:a3:0d:05:5f:73:a7:8b:
                    cc:2e:f3:44:96:38:88:4b:50:9a:2a:2d:1e:a7:85:
                    b3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D2:D0:ED:DA:C1:50:21:31:FA:25:CB:1C:E1:C6:57:1F:65:D0:DD
            X509v3 Authority Key Identifier:
                keyid:E8:26:D9:42:0B:CF:45:A1:08:7D:30:13:BB:4E:4A:84:96:0D:61:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6CbZQgvPRaEIfTATu05KhJYNYcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:ee:6a:3e:25:83:0f:ed:20:e3:2d:9c:60:17:f5:37:f0:8c:
         04:df:45:c8:6c:ff:a8:c1:3a:48:5e:bd:18:13:8a:9a:6b:c5:
         2c:bf:d6:0c:c1:6a:07:9f:76:0d:2e:87:82:ef:c9:72:2d:0f:
         d1:6c:83:01:8b:6e:e2:a4:a6:de:7a:1e:ac:60:84:06:64:bc:
         5e:05:10:ea:48:75:a1:a7:34:b7:52:55:3a:2a:ec:85:25:36:
         2a:c7:0c:71:10:fb:86:16:6b:b8:4d:c7:55:67:5b:41:89:98:
         94:d4:f5:c1:9d:5c:ec:a8:b3:10:d3:70:ef:63:8b:57:2b:48:
         ad:90:f1:00:c4:af:10:37:a9:48:69:d1:f8:4b:83:e8:4c:40:
         5b:e8:08:86:5b:90:ea:0a:eb:74:18:7f:bc:38:dc:a8:b3:6c:
         5c:e6:8a:54:f2:b5:60:33:f2:b9:03:68:cf:37:42:03:43:54:
         7f:5d:2e:fc:5f:66:b8:e4:c5:c5:57:2d:52:16:f0:2a:93:4e:
         bc:07:00:90:d5:48:ec:de:d4:d3:53:e2:11:97:10:26:30:3d:
         62:88:23:4c:50:a8:ea:25:2f:20:b4:e4:51:9d:df:25:06:fd:
         e1:36:c5:f6:ad:69:0a:d5:f3:a8:19:da:99:c3:9e:02:34:73:
         6b:ae:d8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:26:09 2026 by rpki-client