Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BEC0/88448ECAA9C411F1BAD43F9D6E11F970/F6gIZniOytzh9tCsYYLRDDnXf4k.mft
File:                     F6gIZniOytzh9tCsYYLRDDnXf4k.mft (raw, json)
Hash identifier:          SZs8kQ/KmJZEjeDK+Ji3XudwH/I90K1DnZTZTvWLT8s=
Subject key identifier:   6A:37:8E:04:BE:C2:97:66:50:FE:02:93:6D:E1:3E:80:BD:8B:C3:8A
Authority key identifier: 17:A8:08:66:78:8E:CA:DC:E1:F6:D0:AC:61:82:D1:0C:39:D7:7F:89
Certificate issuer:       /CN=A911BEC0/serialNumber=17A80866788ECADCE1F6D0AC6182D10C39D77F89
Certificate serial:       1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6gIZniOytzh9tCsYYLRDDnXf4k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BEC0/88448ECAA9C411F1BAD43F9D6E11F970/F6gIZniOytzh9tCsYYLRDDnXf4k.mft
Manifest number:          15
Signing time:             Mon 05 Oct 2026 09:35:31 +0000
Manifest this update:     Mon 05 Oct 2026 09:35:31 +0000
Manifest next update:     Mon 12 Oct 2026 09:35:31 +0000
Files and hashes:         1: F6gIZniOytzh9tCsYYLRDDnXf4k.crl (hash: ECuUuDqHdfAjmkhw/BE7dedxUrK8sIbMbsWkPHvuLxM=)
                          2: DF1733D8A9C411F19B888AE56E11F970.roa (hash: bpFa5fTmur708cOVcV2AQHkyMDdSCS88Rji9UEjFKko=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BEC0/88448ECAA9C411F1BAD43F9D6E11F970/F6gIZniOytzh9tCsYYLRDDnXf4k.crl
                          rsync://rpki.apnic.net/member_repository/A911BEC0/88448ECAA9C411F1BAD43F9D6E11F970/F6gIZniOytzh9tCsYYLRDDnXf4k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6gIZniOytzh9tCsYYLRDDnXf4k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 09:35:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BEC0, serialNumber=17A80866788ECADCE1F6D0AC6182D10C39D77F89
        Validity
            Not Before: Oct  5 09:35:31 2026 GMT
            Not After : Oct 12 09:35:31 2026 GMT
        Subject: CN=6ac36f63-ee93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fc:15:88:80:6a:d9:3d:f2:a0:75:62:eb:ed:
                    8a:56:1c:55:37:29:16:5d:6f:08:cb:be:e4:11:28:
                    ae:a0:c1:ea:50:e1:f9:fb:4a:a9:64:6f:ba:0f:99:
                    9a:f2:2c:58:35:ad:4c:c9:d6:a5:46:c6:ee:8e:95:
                    c4:77:15:28:db:58:4b:0a:94:b8:a5:15:0b:fa:aa:
                    94:e9:be:24:91:22:bd:44:63:35:98:d7:6a:45:bd:
                    16:6b:54:c5:88:ed:7b:14:a6:e8:75:b0:5c:d0:ff:
                    fc:a2:85:20:8d:b5:58:dc:d2:91:13:0d:0d:8f:c0:
                    be:93:2b:56:93:12:a6:d6:f2:13:29:a7:53:d2:47:
                    b9:39:5e:66:9b:60:e6:16:66:f8:ae:0a:fb:e1:fe:
                    01:2a:e2:de:7d:ec:cf:5f:48:ff:25:95:7e:c5:96:
                    de:c8:66:69:68:67:17:03:ec:f5:00:e2:2c:09:f8:
                    77:3a:85:30:c8:54:16:4a:f5:2e:31:76:40:ff:ba:
                    d6:9a:de:12:bd:83:35:4b:2e:41:29:eb:92:35:35:
                    b6:6a:10:71:76:bf:88:83:16:fd:f3:ef:bf:21:73:
                    4b:52:2f:fe:9a:bd:1b:15:05:be:6e:2c:4e:43:e6:
                    22:e4:c8:4c:03:c4:bd:d8:94:f0:94:a4:45:80:58:
                    d1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:37:8E:04:BE:C2:97:66:50:FE:02:93:6D:E1:3E:80:BD:8B:C3:8A
            X509v3 Authority Key Identifier:
                keyid:17:A8:08:66:78:8E:CA:DC:E1:F6:D0:AC:61:82:D1:0C:39:D7:7F:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BEC0/88448ECAA9C411F1BAD43F9D6E11F970/F6gIZniOytzh9tCsYYLRDDnXf4k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6gIZniOytzh9tCsYYLRDDnXf4k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BEC0/88448ECAA9C411F1BAD43F9D6E11F970/F6gIZniOytzh9tCsYYLRDDnXf4k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:fc:0e:c3:5c:bd:fd:1b:6a:3b:9f:17:83:ff:b2:4d:69:2c:
         3e:15:74:5e:ef:54:fc:64:49:5e:40:91:a0:fa:33:6d:1f:fb:
         be:26:bf:4c:40:97:52:9a:a5:9f:a3:89:fe:dc:38:92:53:f7:
         a8:2e:93:f8:c5:d7:b4:ad:51:a6:47:3d:e9:a6:7e:e0:f1:80:
         a1:77:26:17:fd:72:15:77:d3:04:62:4a:ab:c5:55:0c:72:19:
         c9:31:20:a6:c5:8f:ee:74:a7:8e:5f:e4:74:18:8f:57:4a:84:
         07:92:79:3d:d0:d6:4c:95:5b:0c:60:3b:4a:4a:83:b2:c9:a6:
         49:07:d2:c5:02:ec:36:e3:03:6b:1a:4c:cc:14:3a:72:1c:c8:
         8d:77:94:cf:f9:c5:7e:4e:5e:56:61:52:43:6b:ab:1e:ca:d9:
         2b:78:49:a0:1c:9d:21:68:47:09:a6:ff:83:1a:7c:8c:d2:ef:
         48:c5:1a:57:42:57:a9:34:f0:4d:3f:05:ce:19:8f:7c:5e:94:
         89:b3:81:07:d0:be:b9:f3:bd:a1:cb:20:66:4f:84:a1:19:a7:
         36:d0:08:8a:19:54:04:22:bb:cd:ee:2a:2b:9f:c8:b0:7c:a8:
         c7:f6:99:42:48:cd:cc:f2:d3:a6:b0:0d:df:bb:68:99:29:86:
         9d:28:08:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 05:52:21 2026 by rpki-client