Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.mft
File:                     6uK86DXkKxFfGLP-Do8n-EpHSZY.mft (raw, json)
Hash identifier:          qDCzG4G17ACor4XxzJCy9d2queB3CaWok0rYd/Si7AA=
Subject key identifier:   25:9C:D5:5D:A1:95:E4:B5:40:65:87:A8:5B:D6:F8:6E:36:04:08:54
Authority key identifier: EA:E2:BC:E8:35:E4:2B:11:5F:18:B3:FE:0E:8F:27:F8:4A:47:49:96
Certificate issuer:       /CN=A912C0DE/serialNumber=EAE2BCE835E42B115F18B3FE0E8F27F84A474996
Certificate serial:       0233
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6uK86DXkKxFfGLP-Do8n-EpHSZY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.mft
Manifest number:          0228
Signing time:             Tue 27 Oct 2026 03:02:34 +0000
Manifest this update:     Tue 27 Oct 2026 03:02:33 +0000
Manifest next update:     Tue 03 Nov 2026 03:02:33 +0000
Files and hashes:         1: 6uK86DXkKxFfGLP-Do8n-EpHSZY.crl (hash: TV/ByQxqLIV2yCL7zZsPHCplN2YFbAfoyDwlANgDY4M=)
                          2: 5F57D01A5EA511EFB0E1B468C4F9AE02.roa (hash: oILwHunfjRZCku3Ta2X5ncJFaBfa3eMCSs+5uDaH9RM=)
                          3: A2348A2E8EBD11F0848C250FC4F9AE02.roa (hash: xHFtOp89Ew/EV+F26Z5Y9h5o64nJkFT6TAlApTvBCPU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.crl
                          rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6uK86DXkKxFfGLP-Do8n-EpHSZY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 03:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 563 (0x233)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C0DE, serialNumber=EAE2BCE835E42B115F18B3FE0E8F27F84A474996
        Validity
            Not Before: Oct 27 03:02:33 2026 GMT
            Not After : Nov  3 03:02:33 2026 GMT
        Subject: CN=6ae0144a-db22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ee:e7:2d:14:f2:c0:1d:48:76:82:ae:bf:21:
                    83:cb:d5:e9:54:f0:f0:dc:80:ff:e2:db:07:76:57:
                    b0:47:11:f6:9b:56:bc:1f:aa:2a:f0:07:49:ab:59:
                    30:4f:57:6c:b1:18:6a:41:c1:ef:74:2a:64:b7:fb:
                    30:ad:e4:d3:ea:da:2f:06:7a:86:eb:08:e2:6d:8b:
                    e7:78:7c:dc:12:64:ea:b8:31:96:4c:75:a2:d1:db:
                    59:f8:fb:a4:08:a6:34:5e:70:82:a3:3c:13:f3:9f:
                    ce:b4:49:56:01:04:4c:6d:6c:9c:46:d9:ef:c2:c0:
                    ae:9c:5e:04:2f:c3:81:5e:bd:22:04:db:f3:bc:e0:
                    0b:3c:a8:bc:55:e6:c6:f4:4a:a8:64:c1:03:5d:25:
                    19:55:94:58:8e:51:1c:45:f8:84:de:a7:b9:48:2e:
                    74:67:43:e5:49:8d:4f:36:96:05:ff:41:6a:c1:5b:
                    6c:ff:e9:0c:09:38:ff:9d:3b:70:c9:45:fc:11:bc:
                    48:f0:69:f2:7a:b2:96:c2:f1:3a:c9:5f:da:f0:64:
                    21:9a:85:f2:4c:e4:c6:a7:66:d0:3c:05:cf:34:38:
                    4f:bb:7d:81:1f:bf:7d:92:7e:e7:6e:d3:1c:a3:b5:
                    97:d5:25:32:9c:be:ed:d0:4b:36:07:0c:35:49:d1:
                    4f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:9C:D5:5D:A1:95:E4:B5:40:65:87:A8:5B:D6:F8:6E:36:04:08:54
            X509v3 Authority Key Identifier:
                keyid:EA:E2:BC:E8:35:E4:2B:11:5F:18:B3:FE:0E:8F:27:F8:4A:47:49:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6uK86DXkKxFfGLP-Do8n-EpHSZY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:11:9b:1e:fc:8c:c1:c8:92:d2:b0:95:7f:0a:fb:77:81:3a:
         a7:86:aa:61:c8:34:97:df:d3:61:ab:d5:5e:f7:a6:88:04:03:
         a6:5d:12:d0:3e:42:25:9b:37:ee:0d:26:f6:e4:8d:41:9e:85:
         85:c2:fc:ef:5d:b0:18:47:ba:e9:54:2f:c6:14:99:3f:15:fe:
         1a:67:8a:09:43:14:4d:89:04:21:fd:3a:86:99:5b:8e:39:23:
         93:25:e5:12:fb:66:43:f7:7c:f7:de:8f:80:35:4f:c4:00:9a:
         b7:25:df:5f:c7:fb:b2:b8:b2:f7:89:75:7f:ed:05:53:90:21:
         f3:77:8a:c2:3b:bf:b4:ea:67:57:d7:dd:86:8e:e9:b0:d7:c3:
         24:16:1a:36:4e:9b:cd:b9:ae:54:a9:f0:08:e6:e9:11:22:28:
         de:33:1c:bd:3f:f2:06:ac:12:cd:a3:b0:ba:4b:b5:17:27:fb:
         e1:81:19:59:60:ea:55:70:4d:0f:4f:78:08:5d:66:13:dc:80:
         c1:5e:0f:36:84:cc:7c:5a:eb:76:2b:95:71:c6:cf:fd:e6:47:
         c3:1b:c8:5f:a5:b6:ac:b5:c3:ab:9d:2a:d3:4f:bb:11:26:74:
         cc:76:78:1a:d5:56:c0:b4:be:3d:3f:db:9c:06:40:90:46:04:
         ab:f4:6c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:36:56 2026 by rpki-client