Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft
File:                     9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft (raw, json)
Hash identifier:          GbRwVVYufpTb7SJ3xhRvKEfs0NBVfXCqXik68Pub+F8=
Subject key identifier:   74:41:71:2D:77:30:6D:0D:55:59:CE:F7:C4:50:A0:81:A2:25:38:71
Authority key identifier: F4:B0:38:5A:5D:CD:EF:E6:D4:EC:6C:6C:BC:EA:21:55:FD:60:57:17
Certificate issuer:       /CN=A913CE18/serialNumber=F4B0385A5DCDEFE6D4EC6C6CBCEA2155FD605717
Certificate serial:       A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LA4Wl3N7-bU7GxsvOohVf1gVxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft
Manifest number:          A6
Signing time:             Sun 11 Oct 2026 07:46:58 +0000
Manifest this update:     Sun 11 Oct 2026 07:46:57 +0000
Manifest next update:     Sun 18 Oct 2026 07:46:57 +0000
Files and hashes:         1: 9LA4Wl3N7-bU7GxsvOohVf1gVxc.crl (hash: 2HP60Zg2Z+Uuxx5IsfBhpHnqm4wIXNZ3Aqek2mwOZxo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.crl
                          rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LA4Wl3N7-bU7GxsvOohVf1gVxc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 07:46:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CE18, serialNumber=F4B0385A5DCDEFE6D4EC6C6CBCEA2155FD605717
        Validity
            Not Before: Oct 11 07:46:57 2026 GMT
            Not After : Oct 18 07:46:57 2026 GMT
        Subject: CN=6acb3ef2-e916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:6d:8d:5b:e5:ba:01:c5:29:19:b3:bc:17:b5:
                    ca:03:82:4b:df:5b:58:71:27:ca:13:c4:3a:44:5c:
                    60:7b:ab:ff:ff:ef:3d:e0:03:30:52:1c:a6:e0:a0:
                    91:7c:b4:33:0f:62:e8:fc:2e:45:6a:00:c1:7e:cc:
                    17:d4:cc:69:2c:a3:57:81:a9:24:2d:7e:fe:46:2c:
                    6b:80:dd:8e:14:55:7b:18:bb:f2:6f:45:4d:e0:c4:
                    ef:d7:16:1f:f6:4e:ee:4e:70:e4:42:a8:75:82:09:
                    84:83:1e:83:2d:14:5a:4b:51:90:30:8a:fb:5f:ae:
                    26:e6:47:d4:5f:53:d7:d5:7d:d9:0c:b9:97:cb:dc:
                    44:68:4b:47:fa:05:f6:bc:64:b7:e9:96:a8:61:f7:
                    2f:9d:5b:19:c8:79:cb:57:61:92:59:5f:3a:52:c2:
                    a5:f4:f5:c8:46:ad:c5:b4:e0:7c:27:81:44:99:ee:
                    71:95:12:2d:f6:d3:db:2a:fd:00:a8:51:d4:2f:90:
                    d7:5e:d5:75:7c:26:eb:21:ac:c4:06:39:4c:00:7b:
                    6c:e1:c6:02:01:c3:04:f9:b3:00:e7:71:95:2e:9f:
                    65:91:de:3d:d4:a4:b6:15:ee:ed:49:e1:bc:84:00:
                    d1:f6:91:12:45:b5:26:62:80:f3:62:b7:ae:43:aa:
                    04:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:41:71:2D:77:30:6D:0D:55:59:CE:F7:C4:50:A0:81:A2:25:38:71
            X509v3 Authority Key Identifier:
                keyid:F4:B0:38:5A:5D:CD:EF:E6:D4:EC:6C:6C:BC:EA:21:55:FD:60:57:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LA4Wl3N7-bU7GxsvOohVf1gVxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:73:41:ee:63:8d:29:39:6c:1d:1a:3f:fa:16:13:41:20:08:
         18:25:4b:4a:fe:36:1c:ea:ca:51:c0:05:4c:4e:a5:b2:71:b6:
         bf:d9:a3:23:dc:4f:e6:b9:30:23:1a:df:32:71:5c:36:34:6b:
         fd:6e:f9:19:bc:57:19:b6:77:a8:be:39:45:9e:3a:5d:90:cd:
         b6:50:c2:b5:b0:f6:4b:b8:d3:e4:67:9d:7c:53:cd:d0:85:bf:
         56:ff:da:95:8f:59:bb:02:0a:80:51:ff:4f:d7:fe:fb:a3:87:
         e4:e3:79:cf:13:7d:af:8f:b8:e1:55:56:70:b5:bc:35:68:ce:
         f7:b0:84:99:ec:88:e4:57:65:4b:82:c8:12:d6:22:60:19:d8:
         5e:e3:db:f7:e4:b8:a9:22:ff:03:c9:a3:27:e9:f1:60:2b:1f:
         d8:2f:d5:3a:57:13:9b:39:ab:c4:ff:93:42:4b:15:11:56:27:
         1b:db:4c:0f:c8:71:02:ac:88:54:32:db:98:1f:b9:93:30:b0:
         dd:f7:a9:f4:ad:e9:91:5c:c9:84:5f:19:cf:66:36:01:88:ca:
         94:bf:67:9a:63:67:ea:fa:ee:92:92:b0:28:90:da:4e:76:47:
         69:ef:d1:bb:31:f8:35:0f:91:4a:40:d4:96:7e:3d:67:e9:03:
         9e:15:c8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:20:19 2026 by rpki-client