Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.mft
File:                     6qSDu71coOErPsD25wxbqq40VSs.mft (raw, json)
Hash identifier:          3ky8dkS/5GhTo8MbmOaocG0T+PO7r2RTeErsVgPjvKc=
Subject key identifier:   D1:70:6D:42:D8:52:75:C7:21:1B:C8:93:97:CE:56:F5:FA:E6:AA:D3
Authority key identifier: EA:A4:83:BB:BD:5C:A0:E1:2B:3E:C0:F6:E7:0C:5B:AA:AE:34:55:2B
Certificate issuer:       /CN=A914BAA2/serialNumber=EAA483BBBD5CA0E12B3EC0F6E70C5BAAAE34552B
Certificate serial:       0142
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qSDu71coOErPsD25wxbqq40VSs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.mft
Manifest number:          0137
Signing time:             Mon 05 Oct 2026 06:08:58 +0000
Manifest this update:     Mon 05 Oct 2026 06:08:57 +0000
Manifest next update:     Mon 12 Oct 2026 06:08:57 +0000
Files and hashes:         1: 6qSDu71coOErPsD25wxbqq40VSs.crl (hash: eUFH4h+yFM1b//WTwi50/tyokQvkxBuvQ7WUzGDIJ40=)
                          2: 535D1F52069511F090414823C4F9AE02.roa (hash: fFn43c+yB+C9Km2SsZKRXLmx2giwdUoMyfnmnxY1vo4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.crl
                          rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qSDu71coOErPsD25wxbqq40VSs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 06:08:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 322 (0x142)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BAA2, serialNumber=EAA483BBBD5CA0E12B3EC0F6E70C5BAAAE34552B
        Validity
            Not Before: Oct  5 06:08:57 2026 GMT
            Not After : Oct 12 06:08:57 2026 GMT
        Subject: CN=6ac33efa-9858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:75:1f:fb:7e:23:d5:39:3b:9f:1f:bc:02:8e:
                    c1:65:96:45:b4:96:92:cd:74:88:bd:dc:a9:d5:df:
                    20:67:53:6e:3f:7f:8c:64:0c:e0:d0:2c:96:f8:63:
                    72:9e:b7:03:42:55:e5:73:a6:07:5e:c4:5d:69:d8:
                    21:1c:64:a7:c0:60:b8:59:a7:2f:f9:d7:bd:2c:fe:
                    40:40:b0:5a:60:f6:43:0f:df:46:e1:40:1e:07:5c:
                    0d:3f:9e:ec:b1:38:51:3c:33:3c:48:a9:bb:1b:49:
                    19:ca:39:70:92:bd:33:ef:fc:8e:40:a5:b3:94:15:
                    dc:12:02:3c:29:11:a9:11:bc:8b:1e:93:26:9f:78:
                    de:55:f2:c6:13:a9:ca:62:33:2a:97:88:ad:01:2b:
                    21:64:0a:b0:e4:55:8c:b9:b6:91:c5:e1:55:80:fc:
                    3c:4c:89:a8:88:a5:e7:7e:29:a9:a1:1d:34:ce:fd:
                    7b:50:96:4a:18:50:a1:23:ed:40:c4:8f:ee:72:a8:
                    2b:86:1a:42:8f:95:a0:80:90:e9:c7:33:b1:84:e1:
                    f0:bb:e4:46:d1:cd:3f:6f:22:20:1c:01:86:db:d3:
                    cd:77:f5:8c:e8:3a:07:74:8e:60:99:03:0c:6a:d2:
                    15:b0:c6:df:9f:c1:b5:a6:83:5f:b9:a1:d8:f0:1e:
                    8a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:70:6D:42:D8:52:75:C7:21:1B:C8:93:97:CE:56:F5:FA:E6:AA:D3
            X509v3 Authority Key Identifier:
                keyid:EA:A4:83:BB:BD:5C:A0:E1:2B:3E:C0:F6:E7:0C:5B:AA:AE:34:55:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qSDu71coOErPsD25wxbqq40VSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:ed:8e:13:83:91:59:6b:fc:60:8e:51:f3:d6:40:66:63:5c:
         0e:26:ae:69:04:c6:fc:ed:31:97:33:7f:f4:d7:3e:4b:ad:08:
         95:7a:cc:f8:9e:c5:b6:6e:1e:c4:7d:db:ef:d0:ac:09:40:be:
         02:75:05:73:00:cf:39:3c:0f:97:74:55:62:7a:fc:c6:6d:29:
         71:61:aa:2c:cc:f4:53:a0:cf:89:2d:06:31:70:9f:15:46:3d:
         0c:1e:4e:60:69:c7:88:be:78:db:dd:cf:e1:93:71:5f:7c:85:
         0f:6e:3c:b2:b6:43:19:50:db:27:e0:ee:83:df:90:1e:fb:21:
         97:34:c3:e0:b0:aa:1b:37:92:63:36:4e:f0:15:7b:a2:4d:a3:
         d3:8f:e8:49:f3:eb:80:cd:63:3f:11:93:ff:65:62:1a:36:f6:
         ab:0e:ff:1a:69:31:d2:4c:5c:66:29:e6:4c:c4:1c:c6:9e:e5:
         aa:e9:94:8e:1a:43:a0:a3:5d:22:c2:b7:d6:93:8f:00:e8:85:
         7a:28:dd:3b:b4:3a:11:e3:f9:82:7a:fb:8c:0b:e4:67:cf:39:
         a5:19:79:c5:3d:aa:06:ae:67:2f:ad:84:81:d9:e3:4f:22:a4:
         86:f3:0a:7d:86:4d:3a:5f:e4:1d:d6:2b:f1:21:e3:18:58:53:
         ab:7a:a3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:42:36 2026 by rpki-client