Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
File:                     6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft (raw, json)
Hash identifier:          UYfOlcGxcN67YqU3Hr6oiyCB+SoyRY/62dhA3b+YBkw=
Subject key identifier:   A3:AC:2F:9B:E4:AE:42:10:40:DB:C5:F9:A1:FA:2B:96:21:1C:E8:02
Authority key identifier: E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A
Certificate issuer:       /CN=A9171560/serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A
Certificate serial:       0DFE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
Manifest number:          0DF0
Signing time:             Fri 18 Sep 2026 17:51:30 +0000
Manifest this update:     Fri 18 Sep 2026 17:51:30 +0000
Manifest next update:     Fri 25 Sep 2026 17:51:30 +0000
Files and hashes:         1: 6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl (hash: XeMGyR7OskJyofFQUDC1CfpGZJf+IiqQSPT8kfIpeHU=)
                          2: 65AF30D422D211EAB3ABA447C4F9AE02.roa (hash: QXg7M2m5LXshgGCvqZUQtcfpkkmWRWbqZY6mP6sNKfA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl
                          rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3582 (0xdfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171560, serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A
        Validity
            Not Before: Sep 18 17:51:30 2026 GMT
            Not After : Sep 25 17:51:30 2026 GMT
        Subject: CN=6aad7a22-7d7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:66:24:c6:f6:77:39:63:10:eb:d6:11:93:8e:
                    29:57:c8:18:b6:ac:0d:7a:0f:14:26:86:57:5b:45:
                    ac:89:1d:4b:1d:f8:3e:c2:1f:d9:90:d2:e0:19:3d:
                    26:13:f4:8d:1b:de:4f:83:57:22:24:58:ea:f4:cc:
                    db:70:42:e3:3b:2b:36:d1:95:57:dc:ca:19:41:da:
                    ff:15:d1:bf:96:5f:87:43:b1:21:23:df:0a:91:90:
                    d8:9f:0d:e4:c5:c9:37:97:55:e0:39:10:bb:f9:ec:
                    e4:d2:ba:39:50:4f:77:35:ae:50:1a:fc:20:4b:53:
                    2a:95:f4:b6:ca:fb:f2:20:5a:8c:13:1f:df:f5:d2:
                    f1:3e:d8:c7:b4:1c:4e:5a:69:a5:7d:b4:3a:e6:35:
                    03:c5:85:0c:88:90:fe:62:dc:bd:02:2a:0c:10:d2:
                    55:d1:0a:20:c2:78:59:e3:7e:af:ae:8e:de:db:06:
                    36:40:2c:9f:80:bc:92:0c:2d:35:6b:d5:d6:98:60:
                    2d:16:af:4d:44:8e:c5:e2:19:07:20:ca:86:1a:3e:
                    d1:f7:25:99:77:aa:e3:b6:3e:ab:ef:35:c4:5b:59:
                    06:d9:d1:ac:29:01:ad:cc:6c:00:da:24:65:92:7b:
                    a6:2d:b5:23:72:8c:3e:8c:8f:a5:c4:c8:56:7b:e6:
                    e2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:AC:2F:9B:E4:AE:42:10:40:DB:C5:F9:A1:FA:2B:96:21:1C:E8:02
            X509v3 Authority Key Identifier:
                keyid:E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:4d:5b:49:9b:3f:6b:ed:e1:06:68:e6:db:65:3f:1a:23:c3:
         0c:06:7b:d5:cb:ef:28:35:27:01:b8:46:d5:46:1a:6b:78:e7:
         e6:77:33:69:b4:99:3f:e3:af:2e:96:db:36:9c:c4:40:e5:24:
         7f:7f:60:f8:a5:4c:d9:4c:be:22:e4:d6:64:0e:42:4c:21:be:
         85:34:05:ca:0c:c1:e3:f2:a7:f7:bc:c1:b2:70:d1:12:92:dd:
         3d:21:b5:56:60:b7:60:b2:18:6d:d8:6e:14:18:8f:c6:c4:18:
         ab:dc:c1:6d:6b:9d:2c:e4:de:26:5b:91:66:d4:fa:9b:76:ad:
         4c:5d:95:2b:9f:95:5d:c3:f8:38:d3:ef:b9:59:69:78:cc:27:
         dc:57:ca:ae:69:9b:61:e2:d9:c2:db:71:86:61:ed:9f:4c:a4:
         ac:ff:fa:73:21:0c:1f:e6:c5:76:4f:ac:03:83:fe:c9:b3:57:
         64:05:df:9e:3b:dd:a4:64:e3:52:d4:d1:74:da:3c:d3:ee:4c:
         91:53:f6:7c:76:6d:0f:7f:6c:97:96:81:57:eb:ce:79:1e:f4:
         e6:a9:d7:d4:da:ef:ed:73:3a:38:fe:83:81:52:71:3f:b6:49:
         d3:20:c4:1e:87:35:f8:dc:e1:89:4e:42:72:d2:fe:ee:ad:bb:
         7c:f0:26:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 09:28:43 2026 by rpki-client