Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917F9C3/788E7C464AB711F186F27E3ABA833773/9b6dYfb-pOZW1P0BVPgkg5zAExo.mft
File:                     9b6dYfb-pOZW1P0BVPgkg5zAExo.mft (raw, json)
Hash identifier:          z0am7AeNEzsE8Mmg/OysRilz90FeMeWwrCWn4UKo+NI=
Subject key identifier:   5E:83:FA:42:63:7A:98:92:89:02:2D:63:1E:4E:30:8B:3C:FE:D2:57
Authority key identifier: F5:BE:9D:61:F6:FE:A4:E6:56:D4:FD:01:54:F8:24:83:9C:C0:13:1A
Certificate issuer:       /CN=A917F9C3/serialNumber=F5BE9D61F6FEA4E656D4FD0154F824839CC0131A
Certificate serial:       56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9b6dYfb-pOZW1P0BVPgkg5zAExo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F9C3/788E7C464AB711F186F27E3ABA833773/9b6dYfb-pOZW1P0BVPgkg5zAExo.mft
Manifest number:          55
Signing time:             Wed 21 Oct 2026 08:49:40 +0000
Manifest this update:     Wed 21 Oct 2026 08:49:39 +0000
Manifest next update:     Wed 28 Oct 2026 08:49:39 +0000
Files and hashes:         1: 9b6dYfb-pOZW1P0BVPgkg5zAExo.crl (hash: hy/r70KB+xZcY5l/0iAjSmhyqptbTpL4IlRDdKU8YNA=)
                          2: 6C5753D84AB911F18A4D3DF6BB833773.roa (hash: kOOEqXmo4LVDDcxbv65Mt49e9oFCFpEfHfLmkIbPCDw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F9C3/788E7C464AB711F186F27E3ABA833773/9b6dYfb-pOZW1P0BVPgkg5zAExo.crl
                          rsync://rpki.apnic.net/member_repository/A917F9C3/788E7C464AB711F186F27E3ABA833773/9b6dYfb-pOZW1P0BVPgkg5zAExo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9b6dYfb-pOZW1P0BVPgkg5zAExo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Oct 2026 04:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F9C3, serialNumber=F5BE9D61F6FEA4E656D4FD0154F824839CC0131A
        Validity
            Not Before: Oct 21 08:49:39 2026 GMT
            Not After : Oct 28 08:49:39 2026 GMT
        Subject: CN=6ad87ca3-ecd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b2:d1:9a:71:33:46:63:13:f2:d6:ee:58:39:
                    3e:5b:c8:a8:50:d6:dd:dc:50:f0:c0:54:e1:61:f8:
                    b2:2d:da:ea:87:a2:0c:50:be:4c:d9:a7:90:e6:66:
                    e2:48:1e:67:3d:89:ce:d1:c9:13:e2:37:98:1c:dd:
                    2c:56:17:7d:ce:8c:44:c0:3e:b8:4e:38:53:71:f6:
                    1a:21:5b:5c:ec:dc:46:1a:ad:47:fc:03:d3:39:bb:
                    d6:d5:65:9f:02:74:ca:09:c2:65:f9:a7:a7:aa:43:
                    4f:44:67:0b:0e:84:48:ad:30:04:f7:19:58:65:3f:
                    84:24:bb:2d:9c:c1:57:9e:ce:f7:f6:7b:82:50:33:
                    06:90:1d:0d:c7:08:d2:b3:bb:16:c7:ba:bf:b4:ac:
                    55:5f:4b:c1:21:09:55:6f:4a:49:99:bf:2c:6d:5a:
                    26:46:67:68:da:1d:51:a9:8a:d5:96:b4:b3:f9:f9:
                    dd:d3:38:56:2d:c2:4f:05:e0:6d:81:e3:bd:97:a1:
                    90:38:7a:38:d2:09:25:00:66:b6:c8:94:e7:ed:07:
                    b8:ef:85:92:3c:12:73:fc:e2:90:cd:0d:6b:bd:40:
                    2a:fd:c5:25:65:f6:d9:35:29:3a:ff:28:fd:80:b7:
                    11:e9:64:95:02:30:49:6f:19:11:4b:f9:74:34:fb:
                    c0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:83:FA:42:63:7A:98:92:89:02:2D:63:1E:4E:30:8B:3C:FE:D2:57
            X509v3 Authority Key Identifier:
                keyid:F5:BE:9D:61:F6:FE:A4:E6:56:D4:FD:01:54:F8:24:83:9C:C0:13:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F9C3/788E7C464AB711F186F27E3ABA833773/9b6dYfb-pOZW1P0BVPgkg5zAExo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9b6dYfb-pOZW1P0BVPgkg5zAExo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F9C3/788E7C464AB711F186F27E3ABA833773/9b6dYfb-pOZW1P0BVPgkg5zAExo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:ce:f4:1d:b2:0e:4f:b6:d7:4f:13:30:0b:ab:03:2a:2c:bd:
         00:ee:88:f3:dc:9a:90:19:07:2d:04:0c:47:aa:d9:35:6a:17:
         86:35:3d:13:c5:75:8a:c7:3d:03:46:93:92:ac:d6:73:0f:7a:
         83:21:04:1c:e9:34:31:49:63:b1:b1:e6:53:85:fe:be:81:b7:
         b6:5e:31:c1:41:1c:15:32:0f:7b:b3:cd:0a:0e:9c:f1:3c:43:
         1b:06:6e:29:23:6e:b4:77:80:bd:ef:41:a3:1a:2f:25:42:ab:
         66:2b:6d:15:dc:6c:ac:cc:74:36:3f:93:35:d3:09:4b:2a:3e:
         ed:74:9e:98:96:5d:60:e8:d6:30:0e:4e:0f:82:be:27:7f:b0:
         50:ee:43:dd:4e:7d:56:e2:51:c5:df:3f:ce:f0:22:b9:7e:76:
         9a:92:42:9d:df:16:bc:18:cd:3b:6c:85:e7:2e:44:3a:70:7f:
         f6:58:a2:ad:4d:8b:0d:39:14:0d:48:55:93:1a:ad:54:3e:53:
         d0:ad:99:a5:f4:14:e6:1c:f1:c6:67:64:8d:84:08:f8:ca:10:
         53:2e:75:62:b3:36:91:71:36:12:40:36:4d:ad:aa:e8:b1:27:
         12:4c:ac:1d:25:ec:24:17:49:72:f4:56:4a:4b:1b:36:2b:91:
         37:1c:ed:1d
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
RjlDMzExMC8GA1UEBRMoRjVCRTlENjFGNkZFQTRFNjU2RDRGRDAxNTRGODI0ODM5
Q0MwMTMxQTAeFw0yNjEwMjEwODQ5MzlaFw0yNjEwMjgwODQ5MzlaMBgxFjAUBgNV
BAMTDTZhZDg3Y2EzLWVjZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC6stGacTNGYxPy1u5YOT5byKhQ1t3cUPDAVOFh+LIt2uqHogxQvkzZp5DmZuJI
Hmc9ic7RyRPiN5gc3SxWF33OjETAPrhOOFNx9hohW1zs3EYarUf8A9M5u9bVZZ8C
dMoJwmX5p6eqQ09EZwsOhEitMAT3GVhlP4Qkuy2cwVeezvf2e4JQMwaQHQ3HCNKz
uxbHur+0rFVfS8EhCVVvSkmZvyxtWiZGZ2jaHVGpitWWtLP5+d3TOFYtwk8F4G2B
472XoZA4ejjSCSUAZrbIlOftB7jvhZI8EnP84pDNDWu9QCr9xSVl9tk1KTr/KP2A
txHpZJUCMElvGRFL+XQ0+8C9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUXoP6QmN6
mJKJAi1jHk4wizz+0lcwHwYDVR0jBBgwFoAU9b6dYfb+pOZW1P0BVPgkg5zAExow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGOUMzLzc4OEU3QzQ2NEFC
NzExRjE4NkYyN0UzQUJBODMzNzczLzliNmRZZmItcE9aVzFQMEJWUGdrZzV6QUV4
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvOWI2ZFlmYi1wT1pXMVAwQlZQZ2tnNXpBRXhvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdG
OUMzLzc4OEU3QzQ2NEFCNzExRjE4NkYyN0UzQUJBODMzNzczLzliNmRZZmItcE9a
VzFQMEJWUGdrZzV6QUV4by5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQARzvQdsg5PttdPEzALqwMqLL0A7ojz3JqQGQctBAxHqtk1aheGNT0TxXWKxz0D
RpOSrNZzD3qDIQQc6TQxSWOxseZThf6+gbe2XjHBQRwVMg97s80KDpzxPEMbBm4p
I260d4C970GjGi8lQqtmK20V3GyszHQ2P5M10wlLKj7tdJ6Yll1g6NYwDk4Pgr4n
f7BQ7kPdTn1W4lHF3z/O8CK5fnaakkKd3xa8GM07bIXnLkQ6cH/2WKKtTYsNORQN
SFWTGq1UPlPQrZml9BTmHPHGZ2SNhAj4yhBTLnViszaRcTYSQDZNrarosScSTKwd
JewkF0ly9FZKSxs2K5E3HO0d
-----END CERTIFICATE-----
Generated at Thu Oct 22 23:06:07 2026 by rpki-client