Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft
File:                     -6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft (raw, json)
Hash identifier:          ycE/V27XA5DV2wWHqvZ5Kg0cYGZgCC+y7y7XHfW3UDs=
Subject key identifier:   3D:5F:80:95:F3:C9:BF:59:A9:73:95:53:27:F3:70:DC:E0:D0:D0:B1
Authority key identifier: FB:A7:C3:AD:F0:7F:80:B3:56:C1:13:B8:52:56:F5:7A:40:69:EA:E6
Certificate issuer:       /CN=A918FD87/serialNumber=FBA7C3ADF07F80B356C113B85256F57A4069EAE6
Certificate serial:       0916
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft
Manifest number:          090B
Signing time:             Tue 06 Oct 2026 20:25:01 +0000
Manifest this update:     Tue 06 Oct 2026 20:25:01 +0000
Manifest next update:     Tue 13 Oct 2026 20:25:01 +0000
Files and hashes:         1: -6fDrfB_gLNWwRO4Ulb1ekBp6uY.crl (hash: dIrQK58WkwmSR/vqrq+hCLiJbopF2TOShKPeCjbOaAM=)
                          2: 35167F34DE0911EAA8F7452CC4F9AE02.roa (hash: DoGtO0ioSkETngbYqtxgGr43fZyQW1n/adtL23ovKKA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.crl
                          rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 20:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2326 (0x916)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FD87, serialNumber=FBA7C3ADF07F80B356C113B85256F57A4069EAE6
        Validity
            Not Before: Oct  6 20:25:01 2026 GMT
            Not After : Oct 13 20:25:01 2026 GMT
        Subject: CN=6ac5591d-b241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:90:26:5a:8d:09:fc:22:e1:e2:a6:4c:59:82:
                    d2:fa:a0:6e:c6:80:d4:92:48:dd:3f:a4:78:26:96:
                    03:ee:5d:00:92:e0:6e:07:fc:a0:69:8a:f1:6a:9a:
                    7e:10:18:a4:94:3d:ae:c6:a1:de:a6:ce:88:26:fa:
                    5d:48:0f:1d:14:36:4b:6c:90:c8:b5:4c:f5:92:54:
                    ad:2d:c5:8f:1a:eb:c5:e0:4f:e4:44:38:ae:b3:e8:
                    8a:fe:43:05:14:4f:1c:fd:fa:bf:3e:71:59:43:e9:
                    9e:03:2c:d8:56:22:5a:f3:12:1b:73:c2:90:4c:38:
                    09:6a:44:e2:fc:e6:0a:c0:f1:57:98:9b:df:5d:09:
                    5b:9a:a5:aa:cc:42:ad:c2:43:e5:4a:67:73:d8:6b:
                    43:62:33:19:81:aa:f6:f2:22:82:f3:bf:b8:3f:11:
                    29:54:b0:92:01:d5:b1:e9:7c:71:0b:69:20:96:d9:
                    65:5c:55:2b:fd:f2:8d:c4:96:1c:39:49:54:54:bb:
                    ef:a6:69:33:86:2d:8d:48:c9:d3:a3:6d:9c:f9:7f:
                    2c:b7:14:ed:69:f1:c5:c7:1a:d8:f5:2d:61:b8:45:
                    07:8e:90:e9:f8:f5:b2:13:43:f8:b8:92:2c:a1:cf:
                    3f:fd:cf:f2:17:b7:38:13:00:7a:c8:29:15:72:a0:
                    9e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:5F:80:95:F3:C9:BF:59:A9:73:95:53:27:F3:70:DC:E0:D0:D0:B1
            X509v3 Authority Key Identifier:
                keyid:FB:A7:C3:AD:F0:7F:80:B3:56:C1:13:B8:52:56:F5:7A:40:69:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:de:30:a5:df:3e:30:b7:a3:5d:18:08:d8:55:02:65:03:a0:
         01:56:36:2a:21:11:fe:3d:0d:f9:32:88:6d:44:7f:0b:12:1d:
         16:5e:42:6e:83:37:90:7e:e4:8c:4a:99:8c:1c:aa:9d:00:6e:
         e4:c6:cf:3b:1b:45:12:58:98:01:71:a6:c0:2b:13:1c:7b:c6:
         65:29:5b:c2:be:8c:77:6c:39:31:b3:a5:a0:3c:5c:12:9b:8a:
         37:5a:91:bd:c7:18:6e:3d:b5:67:d2:b8:f0:22:3a:7f:75:26:
         42:01:ed:82:9f:49:f0:9f:e5:75:f1:2f:41:cd:49:37:ea:15:
         c7:09:8b:7f:91:24:f6:6b:ea:4c:43:45:51:50:21:78:21:5f:
         60:80:dd:69:e1:a5:b8:8d:a0:3f:f8:2d:be:c8:13:1e:63:58:
         8a:7c:64:38:e5:d3:a0:48:16:03:c3:7f:f0:f5:8f:7b:6b:50:
         2f:9a:0d:65:0a:e7:ec:d7:1b:4c:20:5a:e5:7f:2b:6d:24:0e:
         91:17:88:27:d5:3e:f6:9e:cf:d9:51:7b:4e:0e:e4:b1:8b:80:
         b7:1a:c6:13:7a:ff:de:a1:af:ca:47:47:3e:b6:49:50:70:2e:
         dd:7c:62:2c:e8:90:61:46:05:d3:8a:f3:3a:34:48:26:14:f3:
         03:f7:97:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 21:05:06 2026 by rpki-client