Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.mft
File:                     6VE3HeTcsQAlSE0vFP3NosZFW5E.mft (raw, json)
Hash identifier:          o9LL4g7TpdEMqx+v5si3OrtoKm2xEmk1Etk5bjQLMN8=
Subject key identifier:   9B:53:3B:B4:4A:40:92:CA:D3:AB:2F:F2:90:02:C4:FE:63:89:A2:67
Authority key identifier: E9:51:37:1D:E4:DC:B1:00:25:48:4D:2F:14:FD:CD:A2:C6:45:5B:91
Certificate issuer:       /CN=A9195FCB/serialNumber=E951371DE4DCB10025484D2F14FDCDA2C6455B91
Certificate serial:       086C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6VE3HeTcsQAlSE0vFP3NosZFW5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.mft
Manifest number:          085D
Signing time:             Sun 04 Oct 2026 21:01:44 +0000
Manifest this update:     Sun 04 Oct 2026 21:01:43 +0000
Manifest next update:     Sun 11 Oct 2026 21:01:43 +0000
Files and hashes:         1: 6VE3HeTcsQAlSE0vFP3NosZFW5E.crl (hash: TRFxQC4MWKc9lBDH1iMQBouapfKa2+I7mJvDZggNkTU=)
                          2: A3E98D0E22A911EB96014E82C4F9AE02.roa (hash: PwNatT98vDMLCMW/pGvJnRh8IWvqMHeInd7IvXTX4CU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.crl
                          rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6VE3HeTcsQAlSE0vFP3NosZFW5E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 21:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2156 (0x86c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195FCB, serialNumber=E951371DE4DCB10025484D2F14FDCDA2C6455B91
        Validity
            Not Before: Oct  4 21:01:43 2026 GMT
            Not After : Oct 11 21:01:43 2026 GMT
        Subject: CN=6ac2beb8-29b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:69:81:c8:46:fa:7f:65:ec:f7:d0:6c:81:1e:
                    6e:a1:6d:cb:2b:2a:a8:af:1b:71:29:aa:c6:23:ac:
                    d3:0e:d6:71:d5:9f:75:5e:60:59:96:19:81:02:9e:
                    fd:12:d2:28:fb:a8:80:eb:3f:21:f6:db:ac:d8:d4:
                    94:aa:8c:45:b7:d9:cd:ed:dc:d4:eb:f7:1e:be:cc:
                    30:67:5c:55:b8:8a:2e:14:39:71:27:94:33:f9:a3:
                    4a:50:82:ca:b7:01:2e:fc:df:c4:46:16:7d:a5:f8:
                    da:95:8b:36:19:d5:41:3f:ac:52:79:9f:70:1c:a5:
                    54:57:8c:8e:42:e7:5d:27:53:d6:1a:0b:75:15:07:
                    57:35:85:51:c3:67:95:a3:d9:3c:47:5e:37:ab:e7:
                    ce:c5:5f:c7:57:68:f5:55:84:fd:6b:14:ef:fe:47:
                    15:0f:c4:83:2c:37:11:6f:52:f6:b3:59:b7:fe:f3:
                    6e:47:88:c3:96:5d:bc:81:88:10:20:c0:d5:74:c2:
                    43:af:5a:60:0a:df:bc:06:de:50:72:0d:49:db:f7:
                    48:e4:65:e7:dd:83:e3:5f:3c:f2:21:c8:dc:73:82:
                    fe:c0:14:e1:bf:02:00:e6:af:a4:09:f6:ed:57:93:
                    a2:c5:c5:e9:0d:19:36:12:ce:ca:58:b7:ef:b3:d9:
                    28:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:53:3B:B4:4A:40:92:CA:D3:AB:2F:F2:90:02:C4:FE:63:89:A2:67
            X509v3 Authority Key Identifier:
                keyid:E9:51:37:1D:E4:DC:B1:00:25:48:4D:2F:14:FD:CD:A2:C6:45:5B:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6VE3HeTcsQAlSE0vFP3NosZFW5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:b1:bf:93:2a:e4:b1:90:d2:e6:6f:91:3c:d4:c6:b0:07:b9:
         86:bc:1a:f0:fd:5b:89:ad:07:27:84:59:d3:44:df:07:95:a5:
         7b:47:ac:ef:6e:c1:b5:ba:e7:75:12:93:9c:91:b5:bd:6b:54:
         0e:ad:e3:ae:0d:79:86:cf:d7:40:2a:c9:5b:1a:b0:56:2a:50:
         60:1e:bf:b6:f4:df:b4:08:11:ec:90:b8:1d:b1:f4:fe:c8:90:
         ab:32:0b:b4:a0:2a:61:ff:09:2a:b4:25:44:b0:5e:2f:84:40:
         f5:7e:6d:fe:09:e3:02:54:6a:ce:9d:3c:53:4b:52:16:e9:d9:
         88:b6:96:f0:82:85:35:cd:60:6d:96:3b:ed:2a:49:c7:c3:8d:
         4d:39:de:56:34:c2:1e:6b:8f:7f:7b:4e:79:7e:04:e7:c1:d4:
         c5:67:3a:fe:18:3f:97:32:9f:28:05:99:9b:2c:43:27:5b:e1:
         33:29:b7:67:15:ba:87:b2:e9:c4:00:5a:9b:79:25:01:21:5a:
         3e:8d:1b:c9:4f:5d:ab:2c:6e:df:21:5d:d1:91:38:3e:b8:0a:
         dd:b1:12:e9:4f:bc:a8:7a:3a:e9:7e:6e:c4:a2:2a:0c:75:b7:
         5c:65:1b:2a:e9:e9:d4:76:3e:cd:cf:02:ed:59:4e:5e:be:f3:
         c0:fd:0b:29
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTVGQ0IxMTAvBgNVBAUTKEU5NTEzNzFERTREQ0IxMDAyNTQ4NEQyRjE0RkRDREEy
QzY0NTVCOTEwHhcNMjYxMDA0MjEwMTQzWhcNMjYxMDExMjEwMTQzWjAYMRYwFAYD
VQQDEw02YWMyYmViOC0yOWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvmmByEb6f2Xs99BsgR5uoW3LKyqorxtxKarGI6zTDtZx1Z91XmBZlhmBAp79
EtIo+6iA6z8h9tus2NSUqoxFt9nN7dzU6/cevswwZ1xVuIouFDlxJ5Qz+aNKUILK
twEu/N/ERhZ9pfjalYs2GdVBP6xSeZ9wHKVUV4yOQuddJ1PWGgt1FQdXNYVRw2eV
o9k8R143q+fOxV/HV2j1VYT9axTv/kcVD8SDLDcRb1L2s1m3/vNuR4jDll28gYgQ
IMDVdMJDr1pgCt+8Bt5Qcg1J2/dI5GXn3YPjXzzyIcjcc4L+wBThvwIA5q+kCfbt
V5OixcXpDRk2Es7KWLfvs9koVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJtTO7RK
QJLK06sv8pACxP5jiaJnMB8GA1UdIwQYMBaAFOlRNx3k3LEAJUhNLxT9zaLGRVuR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUZDQi84ODBFNjM0MDIy
QTcxMUVCQjQwNkNFN0NDNEY5QUUwMi82VkUzSGVUY3NRQWxTRTB2RlAzTm9zWkZX
NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZWRTNIZVRjc1FBbFNFMHZGUDNOb3NaRlc1RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NUZDQi84ODBFNjM0MDIyQTcxMUVCQjQwNkNFN0NDNEY5QUUwMi82VkUzSGVUY3NR
QWxTRTB2RlAzTm9zWkZXNUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQ7G/kyrksZDS5m+RPNTGsAe5hrwa8P1bia0HJ4RZ00TfB5Wle0es727Btbrn
dRKTnJG1vWtUDq3jrg15hs/XQCrJWxqwVipQYB6/tvTftAgR7JC4HbH0/siQqzIL
tKAqYf8JKrQlRLBeL4RA9X5t/gnjAlRqzp08U0tSFunZiLaW8IKFNc1gbZY77SpJ
x8ONTTneVjTCHmuPf3tOeX4E58HUxWc6/hg/lzKfKAWZmyxDJ1vhMym3ZxW6h7Lp
xABam3klASFaPo0byU9dqyxu3yFd0ZE4PrgK3bES6U+8qHo66X5uxKIqDHW3XGUb
Kunp1HY+zc8C7VlOXr7zwP0LKQ==
-----END CERTIFICATE-----
Generated at Mon Oct 5 03:57:15 2026 by rpki-client