Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.mft
File:                     C6xCmG6avbfO4s37Kp_o1tAqq1w.mft (raw, json)
Hash identifier:          ZZwDWt008+fkt0bdH4vRQBFDt3CNlbX7PUGt9bE6QD8=
Subject key identifier:   2F:E0:1B:F4:68:49:B6:A5:EE:56:83:03:94:89:6A:80:FA:9A:0D:7B
Authority key identifier: 0B:AC:42:98:6E:9A:BD:B7:CE:E2:CD:FB:2A:9F:E8:D6:D0:2A:AB:5C
Certificate issuer:       /CN=A91975CC/serialNumber=0BAC42986E9ABDB7CEE2CDFB2A9FE8D6D02AAB5C
Certificate serial:       04D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6xCmG6avbfO4s37Kp_o1tAqq1w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.mft
Manifest number:          04A1
Signing time:             Tue 27 Oct 2026 01:56:57 +0000
Manifest this update:     Tue 27 Oct 2026 01:56:56 +0000
Manifest next update:     Tue 03 Nov 2026 01:56:56 +0000
Files and hashes:         1: C6xCmG6avbfO4s37Kp_o1tAqq1w.crl (hash: Ph7d+2QfGZz+d6unzMMEVPCkceTnGI/Yf/incDVJCyw=)
                          2: 1CF68346F0BF11EEA1A0B559C4F9AE02.roa (hash: bDXcTdd3+KI00Tu5QIah+xvRBUeXyNYVufxWd0r1cSs=)
                          3: 6JggnNBEBmW0NOOpT1kmMLSTxlc.asa (hash: vWJdxlf9pMjz7v8i92m43PW1g6SNyLUB/b+VOBjlBAw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.crl
                          rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6xCmG6avbfO4s37Kp_o1tAqq1w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 01:56:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1234 (0x4d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91975CC, serialNumber=0BAC42986E9ABDB7CEE2CDFB2A9FE8D6D02AAB5C
        Validity
            Not Before: Oct 27 01:56:56 2026 GMT
            Not After : Nov  3 01:56:56 2026 GMT
        Subject: CN=6ae004e8-65ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:34:47:e5:ae:7d:04:fc:b8:be:82:19:45:e9:
                    32:f4:08:49:f2:d4:d1:d9:5d:e1:43:52:b3:95:7c:
                    35:5a:9f:97:b1:75:83:d6:10:72:7a:0d:b9:61:d5:
                    2e:85:5e:77:1c:ab:0f:63:ba:0e:5a:ab:73:59:e6:
                    be:1f:fb:6c:8c:6a:51:e7:02:f6:1d:81:90:d2:a0:
                    f8:a3:b3:db:ed:c2:8b:c8:26:0c:38:d0:a4:bb:dc:
                    a4:7d:05:1d:90:86:a4:4d:98:7c:df:62:8b:a3:2e:
                    1d:6c:56:74:c8:66:af:e2:cb:39:ba:37:4c:c8:99:
                    b3:e1:b5:56:83:ab:9f:a3:23:3c:b5:ee:e7:21:ee:
                    a9:93:4f:db:cc:9a:e1:23:2a:4a:ce:ce:14:61:84:
                    a9:40:4a:a1:8b:a0:41:7e:32:d0:8a:cb:86:76:e3:
                    a0:4a:10:5f:3d:11:86:39:c8:36:73:bb:fe:55:66:
                    ce:72:ae:e9:c4:25:7f:9b:3f:3f:60:e2:12:1c:09:
                    06:d6:83:a7:ed:01:42:e1:20:3f:26:e7:81:d0:1b:
                    01:af:12:91:e0:18:c9:7c:6d:02:3a:60:1a:2e:56:
                    e6:bd:c1:81:77:a0:fe:54:2c:22:75:04:1d:5e:ec:
                    2e:cd:7e:81:17:c4:6a:3e:b1:f2:f7:a0:e5:fc:f1:
                    5c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E0:1B:F4:68:49:B6:A5:EE:56:83:03:94:89:6A:80:FA:9A:0D:7B
            X509v3 Authority Key Identifier:
                keyid:0B:AC:42:98:6E:9A:BD:B7:CE:E2:CD:FB:2A:9F:E8:D6:D0:2A:AB:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6xCmG6avbfO4s37Kp_o1tAqq1w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:b5:fe:95:f8:c0:da:95:b1:b7:c6:12:fe:94:6e:81:a8:6b:
         3a:8a:8a:67:f9:5b:c7:64:1d:a0:98:d2:75:ea:8e:9e:46:5b:
         db:88:3c:a6:8a:50:c7:fb:9f:68:40:04:65:fa:e5:33:90:79:
         fd:33:5d:88:21:1b:60:11:7a:f3:d0:48:ce:0a:a8:61:74:09:
         bf:0e:43:79:f9:fd:18:01:36:61:db:8f:c1:22:3d:94:9d:ed:
         ae:86:2a:74:1b:67:c0:a5:7b:cf:c0:31:ee:db:06:2d:ef:8a:
         0f:f2:9b:8a:44:a1:8e:fb:3b:ef:5d:aa:81:05:3c:ae:dd:82:
         a2:d6:01:c8:e6:c4:9d:1b:4a:bf:5c:27:3b:98:59:39:98:22:
         55:65:be:3a:a4:c8:84:36:3a:87:c0:e2:16:2c:76:e2:32:c6:
         d1:dc:fe:75:05:f5:5f:a9:84:e3:13:85:66:a4:55:88:47:80:
         7e:6f:ad:6a:72:50:40:a1:ec:ed:4c:08:23:47:ce:c3:b9:a0:
         e1:e6:e1:47:0c:65:50:5a:a9:34:f9:b1:6f:51:b9:f5:48:53:
         f5:72:f4:41:40:be:f8:5d:bd:35:db:b8:39:b8:a7:ca:cd:42:
         2b:76:2c:9f:d9:22:5b:fc:08:e0:e9:a1:f9:6d:b3:3c:5c:af:
         c7:ba:bc:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:53:44 2026 by rpki-client