Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft
File:                     6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft (raw, json)
Hash identifier:          ASmn7FsrJ4yAbY13jMfOvN0jwbPaxZUNWiRipGctLk0=
Subject key identifier:   C7:94:A4:1D:14:10:25:D2:0C:3E:32:20:7B:B5:95:50:17:F1:6D:7C
Authority key identifier: E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5
Certificate issuer:       /CN=A91A2359/serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5
Certificate serial:       0C6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft
Manifest number:          0C22
Signing time:             Fri 02 Oct 2026 19:06:12 +0000
Manifest this update:     Fri 02 Oct 2026 19:06:11 +0000
Manifest next update:     Fri 09 Oct 2026 19:06:11 +0000
Files and hashes:         1: 6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl (hash: rE65XfyPIPm3rYLSB9PxwhwU6GOD2s2/eXET4SKWFOo=)
                          2: D5955AB6975511EF94255C5EC4F9AE02.roa (hash: JVd2FG3UkH9H5B617YmFMPIf/lKVb8TVBIpvLq/w07A=)
                          3: 6DADCA1C2F1C11EDA3E29B09C4F9AE02.roa (hash: IxMPHfcO4FMJHXeamW9Ntxik/OpowXLrenedL/WZ9v0=)
                          4: 46D0A6A8BDDA11F086EB9613C4F9AE02.roa (hash: huORanbeeLTQyC8vfHVhR2qi15Mp9g0ge9RJFONvZrM=)
                          5: 1FCC64AC719511F090F7F83BC4F9AE02.roa (hash: HDz+1GzuPpUTidanGB4G4ykVBkwdTS/Q6fpag6ihvfc=)
                          6: 6B3307CE4D8411EFBAD45B86C4F9AE02.roa (hash: zhvQ2OwFKuDGlesdZErwFsvm54e1zw6iRxJQhNg3+u4=)
                          7: 65AE18E08D7711F1A08E75473311F970.roa (hash: t46Iad5IKDgkUQWsQkVOGeZs8TaWKbpSe+5Yv00pD6Q=)
                          8: 32929FB4A5CB11F192F6B2263211F970.roa (hash: YZPUFo5668pvFwJOgc3nMlRYKTXXaKkJAI9+Hif3WJM=)
                          9: 9838FE1A8D7711F1A55DF04E3311F970.roa (hash: T+KRQV/dB8Hd2xlGQ+yU1W0dlIAwzoKR9V8LIy0HV4c=)
                          10: 33594416A5CB11F192F6B2263211F970.roa (hash: uLBBKTV4jICzQ/mWQ1LKIOawh72/Drbo5Q8arRx4JAc=)
                          11: 648B3E5C8D7711F1A08E75473311F970.roa (hash: KSLF+3Cp6b50j3nKRsuJ2U0pgtXSQWOvxY7L/NsvFDA=)
                          12: 6386643C8D7711F1A08E75473311F970.roa (hash: rY2ImM00O8nNXsqAOk5TK3NiPhHTAKt2HMSL9mEi0LM=)
                          13: BF298F4A8FBF11F1A58CF95C6811F970.roa (hash: TXnS1wgMzdsHK//NBv2o4dJxtrP2qDhE6dk5MgyfgUk=)
                          14: D3A76C6AA79511F1804DFF334711F970.roa (hash: 1lhzRowk8kpqPzQe8llaZ3GiNx0/OiKBfZbBNsojsKY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl
                          rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 19:06:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3178 (0xc6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2359, serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5
        Validity
            Not Before: Oct  2 19:06:11 2026 GMT
            Not After : Oct  9 19:06:11 2026 GMT
        Subject: CN=6ac000a3-1074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6a:12:72:76:ac:34:fc:54:22:c0:67:70:af:
                    9d:87:35:30:a8:b4:88:ee:ca:be:a8:2a:1d:53:3b:
                    a3:6a:6b:a8:7b:33:3f:6c:66:a1:77:68:04:28:23:
                    6f:29:eb:97:a9:04:91:7c:86:b4:21:d1:2d:f1:24:
                    a6:d0:27:5d:6c:65:54:e5:61:54:ac:d8:d4:a6:d2:
                    b7:39:87:a4:36:be:65:6c:c7:40:e5:87:e1:25:59:
                    1f:86:ee:c4:87:5c:06:67:23:e2:ab:62:d8:64:99:
                    c5:36:f3:27:64:e7:bd:1b:91:ff:8f:cc:c6:b8:73:
                    b3:e9:d8:7e:16:e5:15:f2:56:e0:b4:30:63:5b:04:
                    7f:20:ab:c3:bb:1c:6b:3b:8d:05:93:24:cf:85:22:
                    75:85:95:9c:ef:fb:53:f2:22:95:ae:61:e5:d1:6d:
                    8a:b4:e6:b7:b5:7b:10:af:9d:29:7e:55:e9:82:26:
                    7c:d4:91:42:59:00:91:0e:f1:a6:df:3c:d7:91:e7:
                    b1:91:96:a9:47:ae:e8:09:89:0a:6f:90:87:12:f2:
                    97:30:46:03:0a:86:49:e9:44:fa:73:44:95:c6:ee:
                    d0:66:89:30:04:7d:16:d7:f2:97:4d:3b:7f:e4:2f:
                    e5:5b:2b:47:08:83:ad:ce:9f:98:81:00:6e:fc:c2:
                    15:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:94:A4:1D:14:10:25:D2:0C:3E:32:20:7B:B5:95:50:17:F1:6D:7C
            X509v3 Authority Key Identifier:
                keyid:E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:26:59:c9:98:a5:03:3d:b5:b3:97:e7:14:a5:7f:b4:11:a9:
         5a:2c:c9:13:5a:e3:4d:89:e9:bb:fe:11:96:a7:f6:f1:a3:9a:
         00:31:0f:42:d6:18:80:62:4e:6d:24:b8:4f:71:16:46:f7:17:
         c6:46:73:bc:b9:94:6e:3f:2c:48:10:68:a5:75:ca:b7:5c:c8:
         b4:2b:44:e5:16:07:cd:e2:96:7b:14:88:d7:df:e2:5e:a7:d2:
         fe:f3:be:0d:e0:ca:5a:32:cd:62:9e:c6:a2:87:91:89:9b:d5:
         8b:21:b9:f5:95:11:1e:c4:6e:b3:f2:8e:0f:45:d8:e7:25:1c:
         83:d3:71:61:d9:aa:db:b1:f6:95:f8:0d:83:32:b6:4c:2d:33:
         62:ef:cf:64:fb:6c:8f:42:6e:22:2b:b1:01:44:27:47:c5:98:
         05:3c:f8:55:8a:7c:bd:f5:33:00:40:ac:2d:9f:e4:6f:9f:76:
         03:3f:1e:c8:8b:5a:7f:58:23:ef:98:8b:10:e2:6f:fa:5a:24:
         52:dd:2e:6f:a5:34:e0:9f:a7:e0:19:c6:d3:2c:94:39:80:8b:
         d2:b1:69:7c:6b:7a:b6:ad:cb:9e:43:0e:71:e7:ec:99:dd:64:
         fc:63:85:a3:df:02:15:c0:e2:b7:f5:4b:fc:a2:cf:0e:46:e1:
         d3:e6:a1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 12:12:20 2026 by rpki-client