Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft
File:                     H2-6P798TnUQgNZ0Pi_OANKU20E.mft (raw, json)
Hash identifier:          /vSwlQ97svOoeJyAh1peWaRqHXRwnRklA+K1wvwtnpg=
Subject key identifier:   83:14:37:14:5D:34:DB:51:5E:7D:EE:B8:82:5C:F9:5F:F4:EC:E5:8B
Authority key identifier: 1F:6F:BA:3F:BF:7C:4E:75:10:80:D6:74:3E:2F:CE:00:D2:94:DB:41
Certificate issuer:       /CN=A91A6204/serialNumber=1F6FBA3FBF7C4E751080D6743E2FCE00D294DB41
Certificate serial:       061C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft
Manifest number:          0608
Signing time:             Mon 26 Oct 2026 22:47:51 +0000
Manifest this update:     Mon 26 Oct 2026 22:47:50 +0000
Manifest next update:     Mon 02 Nov 2026 22:47:50 +0000
Files and hashes:         1: H2-6P798TnUQgNZ0Pi_OANKU20E.crl (hash: GDRz2r89n/0LnKJ9yKa2gnyqBB2ZSA5tNicvT8nwIPA=)
                          2: F8F09AC071BC11EF98EE3652C4F9AE02.roa (hash: fbXhww+DkubFG5G2afR5YBYBfXiNfq5+2wIEct/OQ3c=)
                          3: 81A9AA2A30A011EC9613A82FC4F9AE02.roa (hash: PRALUoBFqhC2JvgAv3jlaF5QZjAnuYEo4AE90TsAThE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.crl
                          rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 22:47:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1564 (0x61c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6204, serialNumber=1F6FBA3FBF7C4E751080D6743E2FCE00D294DB41
        Validity
            Not Before: Oct 26 22:47:50 2026 GMT
            Not After : Nov  2 22:47:50 2026 GMT
        Subject: CN=6adfd897-38cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3e:c3:9c:29:83:89:ef:7c:ff:5f:22:23:20:
                    0b:fb:fc:dd:58:e4:ba:94:bb:97:ed:38:fb:51:a1:
                    4c:f4:30:d0:96:e5:b4:22:8a:a9:81:16:28:76:c1:
                    77:58:4b:c1:46:c0:06:a3:89:63:96:ba:46:4d:5c:
                    18:41:f6:58:64:aa:2c:82:f2:ea:0c:55:d5:aa:cb:
                    c2:3e:89:ba:f8:a9:f3:51:ec:00:1f:5b:68:6f:91:
                    1d:8c:73:13:3d:4a:70:23:5f:93:29:71:cc:4c:b8:
                    34:68:6e:3a:3f:4b:d0:bd:6f:3e:0e:f0:67:61:ab:
                    6f:0b:ad:19:7d:08:b1:f9:9e:d6:73:8b:09:49:11:
                    bf:46:9b:be:3f:8e:c1:05:7c:78:a8:8a:e0:a4:2d:
                    0d:25:fc:76:1f:b9:50:f5:b0:6a:a0:3e:e8:e7:45:
                    ad:6b:44:b9:51:be:7b:60:12:bb:9c:ed:f9:1f:aa:
                    15:20:1d:bf:02:99:5c:22:40:e4:4d:cf:c9:8c:73:
                    21:b5:69:76:38:53:dc:86:21:d5:67:89:a7:14:76:
                    b6:be:77:39:cd:ec:2a:d7:38:a9:ca:31:91:d1:44:
                    67:85:7c:fc:13:e4:d6:ed:af:79:b8:8b:fb:5a:c0:
                    cc:10:03:75:d7:14:6f:96:b8:58:fe:68:25:b8:a8:
                    74:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:14:37:14:5D:34:DB:51:5E:7D:EE:B8:82:5C:F9:5F:F4:EC:E5:8B
            X509v3 Authority Key Identifier:
                keyid:1F:6F:BA:3F:BF:7C:4E:75:10:80:D6:74:3E:2F:CE:00:D2:94:DB:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:72:c7:70:b4:c0:70:80:1b:0f:67:f8:ca:ea:85:3c:9a:c8:
         ce:9b:41:27:64:29:a6:42:7f:b9:e2:b7:82:b7:f8:2d:37:44:
         b3:32:6b:cf:d9:ea:72:c2:7b:44:41:08:44:6f:b3:71:50:db:
         e2:35:45:36:3e:a0:a0:c7:d9:77:47:35:fd:e1:9e:61:d4:8e:
         ea:62:01:07:c4:6f:cb:ae:a3:42:ca:45:84:74:ee:e9:57:35:
         65:24:48:b5:3a:f1:bb:ac:07:15:6f:81:aa:91:1f:ae:6b:10:
         b7:0c:f3:b5:6d:a8:3b:e2:ff:35:56:de:3f:e3:3a:18:99:39:
         cb:c4:bf:ed:7c:83:9a:a4:2f:b4:a9:c6:3a:da:c3:35:8e:b3:
         72:a3:91:7b:38:61:c3:bb:28:14:2b:b2:34:fe:7a:86:bd:3e:
         7c:6e:18:64:8e:37:c6:d1:c6:46:32:d1:61:60:5a:38:7b:22:
         29:98:7c:51:f0:c7:de:d1:ab:0a:01:00:15:6a:73:ed:0d:28:
         18:e2:48:17:5e:cd:2c:19:b9:8b:fb:e3:d0:21:bf:c1:90:8a:
         52:f8:9f:f1:d9:9f:f1:8d:e0:7f:dd:d3:f4:65:6d:60:d2:a8:
         a3:2e:e2:06:2b:73:f7:3b:dd:7e:fa:5a:3f:2d:dd:cc:7d:4b:
         17:d5:19:fb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTYyMDQxMTAvBgNVBAUTKDFGNkZCQTNGQkY3QzRFNzUxMDgwRDY3NDNFMkZDRTAw
RDI5NERCNDEwHhcNMjYxMDI2MjI0NzUwWhcNMjYxMTAyMjI0NzUwWjAYMRYwFAYD
VQQDEw02YWRmZDg5Ny0zOGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzz7DnCmDie98/18iIyAL+/zdWOS6lLuX7Tj7UaFM9DDQluW0IoqpgRYodsF3
WEvBRsAGo4ljlrpGTVwYQfZYZKosgvLqDFXVqsvCPom6+KnzUewAH1tob5EdjHMT
PUpwI1+TKXHMTLg0aG46P0vQvW8+DvBnYatvC60ZfQix+Z7Wc4sJSRG/Rpu+P47B
BXx4qIrgpC0NJfx2H7lQ9bBqoD7o50Wta0S5Ub57YBK7nO35H6oVIB2/AplcIkDk
Tc/JjHMhtWl2OFPchiHVZ4mnFHa2vnc5zewq1zipyjGR0URnhXz8E+TW7a95uIv7
WsDMEAN11xRvlrhY/mgluKh0uQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIMUNxRd
NNtRXn3uuIJc+V/07OWLMB8GA1UdIwQYMBaAFB9vuj+/fE51EIDWdD4vzgDSlNtB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjIwNC84MzBBM0EyODEy
MDYxMUVDQUVDRUQ0NzdDNEY5QUUwMi9IMi02UDc5OFRuVVFnTlowUGlfT0FOS1Uy
MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0gyLTZQNzk4VG5VUWdOWjBQaV9PQU5LVTIwRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NjIwNC84MzBBM0EyODEyMDYxMUVDQUVDRUQ0NzdDNEY5QUUwMi9IMi02UDc5OFRu
VVFnTlowUGlfT0FOS1UyMEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYXLHcLTAcIAbD2f4yuqFPJrIzptBJ2QppkJ/ueK3grf4LTdEszJrz9nqcsJ7
REEIRG+zcVDb4jVFNj6goMfZd0c1/eGeYdSO6mIBB8Rvy66jQspFhHTu6Vc1ZSRI
tTrxu6wHFW+BqpEfrmsQtwzztW2oO+L/NVbeP+M6GJk5y8S/7XyDmqQvtKnGOtrD
NY6zcqORezhhw7soFCuyNP56hr0+fG4YZI43xtHGRjLRYWBaOHsiKZh8UfDH3tGr
CgEAFWpz7Q0oGOJIF17NLBm5i/vj0CG/wZCKUvif8dmf8Y3gf93T9GVtYNKooy7i
Bitz9zvdfvpaPy3dzH1LF9UZ+w==
-----END CERTIFICATE-----
Generated at Wed Oct 28 00:43:28 2026 by rpki-client