Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/z6g6HLFaT2Y_z9bITI4K00wOBnM.mft
File:                     z6g6HLFaT2Y_z9bITI4K00wOBnM.mft (raw, json)
Hash identifier:          I2Fsew2XNyvTEt7MGIcwYdm/f6n37Z4aR66FEKUfblw=
Subject key identifier:   47:E5:2C:51:DC:26:7E:38:87:1C:23:60:16:DC:92:A4:38:F4:B6:24
Authority key identifier: CF:A8:3A:1C:B1:5A:4F:66:3F:CF:D6:C8:4C:8E:0A:D3:4C:0E:06:73
Certificate issuer:       /CN=A91AA5F1/serialNumber=CFA83A1CB15A4F663FCFD6C84C8E0AD34C0E0673
Certificate serial:       BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z6g6HLFaT2Y_z9bITI4K00wOBnM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/z6g6HLFaT2Y_z9bITI4K00wOBnM.mft
Manifest number:          B9
Signing time:             Mon 05 Oct 2026 07:22:13 +0000
Manifest this update:     Mon 05 Oct 2026 07:22:12 +0000
Manifest next update:     Mon 12 Oct 2026 07:22:12 +0000
Files and hashes:         1: z6g6HLFaT2Y_z9bITI4K00wOBnM.crl (hash: k2bp1zhBq3JO3Is2VuMuYnnHg1dy4yHP0QjthgXtang=)
                          2: C56E767CA89811F08959A364C4F9AE02.roa (hash: 8W1mlOj43PnUJ6ZPQPHudJV203DHrpwRoDmZzuJOCVU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/z6g6HLFaT2Y_z9bITI4K00wOBnM.crl
                          rsync://rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/z6g6HLFaT2Y_z9bITI4K00wOBnM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z6g6HLFaT2Y_z9bITI4K00wOBnM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 07:22:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA5F1, serialNumber=CFA83A1CB15A4F663FCFD6C84C8E0AD34C0E0673
        Validity
            Not Before: Oct  5 07:22:12 2026 GMT
            Not After : Oct 12 07:22:12 2026 GMT
        Subject: CN=6ac35025-c3ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:51:d8:18:dd:dc:73:c0:89:6c:a9:ec:9e:c5:
                    17:bb:c9:4b:23:e6:14:65:00:00:45:ef:94:df:17:
                    ae:23:af:60:be:12:16:40:93:30:e2:ee:8e:ca:15:
                    8b:a9:09:d6:1c:27:39:75:6c:40:5b:9c:9a:8c:77:
                    8f:d9:76:97:07:3b:aa:fc:a2:04:c8:6d:fe:e2:71:
                    01:65:f1:2e:2d:82:63:a5:25:c0:f2:01:fe:a9:4f:
                    09:00:bc:60:73:99:3e:34:5f:c2:d8:fa:ef:80:9e:
                    b3:2c:a0:83:fe:26:cb:55:e0:54:91:7d:b3:44:ca:
                    fa:5e:0d:7b:3f:f6:85:c7:35:61:78:b6:71:75:d1:
                    1f:52:de:44:8c:30:a5:3f:9d:e7:06:cf:eb:79:63:
                    bc:0e:b0:e4:c0:15:2a:f7:b5:dc:fb:b9:8b:3d:f4:
                    49:3b:17:6d:33:0c:37:a1:95:3e:b0:f0:c3:a1:d1:
                    8b:5b:9c:9c:3a:4d:17:dc:8c:30:62:ea:7c:5f:4c:
                    ba:b3:8d:46:42:8e:4f:fe:77:43:4e:7c:89:9c:46:
                    b6:81:43:2d:6d:a0:91:9c:c0:53:10:a9:99:bc:fa:
                    bd:b9:2d:11:70:8f:d3:b7:74:f6:00:94:34:be:1e:
                    fb:2c:6a:81:01:45:97:0a:9d:a9:f1:09:af:ed:77:
                    6f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E5:2C:51:DC:26:7E:38:87:1C:23:60:16:DC:92:A4:38:F4:B6:24
            X509v3 Authority Key Identifier:
                keyid:CF:A8:3A:1C:B1:5A:4F:66:3F:CF:D6:C8:4C:8E:0A:D3:4C:0E:06:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/z6g6HLFaT2Y_z9bITI4K00wOBnM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z6g6HLFaT2Y_z9bITI4K00wOBnM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/z6g6HLFaT2Y_z9bITI4K00wOBnM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:ae:95:92:67:d5:fa:2d:28:6a:b5:9b:0c:3c:bf:47:b3:48:
         65:21:4d:a2:4f:94:c8:d7:e3:f2:1c:37:83:2c:30:97:27:03:
         5a:43:a2:fe:1f:bf:d8:7a:24:a1:73:5d:72:fc:a8:4c:a8:24:
         82:74:cf:61:1b:ea:97:48:c0:70:29:c6:b2:56:d2:35:93:da:
         5c:0e:ae:df:26:69:27:ea:e3:e0:ae:16:63:fe:48:c3:b3:e1:
         2e:74:00:43:72:6f:58:b2:21:7d:18:e7:f7:5e:d8:30:13:87:
         63:e2:95:cb:29:a1:99:58:46:74:6c:a6:55:3d:52:0c:ff:a9:
         2c:22:93:eb:23:27:53:70:28:86:16:74:98:f9:65:aa:52:ab:
         fc:a0:da:25:bd:b9:7c:a6:c8:54:63:a9:ab:d5:4f:8b:2d:03:
         69:64:fb:ce:5f:65:42:09:e5:50:09:0c:89:a1:49:51:83:14:
         70:c9:76:3f:b3:ea:9e:23:67:bf:e7:f3:f6:45:26:81:31:4b:
         eb:a0:75:af:82:ff:e0:54:f6:79:96:ec:aa:5f:38:64:70:60:
         16:5a:3d:db:0c:b9:26:b1:35:54:d9:0e:48:6d:76:fb:96:ef:
         e8:65:ac:a6:be:9a:31:b8:99:b9:3d:d1:28:01:5e:dc:3c:ac:
         4e:00:ef:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:52:36 2026 by rpki-client