Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC6B1/10C0F700088C11F1BCB153E70F3D8C67/g6-zMZG-E5vEQdOdvyBdQrSXLUA.mft
File:                     g6-zMZG-E5vEQdOdvyBdQrSXLUA.mft (raw, json)
Hash identifier:          Lt2714CCzr+/8w7qKY4V4Lp+ljH73ogTGuFdmcpxWqQ=
Subject key identifier:   25:01:9C:3A:F5:4C:3E:88:5A:D5:75:D4:19:82:8A:F2:CB:99:BD:6F
Authority key identifier: 83:AF:B3:31:91:BE:13:9B:C4:41:D3:9D:BF:20:5D:42:B4:97:2D:40
Certificate issuer:       /CN=A91AC6B1/serialNumber=83AFB33191BE139BC441D39DBF205D42B4972D40
Certificate serial:       8D
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g6-zMZG-E5vEQdOdvyBdQrSXLUA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC6B1/10C0F700088C11F1BCB153E70F3D8C67/g6-zMZG-E5vEQdOdvyBdQrSXLUA.mft
Manifest number:          89
Signing time:             Tue 27 Oct 2026 07:58:00 +0000
Manifest this update:     Tue 27 Oct 2026 07:57:59 +0000
Manifest next update:     Tue 03 Nov 2026 07:57:59 +0000
Files and hashes:         1: g6-zMZG-E5vEQdOdvyBdQrSXLUA.crl (hash: dhLDfsHpHKw3ccz6RCs919a+OSPusdkApsZHPs0vni8=)
                          2: C05CEE863EE111F19719A8BCB6833773.roa (hash: OLfPReHDiOpxBPvPtdR4jqtQG++wb9xUMUx9+0q63xw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC6B1/10C0F700088C11F1BCB153E70F3D8C67/g6-zMZG-E5vEQdOdvyBdQrSXLUA.crl
                          rsync://rpki.apnic.net/member_repository/A91AC6B1/10C0F700088C11F1BCB153E70F3D8C67/g6-zMZG-E5vEQdOdvyBdQrSXLUA.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g6-zMZG-E5vEQdOdvyBdQrSXLUA.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 02:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC6B1, serialNumber=83AFB33191BE139BC441D39DBF205D42B4972D40
        Validity
            Not Before: Oct 27 07:57:59 2026 GMT
            Not After : Nov  3 07:57:59 2026 GMT
        Subject: CN=6ae05988-2a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0f:21:e8:e8:c1:22:82:70:23:4c:bd:53:2e:
                    1c:3a:d1:e1:ab:81:ed:3f:90:28:bc:9f:f4:9b:79:
                    2e:59:13:15:13:c0:6a:fc:36:4c:5e:96:01:76:e5:
                    89:04:cc:3a:e7:f5:c9:3f:c6:82:49:e1:6b:96:52:
                    b5:bc:7b:60:68:27:f8:42:24:65:5f:2f:e3:0e:f9:
                    fc:81:a0:ba:81:9a:30:40:d4:3d:cd:f2:ea:c3:1f:
                    a4:2c:be:ea:99:07:aa:61:10:0d:31:74:42:57:25:
                    3c:05:24:a0:b9:a8:ed:c1:20:58:a4:ba:88:f9:ee:
                    50:8e:38:2a:e1:35:a7:b5:5c:81:d4:59:05:ea:c0:
                    58:cd:e4:60:ca:d3:bc:f5:92:f7:c7:85:e8:75:bb:
                    71:4c:2b:19:35:30:96:ff:33:07:f2:32:df:c8:ac:
                    fe:33:5d:2f:4d:c0:10:b9:84:88:d0:77:2b:9a:99:
                    1d:2a:93:aa:57:45:17:b1:78:32:2f:3e:f8:ca:45:
                    6f:d1:d7:fe:dd:b5:3d:a9:2e:38:2f:e3:8f:5f:b7:
                    29:f9:79:ab:4f:49:e5:92:10:4f:96:b7:07:35:a4:
                    fd:39:74:0a:b6:b5:59:8a:cf:3b:cd:3f:af:b1:60:
                    e4:49:5e:ca:c8:4f:d2:28:cf:1b:6e:7c:94:3f:a5:
                    68:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:01:9C:3A:F5:4C:3E:88:5A:D5:75:D4:19:82:8A:F2:CB:99:BD:6F
            X509v3 Authority Key Identifier:
                keyid:83:AF:B3:31:91:BE:13:9B:C4:41:D3:9D:BF:20:5D:42:B4:97:2D:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC6B1/10C0F700088C11F1BCB153E70F3D8C67/g6-zMZG-E5vEQdOdvyBdQrSXLUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g6-zMZG-E5vEQdOdvyBdQrSXLUA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC6B1/10C0F700088C11F1BCB153E70F3D8C67/g6-zMZG-E5vEQdOdvyBdQrSXLUA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:18:1a:69:a0:28:da:e7:a7:05:9b:43:0b:39:85:8f:92:45:
         a3:e6:d5:71:b7:b1:ba:72:79:3c:62:cb:5a:6e:54:f6:c8:e3:
         3c:8b:d8:22:3a:16:2a:ac:fc:23:ae:b9:36:2a:c6:46:59:bd:
         37:27:99:7f:b1:77:9d:7f:62:c5:0b:3c:73:de:18:af:bb:8d:
         df:41:f1:c2:25:79:d7:12:27:c8:9a:51:cd:dc:05:b2:51:ac:
         d2:6d:39:86:df:1c:68:07:19:e1:b7:e2:35:01:33:e0:5a:e3:
         d7:79:e2:06:d3:f0:cb:da:ac:b6:35:05:c6:f9:c6:e8:6f:4d:
         be:44:bf:af:34:2a:59:c3:bb:86:85:10:67:99:7e:ce:51:ca:
         ac:e1:5d:7a:14:db:75:5b:c0:10:4d:22:a2:e3:50:15:13:4e:
         0f:d0:b0:ee:1c:3f:8c:2d:8b:0d:28:af:ac:c0:97:fa:2c:c5:
         0d:4b:1d:8e:21:68:54:97:cf:38:bb:65:f1:83:ce:d1:68:c9:
         7f:c4:c0:a1:52:f9:d3:eb:85:07:ca:d6:82:c1:af:d2:65:ab:
         16:de:a2:64:f9:ca:b1:6d:0a:80:3f:ef:95:fa:5d:67:a9:1d:
         dc:27:af:a5:bc:89:3c:6c:b5:16:61:68:30:ae:ce:c3:7c:06:
         cc:0c:38:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:01:29 2026 by rpki-client