Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.mft
File:                     6A9XgW64BohdxesewuGtVKL58t8.mft (raw, json)
Hash identifier:          6a8unrmgeRrKdQDoelQr+rbgrXlGJD8oz2gyodfEW6Y=
Subject key identifier:   85:29:45:11:5A:F0:24:11:82:BE:C8:23:C3:CA:60:48:5E:99:91:B0
Authority key identifier: E8:0F:57:81:6E:B8:06:88:5D:C5:EB:1E:C2:E1:AD:54:A2:F9:F2:DF
Certificate issuer:       /CN=A91ADA19/serialNumber=E80F57816EB806885DC5EB1EC2E1AD54A2F9F2DF
Certificate serial:       08FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6A9XgW64BohdxesewuGtVKL58t8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.mft
Manifest number:          08ED
Signing time:             Fri 02 Oct 2026 20:40:37 +0000
Manifest this update:     Fri 02 Oct 2026 20:40:36 +0000
Manifest next update:     Fri 09 Oct 2026 20:40:36 +0000
Files and hashes:         1: 6A9XgW64BohdxesewuGtVKL58t8.crl (hash: Qa1K/xDKIUgDXIlWNAzK3NV9rAWPNY3eb3zuw7Sz7eQ=)
                          2: F95379BE124411EB9E551E38C4F9AE02.roa (hash: o1XlLiC9ZxnJj/4+gcfGNEin223Ve+g1txQSl6xN5kE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.crl
                          rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6A9XgW64BohdxesewuGtVKL58t8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 20:40:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2302 (0x8fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADA19, serialNumber=E80F57816EB806885DC5EB1EC2E1AD54A2F9F2DF
        Validity
            Not Before: Oct  2 20:40:36 2026 GMT
            Not After : Oct  9 20:40:36 2026 GMT
        Subject: CN=6ac016c4-b5d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c9:ce:ea:d6:5f:67:7d:8e:ff:46:dd:75:be:
                    36:f5:f8:c8:ee:8c:89:d0:fe:58:b0:d0:52:36:71:
                    1c:10:fd:9e:8e:d5:36:80:b5:5c:54:4e:9a:c5:cb:
                    15:0e:c7:b9:cf:85:3c:a5:7d:1a:2c:f2:c7:d3:cd:
                    95:fa:6b:32:f4:e7:76:ba:c4:35:f7:a8:54:19:b6:
                    75:ae:72:69:bc:b5:28:97:58:ff:af:6a:7d:4d:bc:
                    fe:ff:d2:d2:34:78:3e:3e:03:ce:8c:a7:e4:79:33:
                    90:36:26:08:9c:b3:3d:3d:08:d1:92:72:40:2e:22:
                    1a:24:d6:92:e7:e9:03:a6:f5:fb:c6:76:19:22:af:
                    22:ff:1c:73:8a:c8:b7:75:cf:f7:07:23:40:2e:cf:
                    86:b9:61:ce:a9:46:be:68:67:c1:a9:96:66:6e:ff:
                    ed:97:07:4d:c0:6d:0f:73:8a:ad:c9:24:44:4f:b8:
                    98:7a:c0:74:ec:f5:b6:d1:d8:ed:fb:a6:13:6e:9d:
                    fe:c3:5e:62:99:9b:bc:43:28:6a:9c:d8:3a:35:c8:
                    e7:4a:ec:83:4d:0f:9e:1d:d9:8f:51:09:10:79:f8:
                    e2:0d:21:7d:2d:ba:96:5d:fa:46:2e:00:7e:bf:28:
                    0f:26:a7:93:1d:db:67:0f:88:16:84:4d:89:1b:0b:
                    eb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:29:45:11:5A:F0:24:11:82:BE:C8:23:C3:CA:60:48:5E:99:91:B0
            X509v3 Authority Key Identifier:
                keyid:E8:0F:57:81:6E:B8:06:88:5D:C5:EB:1E:C2:E1:AD:54:A2:F9:F2:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6A9XgW64BohdxesewuGtVKL58t8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:b5:25:34:62:9e:7e:6c:ac:81:3a:1a:00:1f:d6:94:e9:2a:
         c8:15:8c:5f:75:6a:00:1d:1e:18:be:74:33:91:b6:dd:f9:6d:
         31:88:d1:88:b5:06:fa:5a:68:64:68:48:2a:bc:9f:14:96:69:
         3a:46:6a:32:26:2b:4a:b2:79:5d:e8:94:3d:03:5f:87:84:ee:
         39:9f:94:60:9d:ca:5d:c5:4c:cb:f5:e3:ef:f7:93:99:69:9b:
         7e:ba:55:61:7b:01:7c:41:a1:9f:7d:76:38:24:ca:6b:4f:08:
         f7:61:da:75:45:32:44:50:9e:91:1b:a0:b6:d4:40:02:40:27:
         75:12:32:0b:64:4b:4b:1c:9b:88:06:78:18:fe:ab:7f:2a:37:
         84:8c:4d:f4:ff:aa:d1:24:f2:b1:67:c0:e5:62:e5:93:dc:9a:
         aa:70:aa:5e:c6:12:b5:11:94:b1:49:20:bf:3e:fd:c8:7d:a4:
         9d:2b:78:e8:c5:3b:f2:2b:32:e1:de:66:76:b8:f4:f2:f9:e2:
         ef:c9:35:9c:4c:38:1d:91:fb:3c:3d:12:f4:b3:99:2d:54:d2:
         4f:b4:8c:ae:a4:27:88:1a:53:7d:ec:a3:fb:5e:c4:9d:55:b3:
         18:a3:41:a0:d1:9b:d0:04:85:16:e6:16:b1:eb:b9:9c:6b:75:
         0a:2e:52:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:59:19 2026 by rpki-client