Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BE2F6/0CA205EE5E5C11F1B6BAA0800C7AAC22/a6spHHXSmuNRQl8zWSdvmWpHY4o.mft
File:                     a6spHHXSmuNRQl8zWSdvmWpHY4o.mft (raw, json)
Hash identifier:          0nm/rHrcdRlWbcAslwHDn7EkWWRmI8zmQd620NnC4fQ=
Subject key identifier:   BA:2F:FD:41:7A:7D:92:61:5A:AF:C8:64:B1:49:1A:A4:66:9E:8A:FC
Authority key identifier: 6B:AB:29:1C:75:D2:9A:E3:51:42:5F:33:59:27:6F:99:6A:47:63:8A
Certificate issuer:       /CN=A91BE2F6/serialNumber=6BAB291C75D29AE351425F3359276F996A47638A
Certificate serial:       35
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a6spHHXSmuNRQl8zWSdvmWpHY4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE2F6/0CA205EE5E5C11F1B6BAA0800C7AAC22/a6spHHXSmuNRQl8zWSdvmWpHY4o.mft
Manifest number:          34
Signing time:             Fri 11 Sep 2026 08:42:00 +0000
Manifest this update:     Fri 11 Sep 2026 08:42:00 +0000
Manifest next update:     Fri 18 Sep 2026 08:42:00 +0000
Files and hashes:         1: a6spHHXSmuNRQl8zWSdvmWpHY4o.crl (hash: ORs4NFvVZm0m3UU/6GwSPag9wMF3rONf7iseZZp13+c=)
                          2: 70FBEBF45E5C11F18CFD5F700D7AAC22.roa (hash: i0tj7RMQgOcOuyqDW6PhqjVGODM75vtYFvLbA/6Ejjc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE2F6/0CA205EE5E5C11F1B6BAA0800C7AAC22/a6spHHXSmuNRQl8zWSdvmWpHY4o.crl
                          rsync://rpki.apnic.net/member_repository/A91BE2F6/0CA205EE5E5C11F1B6BAA0800C7AAC22/a6spHHXSmuNRQl8zWSdvmWpHY4o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a6spHHXSmuNRQl8zWSdvmWpHY4o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 06:44:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE2F6, serialNumber=6BAB291C75D29AE351425F3359276F996A47638A
        Validity
            Not Before: Sep 11 08:42:00 2026 GMT
            Not After : Sep 18 08:42:00 2026 GMT
        Subject: CN=6aa3bed8-9f7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3f:0e:ba:d6:53:fc:d3:21:81:3a:1c:e7:ae:
                    c3:66:70:0e:f7:27:90:d2:5d:f3:d8:1a:9b:56:b4:
                    c5:7e:bb:bb:ce:9f:c7:66:8a:80:0c:c8:83:34:90:
                    65:5a:51:99:0f:af:17:a5:c6:96:ca:8d:96:d9:7d:
                    f2:66:f2:b6:77:75:12:df:71:85:1e:86:cc:73:60:
                    60:02:09:13:0e:cc:c1:b7:0f:ea:61:17:4b:72:c8:
                    00:c7:30:e8:4c:47:d0:23:73:05:35:05:b5:9c:14:
                    9f:15:b9:68:7e:9f:b1:07:5f:e7:1d:07:76:df:2c:
                    b6:12:36:be:c6:e3:93:1a:9d:9b:a4:04:ad:e9:a6:
                    2c:5b:50:89:32:82:d6:9e:36:ef:37:23:4c:01:5a:
                    8a:7a:22:b9:7e:b7:86:ee:64:f5:d1:8b:01:57:4a:
                    a7:46:ed:fc:d8:36:11:7b:2a:84:92:85:2f:74:60:
                    07:e4:e2:cf:60:4a:b1:ed:96:4e:94:0f:9b:9d:b4:
                    f0:e7:a9:8b:35:73:54:07:28:4d:44:f8:5a:98:4e:
                    b2:ec:d1:f3:dc:09:50:87:e8:bf:ba:34:bc:f8:35:
                    b0:10:3b:de:9a:e0:85:c2:ef:f8:a9:48:3f:ef:49:
                    09:f3:6e:8f:b3:44:65:30:81:6c:c8:90:1b:a9:55:
                    c4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:2F:FD:41:7A:7D:92:61:5A:AF:C8:64:B1:49:1A:A4:66:9E:8A:FC
            X509v3 Authority Key Identifier:
                keyid:6B:AB:29:1C:75:D2:9A:E3:51:42:5F:33:59:27:6F:99:6A:47:63:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE2F6/0CA205EE5E5C11F1B6BAA0800C7AAC22/a6spHHXSmuNRQl8zWSdvmWpHY4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a6spHHXSmuNRQl8zWSdvmWpHY4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE2F6/0CA205EE5E5C11F1B6BAA0800C7AAC22/a6spHHXSmuNRQl8zWSdvmWpHY4o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:1f:ac:15:20:3a:24:66:75:42:94:16:4b:83:bb:21:9b:2c:
         1a:ee:b6:66:c9:f1:36:3e:48:34:bd:6b:99:ea:05:08:fb:14:
         dc:4d:13:fc:98:d3:10:e7:45:b7:3c:5a:ea:35:78:13:ea:eb:
         72:71:70:9d:97:b4:66:21:4d:fc:72:ed:75:df:0f:f7:47:e0:
         1c:85:16:55:59:81:ec:fa:c0:d6:52:27:15:e3:21:70:23:03:
         39:41:ff:33:37:07:ea:bf:b8:c5:7c:43:02:20:f7:a0:6a:e9:
         8f:ed:82:ac:03:e0:93:6d:e8:c8:e7:ee:26:33:ea:8a:f3:47:
         60:9b:02:79:84:b4:c5:e1:6f:87:bc:c6:02:81:9b:e9:88:21:
         96:7e:b2:82:9f:35:f9:d7:d7:9d:2c:04:5a:cb:97:9c:a2:33:
         6e:bf:54:ef:65:fa:51:73:b5:69:95:00:0b:f6:77:12:3d:dd:
         da:9c:df:7c:ef:36:67:53:d1:5a:45:50:5f:3b:3c:96:03:f8:
         d9:e9:67:d7:19:68:57:50:d5:9a:76:4f:8a:ae:d9:ac:f8:14:
         e7:42:7a:ee:ba:54:11:51:48:eb:d9:7c:21:66:87:0d:65:c1:
         c4:23:17:eb:cb:26:b0:30:5c:73:b9:00:31:06:9e:2c:27:e1:
         62:95:e1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:27:09 2026 by rpki-client