Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.mft
File:                     6HkDAXqx8GqctGqwIb0Lkhya-og.mft (raw, json)
Hash identifier:          r1n3sZG5HBZoAN8kM++XfJ/IhMnhIrHzr1OgOd4Ijko=
Subject key identifier:   70:C5:F7:7D:DF:4E:D1:17:BD:1B:61:E6:B7:56:65:AF:D3:AB:19:F4
Authority key identifier: E8:79:03:01:7A:B1:F0:6A:9C:B4:6A:B0:21:BD:0B:92:1C:9A:FA:88
Certificate issuer:       /CN=A91C49BA/serialNumber=E87903017AB1F06A9CB46AB021BD0B921C9AFA88
Certificate serial:       9B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6HkDAXqx8GqctGqwIb0Lkhya-og.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.mft
Manifest number:          99
Signing time:             Thu 03 Sep 2026 07:32:51 +0000
Manifest this update:     Thu 03 Sep 2026 07:32:50 +0000
Manifest next update:     Thu 10 Sep 2026 07:32:50 +0000
Files and hashes:         1: 6HkDAXqx8GqctGqwIb0Lkhya-og.crl (hash: V1RAqv0uuPU92VvWEhMe0LCodqx7nDTAVtvyQ3i2VA0=)
                          2: 72F530E2BEF611F08C939B16C4F9AE02.roa (hash: yhMTNzO+SsDCmy0S8wXFM6nSSpWZDvT6nvy+5GJLY5A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.crl
                          rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6HkDAXqx8GqctGqwIb0Lkhya-og.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 07:32:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C49BA, serialNumber=E87903017AB1F06A9CB46AB021BD0B921C9AFA88
        Validity
            Not Before: Sep  3 07:32:50 2026 GMT
            Not After : Sep 10 07:32:50 2026 GMT
        Subject: CN=6a9922a3-a63e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:82:b2:b0:a6:70:61:e8:be:21:5f:18:ec:a6:
                    a7:2e:18:61:91:46:ea:15:aa:97:4f:66:2a:17:2d:
                    bb:58:fc:ff:8a:9c:3a:23:fc:76:96:ac:22:39:3d:
                    c5:22:b1:86:a7:f7:6d:20:61:34:70:98:aa:07:36:
                    db:62:32:52:60:4f:a7:d6:ae:01:4c:0e:47:d6:b0:
                    e0:4f:1b:fb:13:47:db:44:00:10:5b:5e:83:68:b5:
                    ca:7d:f4:1a:2f:c5:db:13:bf:ff:0b:2f:51:ac:2e:
                    1b:10:f1:dc:1c:ff:78:6b:66:52:d9:37:95:a2:f9:
                    fd:a8:5b:70:89:a8:db:91:91:05:9f:69:b1:0a:f2:
                    d9:83:4e:0a:9e:7f:c7:ec:2a:d6:59:39:1c:24:e3:
                    29:05:db:02:8f:df:90:a2:58:df:ee:0d:76:2a:6f:
                    d9:17:35:cd:9f:73:18:e1:fc:b2:a6:90:23:dc:cd:
                    4d:da:b9:84:e0:91:89:97:4f:26:1a:04:8a:5b:ea:
                    1a:f1:5d:31:0f:05:2c:c5:f2:e1:15:32:8d:d8:f2:
                    2a:5f:57:16:ea:1c:1d:20:0f:0a:94:0b:14:c4:05:
                    93:5b:0a:02:27:87:ad:97:0c:49:6e:e8:50:d6:ae:
                    f1:01:2b:c6:a8:4c:01:7b:b5:74:b9:eb:82:63:c6:
                    d7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C5:F7:7D:DF:4E:D1:17:BD:1B:61:E6:B7:56:65:AF:D3:AB:19:F4
            X509v3 Authority Key Identifier:
                keyid:E8:79:03:01:7A:B1:F0:6A:9C:B4:6A:B0:21:BD:0B:92:1C:9A:FA:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6HkDAXqx8GqctGqwIb0Lkhya-og.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:ac:7b:c4:a0:37:fb:6d:26:1a:bf:e5:3f:8e:61:a5:58:07:
         a0:e6:c3:47:8c:75:32:2c:ff:bf:81:18:f3:54:97:35:69:29:
         42:20:84:0c:96:ea:08:d3:1f:c7:92:ae:5e:5b:d0:ab:17:12:
         65:32:7a:9d:84:12:1b:3c:96:c8:ab:06:f2:c8:5d:24:07:5c:
         e9:9f:7b:ec:44:94:9c:1f:dd:fe:44:74:fa:c9:2b:0f:c7:8d:
         ec:73:d1:d4:0d:14:23:35:4c:66:a9:1c:97:86:55:52:ff:de:
         e7:83:aa:29:84:7b:3a:08:bc:d2:76:4f:45:cd:6c:43:da:e3:
         5b:1d:ad:eb:f0:ec:5a:bc:b9:07:c9:a6:96:07:e7:16:79:c2:
         d8:9e:e1:a8:46:14:4d:12:ce:69:7f:5d:67:d4:fb:44:1f:b6:
         ee:7c:29:d1:3e:01:24:a2:e8:48:5d:33:2e:41:11:37:53:b4:
         15:c4:7f:82:4a:0a:19:16:00:c2:4b:a4:93:f0:bb:82:43:cf:
         5d:6a:7b:e8:74:b5:11:64:6c:ad:28:08:05:a7:43:f9:cb:44:
         89:75:22:a4:3c:89:3d:55:74:0c:27:fd:12:f7:1e:a9:a0:76:
         9d:e6:f4:c7:bf:38:fe:db:10:db:f0:24:37:95:66:5e:17:2e:
         07:e2:ea:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:47:41 2026 by rpki-client