Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.mft
File:                     6HkDAXqx8GqctGqwIb0Lkhya-og.mft (raw, json)
Hash identifier:          u9Z0jPRPpqCZQlpynz1SnvQ/RodFYiV7cRJAY+7xp7w=
Subject key identifier:   61:73:68:95:76:39:74:5E:FC:EA:FF:D7:99:76:6C:DF:29:FB:29:74
Authority key identifier: E8:79:03:01:7A:B1:F0:6A:9C:B4:6A:B0:21:BD:0B:92:1C:9A:FA:88
Certificate issuer:       /CN=A91C49BA/serialNumber=E87903017AB1F06A9CB46AB021BD0B921C9AFA88
Certificate serial:       B3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6HkDAXqx8GqctGqwIb0Lkhya-og.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.mft
Manifest number:          B1
Signing time:             Wed 21 Oct 2026 07:36:22 +0000
Manifest this update:     Wed 21 Oct 2026 07:36:21 +0000
Manifest next update:     Wed 28 Oct 2026 07:36:21 +0000
Files and hashes:         1: 6HkDAXqx8GqctGqwIb0Lkhya-og.crl (hash: N7TdZkJZ0RGCciPgD0ggXWh32CKbhS55UP/SJiCeXZ4=)
                          2: 72F530E2BEF611F08C939B16C4F9AE02.roa (hash: yhMTNzO+SsDCmy0S8wXFM6nSSpWZDvT6nvy+5GJLY5A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.crl
                          rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6HkDAXqx8GqctGqwIb0Lkhya-og.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Oct 2026 04:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179 (0xb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C49BA, serialNumber=E87903017AB1F06A9CB46AB021BD0B921C9AFA88
        Validity
            Not Before: Oct 21 07:36:21 2026 GMT
            Not After : Oct 28 07:36:21 2026 GMT
        Subject: CN=6ad86b75-4755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ea:f9:72:76:9a:ef:af:8c:35:ad:b6:ab:7f:
                    91:26:27:33:3d:74:a1:b6:de:70:81:98:fe:63:54:
                    9d:2e:30:a2:53:ee:84:c1:b6:c0:74:45:d9:d5:42:
                    4a:83:14:06:02:22:fe:44:af:5b:77:91:c4:f4:af:
                    a1:82:57:30:41:c3:fd:6b:43:89:0f:d9:da:1b:6e:
                    c8:2e:1e:1a:2f:f0:6e:b2:15:45:4f:53:78:2b:1e:
                    bc:3f:7e:29:fd:f7:a8:4e:f5:4f:3d:9c:b1:62:a7:
                    54:e9:92:c4:20:fe:04:d4:05:f7:bd:5c:95:c3:97:
                    fc:c4:74:d2:18:f9:a2:c5:3e:9c:d3:55:2d:4f:28:
                    89:89:bc:cc:9d:cc:58:a3:22:38:66:92:e3:a7:70:
                    07:77:dc:7d:3e:76:78:b3:84:13:f3:d2:2b:02:54:
                    bf:a4:91:dc:8b:ae:f8:12:20:31:d3:83:8a:6d:2c:
                    76:c4:e4:57:3b:e8:16:12:7e:9c:03:00:f5:96:78:
                    c4:07:b2:39:03:a7:ce:7f:c2:bf:c3:a9:35:b8:0b:
                    f1:ed:37:51:98:67:5f:f2:86:1d:eb:b9:5b:d2:2e:
                    ed:7f:d2:50:4c:aa:be:4c:85:10:b2:b3:86:e3:0b:
                    13:ee:f8:fb:1f:f8:2c:50:e2:62:26:22:03:34:9f:
                    49:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:73:68:95:76:39:74:5E:FC:EA:FF:D7:99:76:6C:DF:29:FB:29:74
            X509v3 Authority Key Identifier:
                keyid:E8:79:03:01:7A:B1:F0:6A:9C:B4:6A:B0:21:BD:0B:92:1C:9A:FA:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6HkDAXqx8GqctGqwIb0Lkhya-og.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C49BA/E367F6C6BEF511F09B7E7209C4F9AE02/6HkDAXqx8GqctGqwIb0Lkhya-og.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:c7:11:4b:ed:21:e6:fb:8a:c5:2d:ee:dc:af:8d:fd:ce:c4:
         66:f6:f0:e5:90:56:36:20:8d:19:1a:ed:30:09:04:4d:fd:78:
         88:6b:bb:f7:6b:67:d9:7c:57:7d:ee:fd:68:8f:10:14:03:50:
         b8:33:a0:62:25:21:cc:c9:85:90:cd:34:c3:6e:98:94:ce:d0:
         4d:c6:da:2c:7e:d2:a9:7c:80:c9:81:fb:6f:83:57:8d:88:55:
         6f:8b:f9:f1:ea:58:fd:0c:0e:2e:c7:3a:5b:72:c6:e6:61:e5:
         f0:9b:00:6d:16:ef:63:3f:45:b6:ff:a2:42:bb:26:62:1c:e8:
         f9:d3:b7:1a:4e:32:aa:c5:d6:8a:85:63:43:fc:72:cb:20:41:
         87:2a:77:2f:6f:61:63:11:62:48:e5:e9:84:6d:a9:d7:90:73:
         0a:fa:75:4e:f1:5e:c1:f8:1b:e6:80:22:83:c0:b1:15:e2:8b:
         f7:47:04:c4:f6:b5:d2:b7:95:50:61:be:21:15:b6:94:31:f7:
         32:4d:75:3a:b8:95:1f:a1:e5:03:17:ae:94:c2:04:03:01:78:
         4f:79:35:3e:b5:f5:8b:42:49:e5:98:3f:d3:98:65:bb:11:dd:
         e6:cf:eb:5c:4f:84:cc:ca:8e:4a:54:5b:76:08:87:d2:07:49:
         19:30:fa:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 23:02:59 2026 by rpki-client