Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft
File:                     b7CqV86Epc0prEfZ19CJSOsh8Go.mft (raw, json)
Hash identifier:          JrsFmavU2MP8XV6z++R3xGDIulOAkRoSMMhjBOTQZpc=
Subject key identifier:   F6:79:DA:F2:EC:AA:95:FB:CC:D9:AE:28:B2:B3:A4:86:B2:43:04:5D
Authority key identifier: 6F:B0:AA:57:CE:84:A5:CD:29:AC:47:D9:D7:D0:89:48:EB:21:F0:6A
Certificate issuer:       /CN=A91C6861/serialNumber=6FB0AA57CE84A5CD29AC47D9D7D08948EB21F06A
Certificate serial:       0CA1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft
Manifest number:          0C93
Signing time:             Thu 10 Sep 2026 18:35:25 +0000
Manifest this update:     Thu 10 Sep 2026 18:35:25 +0000
Manifest next update:     Thu 17 Sep 2026 18:35:25 +0000
Files and hashes:         1: b7CqV86Epc0prEfZ19CJSOsh8Go.crl (hash: wLlh5Z9GO5OiEz9wiAer3OJ+RjruSL12uPZNvaWVWFg=)
                          2: 059432729E6A11EEB0983523C4F9AE02.roa (hash: 0DMnke4ej/rRMTSX/s1HLfKLH/EhQb8wlXMX/qnYspw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.crl
                          rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 18:35:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3233 (0xca1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6861, serialNumber=6FB0AA57CE84A5CD29AC47D9D7D08948EB21F06A
        Validity
            Not Before: Sep 10 18:35:25 2026 GMT
            Not After : Sep 17 18:35:25 2026 GMT
        Subject: CN=6aa2f86d-1c63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:54:4b:03:94:80:ba:12:82:a2:64:13:8c:92:
                    21:56:6a:b7:00:d2:68:b0:01:db:27:57:64:19:56:
                    17:67:33:41:1b:50:9f:94:ca:84:ad:e3:bd:fe:70:
                    0f:df:8e:bd:53:13:f9:a3:48:41:e6:70:b5:34:28:
                    37:4b:2c:15:2d:b3:39:6b:b1:27:15:f4:d4:54:0e:
                    b7:e9:a9:fd:ac:38:ac:0b:da:ae:d1:dc:e9:9b:8f:
                    0e:b4:05:2b:a1:ca:f0:90:97:e0:ec:4b:49:96:39:
                    a9:f9:1c:e6:ec:cd:4b:80:97:f5:3d:3b:fa:88:c3:
                    28:67:88:e9:84:4f:73:a8:8d:ea:bd:5c:3b:bc:b3:
                    33:e2:38:13:05:e5:dd:3d:0f:e4:e8:74:53:54:5b:
                    f0:66:be:12:04:2b:15:ee:4b:42:d6:25:2d:72:ea:
                    3f:67:e2:82:ae:b3:e9:21:da:22:4a:79:f3:be:ae:
                    0f:b6:f9:25:2d:f7:ff:31:05:b1:3e:90:c8:59:91:
                    fa:81:5d:db:a3:80:22:7a:a1:b2:0e:74:70:05:6d:
                    dd:24:a7:1f:8d:c6:1c:c5:33:57:48:e3:b0:f8:45:
                    c1:00:df:ad:2d:a2:4b:e4:30:b3:8d:a8:5f:4e:25:
                    71:ee:a0:5b:e7:e6:35:6c:58:a3:f1:b2:1c:55:6c:
                    ff:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:79:DA:F2:EC:AA:95:FB:CC:D9:AE:28:B2:B3:A4:86:B2:43:04:5D
            X509v3 Authority Key Identifier:
                keyid:6F:B0:AA:57:CE:84:A5:CD:29:AC:47:D9:D7:D0:89:48:EB:21:F0:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:60:f3:0c:bc:bf:7e:62:83:7c:50:40:2f:e9:be:7b:5c:3a:
         97:b2:28:e4:0c:1d:75:fa:bc:d2:de:ba:1e:af:d3:6a:28:1a:
         62:5f:18:3c:81:3f:20:48:61:c3:ad:a6:65:42:a5:4f:e3:57:
         85:52:ae:74:b5:87:88:49:51:3c:a3:b5:01:61:69:98:eb:1d:
         43:7f:17:50:8a:13:f2:90:1b:11:40:87:6d:86:fc:98:65:2c:
         bf:c2:af:78:48:a0:81:0e:11:3f:35:4f:79:df:2c:95:ee:b3:
         00:56:5b:19:10:fb:c7:2f:4e:b7:c6:30:3e:c8:36:63:dc:92:
         ea:a4:30:75:27:de:8b:01:18:e8:3f:76:2c:30:aa:82:b0:27:
         b4:38:f5:bf:55:2f:28:9e:8a:09:c3:4e:1a:f0:76:79:05:22:
         94:72:c7:5f:4a:9c:af:82:27:8b:6b:5a:d0:eb:74:06:95:ac:
         76:9b:6a:e1:20:82:96:d0:c9:26:d7:db:54:38:e3:bb:bd:20:
         2a:49:20:8d:b9:2c:e5:f3:b9:55:51:48:61:94:57:39:05:04:
         af:86:ab:4b:67:c6:04:cc:eb:f3:92:9b:20:c4:15:e9:9a:fc:
         f5:4a:77:57:7b:cb:6e:4a:b3:a6:ff:f7:0b:f0:3e:44:00:2f:
         79:3a:7b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 16:28:48 2026 by rpki-client