Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft
File:                     6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft (raw, json)
Hash identifier:          bVRyQN2wMxpSsYw1TPUUcJNB+smfhR0FQaeAJ/pfajs=
Subject key identifier:   2A:7C:15:3C:63:35:A8:D9:03:60:C5:70:86:EF:F9:35:A3:CA:AC:DD
Authority key identifier: E9:F2:CE:48:3F:1B:06:D2:9D:5E:A2:AB:E3:75:BD:1D:22:A9:E1:C4
Certificate issuer:       /CN=A91C68AD/serialNumber=E9F2CE483F1B06D29D5EA2ABE375BD1D22A9E1C4
Certificate serial:       0189
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft
Manifest number:          0181
Signing time:             Sun 25 Oct 2026 05:02:05 +0000
Manifest this update:     Sun 25 Oct 2026 05:02:04 +0000
Manifest next update:     Sun 01 Nov 2026 05:02:04 +0000
Files and hashes:         1: 6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl (hash: apO+oRm/jzxI5Vd+sf1PVVg1Xt3Fcu0FDEN73NYD2DQ=)
                          2: FC3E29FC85E111EFB365E459C4F9AE02.roa (hash: VOtKNjMmkgJqiloUEhTwsaTLIqFH0cNEwhb31cZXP9s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 05:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393 (0x189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C68AD, serialNumber=E9F2CE483F1B06D29D5EA2ABE375BD1D22A9E1C4
        Validity
            Not Before: Oct 25 05:02:04 2026 GMT
            Not After : Nov  1 05:02:04 2026 GMT
        Subject: CN=6add8d4d-c137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:18:12:09:34:98:e6:04:f1:aa:0b:c1:71:75:
                    90:04:18:c4:61:75:4f:f6:ed:d8:dd:68:71:7e:c5:
                    8d:f0:54:1d:4b:d9:e6:9c:e3:d6:d3:94:b2:59:24:
                    35:e8:38:95:93:38:0c:f5:92:49:6d:b6:fb:2a:ea:
                    58:79:96:d7:7e:63:78:34:db:0e:7d:1f:81:0c:c9:
                    21:03:5a:f0:fc:5e:3c:18:72:13:83:78:93:5c:d6:
                    34:17:84:7a:4f:a0:0d:29:8f:e3:88:78:55:cd:81:
                    07:05:fd:fb:14:e5:7e:cb:44:79:24:91:b4:98:4d:
                    fd:5b:35:57:f0:3c:c0:11:54:33:cf:16:e7:17:73:
                    62:4d:66:99:0f:bd:cf:6b:28:ce:ea:1c:c1:f2:0c:
                    d2:b8:61:d9:77:c8:92:67:93:06:13:4e:e0:dd:f2:
                    d1:06:2f:6a:f7:f4:96:db:e3:15:05:4a:8e:f0:03:
                    d6:71:ae:d7:6c:93:88:13:b8:1a:4f:eb:16:27:0a:
                    13:df:e8:a5:9d:c4:f8:c7:50:7f:c1:06:e6:7f:e6:
                    7a:af:2a:0f:88:7c:c7:37:75:8b:1d:c0:cd:6f:e1:
                    22:0d:16:b6:18:ca:f6:05:d9:dd:15:ac:de:53:10:
                    60:db:57:65:40:01:5b:de:30:84:be:1e:9f:11:31:
                    30:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:7C:15:3C:63:35:A8:D9:03:60:C5:70:86:EF:F9:35:A3:CA:AC:DD
            X509v3 Authority Key Identifier:
                keyid:E9:F2:CE:48:3F:1B:06:D2:9D:5E:A2:AB:E3:75:BD:1D:22:A9:E1:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:52:6f:67:b9:23:3d:0a:f0:bb:10:cb:bf:ee:d5:ee:92:4d:
         ac:27:2b:e1:ff:66:18:83:d8:45:60:3f:37:d9:d8:ca:c7:0c:
         c5:5d:88:1f:7e:aa:5b:25:74:5b:fb:73:4a:0b:ea:2c:8d:2e:
         79:32:bd:3c:01:21:fe:9b:43:81:c7:29:ed:3d:46:af:f4:3b:
         67:f1:1b:ac:92:36:e9:27:c6:01:19:1b:53:cc:27:d9:1f:a1:
         fe:7b:96:e9:fa:f3:5e:a5:ef:28:a2:e7:b6:4c:34:dc:84:4e:
         4e:2b:74:8f:8d:9e:29:c0:c9:9a:6c:8c:e3:05:80:3e:c6:e5:
         4c:f0:c2:06:95:14:b6:26:8d:d1:79:ae:9b:bd:06:4a:a0:3b:
         db:bd:99:53:08:86:ec:fe:9e:59:7a:b9:cf:2c:f2:61:d6:35:
         26:2b:b5:17:30:29:c8:77:f5:03:41:e1:f7:ef:75:fe:7c:dc:
         c7:c9:c0:49:75:cd:65:5e:ae:bc:7c:33:0f:45:fc:68:78:de:
         d5:77:88:27:80:97:f3:0d:c5:ad:79:dd:d8:bb:3c:60:28:38:
         26:b3:6d:5e:ac:e9:0a:1b:de:93:5f:43:f4:ee:09:2b:1c:bf:
         17:ac:ba:bb:1c:b5:db:55:0d:0b:b8:2f:ba:58:90:22:a1:91:
         ac:c7:c8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:31:59 2026 by rpki-client