Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft
File:                     6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft (raw, json)
Hash identifier:          7H/IDRa9KprMSYOGCcQcsVObT+8cbLhoguvbewa/BZE=
Subject key identifier:   06:D7:6E:B3:BE:32:D6:93:FD:CA:F7:11:DF:B7:2F:51:A2:EA:50:65
Authority key identifier: E9:F2:CE:48:3F:1B:06:D2:9D:5E:A2:AB:E3:75:BD:1D:22:A9:E1:C4
Certificate issuer:       /CN=A91C68AD/serialNumber=E9F2CE483F1B06D29D5EA2ABE375BD1D22A9E1C4
Certificate serial:       0170
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft
Manifest number:          0168
Signing time:             Sat 05 Sep 2026 04:42:45 +0000
Manifest this update:     Sat 05 Sep 2026 04:42:45 +0000
Manifest next update:     Sat 12 Sep 2026 04:42:45 +0000
Files and hashes:         1: 6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl (hash: EYKLCx6cW2rLv1N3QACdvz+fLFQKW0b44vrVuo3JBOg=)
                          2: FC3E29FC85E111EFB365E459C4F9AE02.roa (hash: VOtKNjMmkgJqiloUEhTwsaTLIqFH0cNEwhb31cZXP9s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 04:31:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 368 (0x170)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C68AD, serialNumber=E9F2CE483F1B06D29D5EA2ABE375BD1D22A9E1C4
        Validity
            Not Before: Sep  5 04:42:45 2026 GMT
            Not After : Sep 12 04:42:45 2026 GMT
        Subject: CN=6a9b9dc5-b5f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c4:a5:07:a8:f1:c0:89:d5:18:79:73:7f:81:
                    05:02:fb:be:d9:d0:03:f3:6e:fd:bd:a2:b3:65:0e:
                    19:f1:84:cd:2f:9a:38:5f:6f:78:51:af:50:3f:63:
                    a4:11:97:e6:50:61:79:70:37:aa:73:f0:92:04:d1:
                    28:87:a9:ba:be:8a:47:7b:f1:c3:02:ea:61:a8:cc:
                    7d:9e:e7:39:5a:e4:84:18:09:b3:43:94:06:d4:f1:
                    0c:7f:e4:0a:80:89:67:9c:90:a8:3d:cb:8f:8b:8f:
                    b1:21:8f:3a:40:96:4d:b1:8e:51:fc:e2:7e:d6:69:
                    34:c5:36:e2:b4:83:5d:1c:49:ed:b3:14:c5:90:e2:
                    d1:39:83:7f:25:3b:fe:b6:2a:3c:61:66:81:f8:68:
                    24:7e:f3:e8:cb:2e:ad:51:ef:a0:3b:6d:07:ff:9f:
                    79:f2:d6:17:a0:18:ba:58:f0:f6:11:cf:22:39:ad:
                    55:5e:4c:97:71:1e:aa:d9:53:b9:39:a9:bc:4a:1e:
                    34:7d:fa:cf:3a:c8:ac:81:ab:01:57:19:37:db:10:
                    69:6a:94:03:e2:7b:38:94:0b:dd:20:bc:af:44:f8:
                    2e:82:f7:48:5a:9b:2e:6d:41:8a:55:8e:d9:db:3c:
                    ba:a4:6b:85:64:cd:fb:93:8f:46:7f:3a:fa:02:37:
                    bc:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D7:6E:B3:BE:32:D6:93:FD:CA:F7:11:DF:B7:2F:51:A2:EA:50:65
            X509v3 Authority Key Identifier:
                keyid:E9:F2:CE:48:3F:1B:06:D2:9D:5E:A2:AB:E3:75:BD:1D:22:A9:E1:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:47:9f:f8:6f:7b:c8:b5:ff:5b:31:7e:7a:da:bc:7c:23:cc:
         94:ad:e0:4c:77:76:f9:81:90:b6:63:85:b5:af:56:ee:88:50:
         a9:b8:76:71:6f:43:c5:89:31:b8:88:e8:1f:3c:e6:a9:d5:c7:
         66:e7:fb:f7:21:8b:57:93:b6:5c:a2:5b:4d:e4:df:b0:48:08:
         dc:cc:e0:69:57:a9:d3:83:75:70:e4:0d:c8:62:b8:56:7d:8a:
         a4:3d:70:67:3d:da:61:03:0e:48:06:c7:42:fc:1b:77:dd:04:
         0c:37:3e:70:d0:a2:e0:39:6d:d5:c3:a2:f0:f1:a4:96:4a:aa:
         ad:db:bd:53:ee:13:8f:e5:d9:3d:30:a5:ef:d2:04:e8:aa:2b:
         e4:53:40:7d:a0:5a:3e:85:4f:d6:12:49:30:16:6e:b0:2c:59:
         b9:66:a1:28:b5:c6:87:c5:02:b7:6d:14:2f:9f:dc:2f:a4:6a:
         dc:e0:05:93:37:1f:bc:d6:22:da:63:a7:6b:93:a9:e0:2b:a9:
         22:be:85:57:1b:37:13:5f:f5:2a:30:4b:4d:e4:1b:6a:23:e8:
         77:eb:6c:77:09:be:bc:13:1e:c5:f0:1b:8a:7c:88:21:0a:b0:
         53:d5:27:4b:3f:0f:fb:aa:83:b6:36:9e:98:d6:b4:95:0b:b9:
         ee:d9:08:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:16:25 2026 by rpki-client