Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft
File:                     6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft (raw, json)
Hash identifier:          rnVStWvQ7gBB4RtmcIbtYWZzQv849hhN+uHxrQLNl3U=
Subject key identifier:   D8:83:1D:5B:1B:36:2D:DA:33:9D:86:53:41:47:08:FD:34:83:2E:14
Authority key identifier: E8:68:21:E9:F2:3D:42:F3:62:E4:2A:E2:AF:B5:BD:98:E0:B1:11:93
Certificate issuer:       /CN=A91C6FD6/serialNumber=E86821E9F23D42F362E42AE2AFB5BD98E0B11193
Certificate serial:       01B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft
Manifest number:          01A9
Signing time:             Wed 07 Oct 2026 04:35:36 +0000
Manifest this update:     Wed 07 Oct 2026 04:35:36 +0000
Manifest next update:     Wed 14 Oct 2026 04:35:36 +0000
Files and hashes:         1: 6Ggh6fI9QvNi5Crir7W9mOCxEZM.crl (hash: 0H4X2rhwSMhY7DkDY4V0RZPJmYrabl/pkyR7yOyNGjc=)
                          2: 70F3668238F711EFB4132D26C4F9AE02.roa (hash: J+hvCkdt6g/OaFOvzPdZIrEAlI39zR1KbhhXWY3YwWA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.crl
                          rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 04:35:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434 (0x1b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6FD6, serialNumber=E86821E9F23D42F362E42AE2AFB5BD98E0B11193
        Validity
            Not Before: Oct  7 04:35:36 2026 GMT
            Not After : Oct 14 04:35:36 2026 GMT
        Subject: CN=6ac5cc18-a8a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:24:a7:46:74:8e:7d:dd:47:06:82:35:bb:1c:
                    fb:12:c9:d5:d6:da:35:1a:59:74:80:8e:1b:72:e8:
                    34:ec:d4:4b:c1:31:8c:64:89:4d:3f:91:ef:6e:7b:
                    db:80:5d:51:20:1f:eb:12:79:11:cd:36:29:1a:90:
                    04:6e:50:87:10:53:d0:e5:26:c9:13:b2:49:82:87:
                    7c:36:e9:38:38:2a:96:66:e0:b0:ef:7c:70:41:2c:
                    06:06:e7:3d:5f:d9:42:45:22:1d:cf:7b:36:74:1f:
                    69:ab:48:e0:ed:6f:07:09:27:f8:3d:f9:73:58:b4:
                    fd:9b:28:b6:2d:0a:60:8b:d3:53:0c:58:04:d5:1c:
                    b6:d2:2d:b5:47:7e:86:b5:30:34:7c:fc:01:17:56:
                    2a:b5:3c:67:8e:4b:46:fe:73:29:62:19:40:d0:1d:
                    49:03:82:b0:7d:3e:02:f8:3d:bf:d4:12:6d:df:1a:
                    6e:fa:c8:c1:52:3f:9f:2c:d6:52:a7:a3:c1:bf:06:
                    87:75:02:7f:dd:b8:a1:49:3f:40:85:49:7b:e9:36:
                    db:cc:5d:03:e8:88:0c:de:8e:07:74:4b:cc:72:ca:
                    08:3a:ff:5a:18:55:96:6d:86:18:39:91:b4:76:20:
                    0f:8d:01:a0:93:a6:f5:e6:08:60:05:60:59:e5:9b:
                    c0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:83:1D:5B:1B:36:2D:DA:33:9D:86:53:41:47:08:FD:34:83:2E:14
            X509v3 Authority Key Identifier:
                keyid:E8:68:21:E9:F2:3D:42:F3:62:E4:2A:E2:AF:B5:BD:98:E0:B1:11:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:ce:06:e5:91:6d:10:d4:fd:c4:7f:ee:76:39:5d:ba:60:a2:
         ff:3a:f9:b8:e3:9d:af:98:9e:c4:69:88:3b:16:50:5e:9f:fa:
         71:54:4b:61:03:91:8a:e2:70:5c:4f:b2:e5:f1:d5:cc:86:36:
         1a:54:e1:ea:b4:57:00:94:01:77:0d:46:4a:86:10:8b:c5:23:
         d4:6f:07:12:47:0d:19:64:43:2f:85:e8:73:75:fe:ac:1c:d6:
         1e:64:54:42:14:99:ed:f3:e4:64:96:15:d4:2e:0d:04:0f:b9:
         9e:2d:d3:02:0a:6b:aa:b0:93:20:12:5c:81:b9:d9:b8:2a:14:
         61:bc:28:15:40:10:bd:ee:1a:69:30:cf:dc:d8:d0:1d:48:17:
         ff:6a:67:a1:3c:7b:7d:6a:f0:ab:39:fb:77:b6:ad:29:bd:aa:
         a9:81:b0:89:ce:68:36:31:ec:b3:93:b5:eb:60:d8:ad:84:3b:
         64:71:4e:b5:99:02:41:db:a0:89:37:cc:93:31:63:1d:9b:7c:
         a3:3f:f2:2d:14:5c:7c:a2:5a:4b:b2:55:34:b9:eb:99:3f:cd:
         19:49:46:87:52:e0:18:f9:55:ac:6c:93:d8:60:4c:5d:f8:cb:
         7b:3d:e1:d3:f5:86:5c:e4:04:54:4d:20:f2:57:65:4a:f0:59:
         ba:1e:82:fb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzZGRDYxMTAvBgNVBAUTKEU4NjgyMUU5RjIzRDQyRjM2MkU0MkFFMkFGQjVCRDk4
RTBCMTExOTMwHhcNMjYxMDA3MDQzNTM2WhcNMjYxMDE0MDQzNTM2WjAYMRYwFAYD
VQQDEw02YWM1Y2MxOC1hOGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAriSnRnSOfd1HBoI1uxz7EsnV1to1Gll0gI4bcug07NRLwTGMZIlNP5Hvbnvb
gF1RIB/rEnkRzTYpGpAEblCHEFPQ5SbJE7JJgod8Nuk4OCqWZuCw73xwQSwGBuc9
X9lCRSIdz3s2dB9pq0jg7W8HCSf4PflzWLT9myi2LQpgi9NTDFgE1Ry20i21R36G
tTA0fPwBF1YqtTxnjktG/nMpYhlA0B1JA4KwfT4C+D2/1BJt3xpu+sjBUj+fLNZS
p6PBvwaHdQJ/3bihST9AhUl76TbbzF0D6IgM3o4HdEvMcsoIOv9aGFWWbYYYOZG0
diAPjQGgk6b15ghgBWBZ5ZvAewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNiDHVsb
Ni3aM52GU0FHCP00gy4UMB8GA1UdIwQYMBaAFOhoIenyPULzYuQq4q+1vZjgsRGT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkZENi82OERBNEI2QTM4
RjYxMUVGQjEzMTg0MjNDNEY5QUUwMi82R2doNmZJOVF2Tmk1Q3JpcjdXOW1PQ3hF
Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZHZ2g2Zkk5UXZOaTVDcmlyN1c5bU9DeEVaTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NkZENi82OERBNEI2QTM4RjYxMUVGQjEzMTg0MjNDNEY5QUUwMi82R2doNmZJOVF2
Tmk1Q3JpcjdXOW1PQ3hFWk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEc4G5ZFtENT9xH/udjldumCi/zr5uOOdr5iexGmIOxZQXp/6cVRLYQORiuJw
XE+y5fHVzIY2GlTh6rRXAJQBdw1GSoYQi8Uj1G8HEkcNGWRDL4Xoc3X+rBzWHmRU
QhSZ7fPkZJYV1C4NBA+5ni3TAgprqrCTIBJcgbnZuCoUYbwoFUAQve4aaTDP3NjQ
HUgX/2pnoTx7fWrwqzn7d7atKb2qqYGwic5oNjHss5O162DYrYQ7ZHFOtZkCQdug
iTfMkzFjHZt8oz/yLRRcfKJaS7JVNLnrmT/NGUlGh1LgGPlVrGyT2GBMXfjLez3h
0/WGXOQEVE0g8ldlSvBZuh6C+w==
-----END CERTIFICATE-----
Generated at Thu Oct 8 10:59:32 2026 by rpki-client