Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft
File:                     sK6GHB6-i61uZW1AH391BglAdKA.mft (raw, json)
Hash identifier:          6N+KuQs+PKZLF9cuuas1ALKMO8FC5Uoe8S6dklxcjHo=
Subject key identifier:   08:26:C1:A1:A3:DE:2F:D7:3F:7D:D6:2C:82:5F:78:D9:6F:1B:D3:72
Authority key identifier: B0:AE:86:1C:1E:BE:8B:AD:6E:65:6D:40:1F:7F:75:06:09:40:74:A0
Certificate issuer:       /CN=A91D322A/serialNumber=B0AE861C1EBE8BAD6E656D401F7F7506094074A0
Certificate serial:       0E22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft
Manifest number:          0E17
Signing time:             Sun 04 Oct 2026 17:52:21 +0000
Manifest this update:     Sun 04 Oct 2026 17:52:20 +0000
Manifest next update:     Sun 11 Oct 2026 17:52:20 +0000
Files and hashes:         1: sK6GHB6-i61uZW1AH391BglAdKA.crl (hash: 7yLYSmTuIB+aovHfwuWeAhAQYyp5N3xSdYJiiB5eVIU=)
                          2: 98B4FB32DB9011E996483B2BC4F9AE02.roa (hash: biEpReR7xt5jNKqYdIn9awTR3NvP201qZ8Sk22aineY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.crl
                          rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 17:52:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3618 (0xe22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D322A, serialNumber=B0AE861C1EBE8BAD6E656D401F7F7506094074A0
        Validity
            Not Before: Oct  4 17:52:20 2026 GMT
            Not After : Oct 11 17:52:20 2026 GMT
        Subject: CN=6ac29255-a7d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3c:a6:ff:f1:82:1f:75:d1:63:2c:ad:20:63:
                    1b:e1:17:7a:8b:dd:f7:62:3d:ea:e7:16:7d:7a:dd:
                    72:b7:f1:d5:05:2e:3e:d1:e6:92:a3:b4:33:3c:f5:
                    56:0a:cf:02:40:d6:68:c1:0e:5c:1a:f7:29:ca:14:
                    75:8e:d9:a5:bc:75:e3:a9:8d:31:ee:fe:5c:e6:fd:
                    79:ea:11:5f:34:e8:61:a0:c6:55:ab:2f:bf:16:0d:
                    97:1f:4f:38:a8:6a:53:3b:55:e3:95:a5:f1:51:70:
                    62:f2:27:d7:46:19:c3:95:94:ab:31:61:9e:e0:45:
                    a1:4b:ec:15:35:39:b0:ca:d1:f4:cc:8f:3a:08:78:
                    b4:45:c0:69:c5:9c:a3:c6:c9:ca:59:d1:60:d4:5d:
                    e3:e0:fa:09:02:8a:7a:6c:82:d1:0d:05:f5:b7:43:
                    7f:22:a6:bd:57:b6:a6:8b:0d:b6:d0:d3:01:52:24:
                    f4:18:78:87:06:c8:f7:b9:00:80:94:f3:ab:77:ca:
                    0d:26:c4:ba:0f:1c:50:d8:d3:c8:61:bb:59:8e:65:
                    a8:6e:2b:97:b0:7d:1c:d1:43:36:7d:56:ee:b7:ba:
                    89:5e:d2:db:7c:0d:a3:9f:de:da:df:b8:87:59:5e:
                    e8:49:8e:4b:5e:f9:25:ec:d4:a2:3a:eb:6f:da:68:
                    ff:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:26:C1:A1:A3:DE:2F:D7:3F:7D:D6:2C:82:5F:78:D9:6F:1B:D3:72
            X509v3 Authority Key Identifier:
                keyid:B0:AE:86:1C:1E:BE:8B:AD:6E:65:6D:40:1F:7F:75:06:09:40:74:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:da:0a:81:4f:1b:11:68:4e:1a:69:72:c6:f2:2d:47:9d:35:
         6e:10:13:e4:b3:32:55:88:6d:d7:f2:ce:76:37:9f:e4:92:0e:
         5d:e5:14:43:d1:a0:89:a2:93:86:e2:04:aa:9c:71:eb:8e:59:
         92:55:82:2f:5c:e9:46:bb:a7:92:93:a4:3b:17:7e:2a:ee:8f:
         91:f6:9b:cb:12:c1:36:4b:ad:a3:e4:f5:c2:08:08:55:be:2d:
         6f:1d:f1:cc:b8:cf:2a:74:cd:c1:4a:7f:df:3d:a0:4d:9c:89:
         0e:b4:c0:a2:02:2f:16:b9:2e:5f:fe:d5:b2:8f:b2:e2:01:cb:
         2a:96:a7:2d:21:f5:b6:86:3f:8c:30:06:60:92:92:23:63:f1:
         e5:f4:aa:ed:8e:03:d9:93:46:29:47:01:c4:84:45:8c:cc:4e:
         8a:b4:a9:3b:1d:32:ef:7d:a4:7e:28:59:ef:92:bd:e7:94:e3:
         4d:49:dc:32:f0:8b:07:1f:bc:9d:ee:19:a4:73:a8:bf:d4:8e:
         66:69:1d:ba:2c:0e:28:06:fa:0d:49:7c:8a:c0:15:b2:23:b7:
         52:84:7e:3d:ed:68:ce:ee:63:0f:80:21:68:97:3f:e7:d4:c3:
         68:8f:6c:e5:bb:3b:88:9b:2c:93:89:33:f2:3f:aa:6c:66:27:
         06:64:88:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:49:26 2026 by rpki-client