Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/h6VQYbdfHcLFxbuH0omOgzB9hw8.mft
File:                     h6VQYbdfHcLFxbuH0omOgzB9hw8.mft (raw, json)
Hash identifier:          D7CZcdYFVa/zBNW12BMNVFZgSmvb/iQSDr+lIH+dIzI=
Subject key identifier:   DE:E5:42:86:E9:AF:20:4D:29:DF:C5:94:0C:BC:05:64:B5:45:0D:4C
Authority key identifier: 87:A5:50:61:B7:5F:1D:C2:C5:C5:BB:87:D2:89:8E:83:30:7D:87:0F
Certificate issuer:       /CN=A91DD42F/serialNumber=87A55061B75F1DC2C5C5BB87D2898E83307D870F
Certificate serial:       0857
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6VQYbdfHcLFxbuH0omOgzB9hw8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/h6VQYbdfHcLFxbuH0omOgzB9hw8.mft
Manifest number:          0844
Signing time:             Fri 02 Oct 2026 21:22:32 +0000
Manifest this update:     Fri 02 Oct 2026 21:22:31 +0000
Manifest next update:     Fri 09 Oct 2026 21:22:31 +0000
Files and hashes:         1: h6VQYbdfHcLFxbuH0omOgzB9hw8.crl (hash: EmtsrYaUhe+xGVbjNWC0pkwmoXX2Xa3SIIFsZUImRvc=)
                          2: E20C4942DC7D11EDA2F7B651C4F9AE02.roa (hash: X+PbAB6ZURG0zNwSn5Uz9F3saTJla2qu7ck7HHbuAXM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/h6VQYbdfHcLFxbuH0omOgzB9hw8.crl
                          rsync://rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/h6VQYbdfHcLFxbuH0omOgzB9hw8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6VQYbdfHcLFxbuH0omOgzB9hw8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 21:22:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2135 (0x857)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD42F, serialNumber=87A55061B75F1DC2C5C5BB87D2898E83307D870F
        Validity
            Not Before: Oct  2 21:22:31 2026 GMT
            Not After : Oct  9 21:22:31 2026 GMT
        Subject: CN=6ac02098-8adc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:eb:6c:ba:10:b3:9f:f4:a3:f8:6d:60:35:07:
                    e0:ba:60:10:72:4f:a0:f6:e1:86:3d:5e:7b:8e:a2:
                    7a:d7:a1:31:f8:1b:59:6e:2b:2c:51:1e:55:13:d9:
                    d8:ff:89:06:81:54:9e:6f:50:1b:c8:9d:21:39:1b:
                    b4:9b:45:1c:56:e0:02:1f:b2:4a:cb:7a:f5:6b:fa:
                    b9:b9:6e:7e:b3:07:ad:08:ae:74:b7:02:94:4e:94:
                    da:f3:56:8a:c2:d2:68:5e:9b:41:9e:ae:3b:bd:7e:
                    5c:90:b5:a6:68:cb:17:5d:a9:5d:76:11:38:b3:44:
                    ab:d2:6f:ed:5a:98:c3:ab:25:f4:b0:aa:38:fe:92:
                    95:0b:c6:fa:69:2b:17:0e:25:87:2f:ec:67:53:b8:
                    42:9c:4e:b4:5f:98:6d:78:3d:e9:0f:4c:c6:7a:f9:
                    94:af:2e:f2:eb:28:1b:1c:c0:73:2c:2b:d6:8d:b2:
                    aa:16:eb:fa:a3:56:4f:db:d0:30:1c:bf:98:18:78:
                    fc:d2:73:7d:8f:d3:3c:32:44:bb:30:1c:28:45:08:
                    64:85:1c:b9:b5:56:7e:a7:e4:2b:4b:54:f2:72:9a:
                    85:4c:e2:c0:0b:ab:29:69:fa:b7:5b:a3:ea:85:49:
                    a8:0e:64:3c:51:36:90:76:68:23:01:bd:4f:e5:7f:
                    1d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E5:42:86:E9:AF:20:4D:29:DF:C5:94:0C:BC:05:64:B5:45:0D:4C
            X509v3 Authority Key Identifier:
                keyid:87:A5:50:61:B7:5F:1D:C2:C5:C5:BB:87:D2:89:8E:83:30:7D:87:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/h6VQYbdfHcLFxbuH0omOgzB9hw8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6VQYbdfHcLFxbuH0omOgzB9hw8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/h6VQYbdfHcLFxbuH0omOgzB9hw8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:a6:d4:84:22:58:47:c4:8d:e8:a1:1e:df:6b:ad:09:87:d4:
         b5:df:98:6a:da:d1:ce:7b:9a:48:bf:42:b9:58:fd:1c:4c:ee:
         44:55:f9:c9:8e:9f:2b:93:d7:d6:89:8b:74:e8:93:31:2a:f2:
         4f:f5:c8:90:90:2b:00:f8:ef:2d:28:c8:12:d3:69:63:a5:27:
         d0:58:d4:f1:e2:5b:fa:83:3d:86:9e:01:4f:a3:c0:17:c9:00:
         e0:ef:8e:a4:0c:33:95:d0:3d:70:8e:47:c3:0c:a3:1b:50:a5:
         2a:17:dc:9a:9d:56:61:09:f1:01:ff:6d:d2:a9:d3:72:7d:09:
         14:5d:a5:73:f4:59:32:7a:58:43:07:09:7d:55:78:de:ef:a8:
         ac:84:02:8a:e0:5a:74:1f:f8:c8:f2:a2:b3:db:48:6e:e3:04:
         a8:04:35:92:f5:35:79:69:7b:f4:f0:49:bd:94:1c:ee:b3:ae:
         ea:ea:ff:97:ad:0f:71:b3:c3:8b:40:bb:86:fa:b6:1f:a9:41:
         07:4d:8f:59:00:c6:fe:3d:93:74:df:d9:9d:c8:ef:77:bb:db:
         1e:79:e2:97:93:b6:a9:f6:71:30:d8:a9:d6:5e:c9:81:76:79:
         6d:83:d9:2a:81:c0:af:55:3d:e8:d0:b4:71:cd:cd:80:51:6f:
         49:36:a3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:59:34 2026 by rpki-client