Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft
File:                     i6wN0-SRhYlP2uKChO3IBHILRhQ.mft (raw, json)
Hash identifier:          3qJZ9+Hs41seRlb3BPHMoOPXjkb5zabAxY139+pdv18=
Subject key identifier:   72:79:73:C5:94:F6:96:77:92:7A:6A:6A:1F:E7:65:95:1A:A3:48:62
Authority key identifier: 8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14
Certificate issuer:       /CN=A91EBFAE/serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614
Certificate serial:       357E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft
Manifest number:          357D
Signing time:             Thu 10 Sep 2026 14:32:17 +0000
Manifest this update:     Thu 10 Sep 2026 14:32:17 +0000
Manifest next update:     Thu 17 Sep 2026 14:32:17 +0000
Files and hashes:         1: i6wN0-SRhYlP2uKChO3IBHILRhQ.crl (hash: jN+k5tjFcovrY+dL/LJZXCIaAlTL1hohL7OM5EyLdbU=)
                          2: 93F991501F4C11F19ED52041133D8C67.roa (hash: riV+YFoj73RGskIzJAtr/Lp7lGHXyMFCcQQ1eQ66pUQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 14:32:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13694 (0x357e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBFAE, serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614
        Validity
            Not Before: Sep 10 14:32:17 2026 GMT
            Not After : Sep 17 14:32:17 2026 GMT
        Subject: CN=6aa2bf71-68d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:96:2d:a0:61:82:bc:72:dd:cc:60:34:3c:8a:
                    a1:cb:7f:03:c4:25:9a:9d:e5:b1:86:48:a7:dc:6c:
                    17:cc:ab:2b:81:f6:45:21:7a:1d:f7:66:7e:2d:58:
                    19:52:96:c8:46:fc:25:90:2d:50:9a:04:dd:3b:85:
                    bd:63:89:d9:9d:79:11:53:af:af:09:76:94:bf:e8:
                    56:93:f2:18:a6:64:a7:f4:75:04:71:f4:9f:31:ff:
                    a4:6e:ba:9e:2b:c3:d4:b6:37:bc:40:f7:31:c3:cc:
                    6d:5d:d3:b7:31:42:17:b3:aa:c6:f7:ad:94:aa:35:
                    fe:7d:83:51:b9:19:bd:bf:03:ae:5c:7b:49:31:22:
                    38:ac:16:c6:bc:4c:33:9a:f2:ff:74:cd:02:9a:4a:
                    fe:15:54:fa:ae:b1:9b:1b:2f:ff:60:0a:e6:73:d3:
                    6a:e9:71:be:21:b8:6b:3b:60:70:ce:7f:d0:61:79:
                    70:d9:e0:ba:84:92:b1:98:c5:30:08:5a:e8:5d:3c:
                    28:e5:18:9e:67:9c:96:c6:16:cd:94:87:75:ad:14:
                    26:71:21:d0:b9:7e:68:05:55:55:f9:76:db:65:53:
                    53:28:c5:4c:de:41:b4:12:90:57:8b:bf:f4:e1:53:
                    09:92:0b:90:dd:73:62:0b:d4:c5:9d:4e:91:cd:d1:
                    3f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:79:73:C5:94:F6:96:77:92:7A:6A:6A:1F:E7:65:95:1A:A3:48:62
            X509v3 Authority Key Identifier:
                keyid:8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:e6:ea:f2:af:7a:26:ad:ae:cb:b6:4c:e2:9a:6d:ba:75:1e:
         58:4a:9c:b2:02:29:b4:c9:be:6e:e5:b6:aa:16:09:10:23:b6:
         c9:17:70:5a:69:43:31:c3:be:d0:bd:f7:a9:f9:7b:e2:c4:03:
         9c:a8:c0:b6:18:d3:c0:5b:c1:bc:99:2d:7d:f2:18:4e:34:43:
         9f:b1:a3:bd:ce:b3:49:27:6c:44:3b:9e:60:f6:95:b0:bc:96:
         06:56:97:70:80:f7:c9:6d:e8:7b:f4:40:4d:0a:5c:74:14:92:
         6c:8f:bf:b7:49:1d:8b:7b:a0:c3:b9:a0:e3:2e:e1:9d:40:9b:
         97:d7:48:b8:8c:5b:12:7f:78:72:6f:3c:1b:e4:d4:5a:06:3f:
         da:2c:e4:f7:b2:48:23:ce:10:6e:d5:d6:79:b0:8e:65:36:48:
         e2:3b:33:fd:7b:a2:73:06:6d:30:35:40:1e:07:8c:51:90:1b:
         fc:70:4e:89:87:21:eb:75:73:d1:f2:98:c8:7c:dd:73:60:8f:
         9d:59:56:e3:26:48:cd:e5:e2:43:7e:5a:2c:c0:ec:da:00:5a:
         a3:6e:2b:9d:2d:f6:dd:e1:c0:d6:f9:77:24:7f:e7:ee:bb:f4:
         8b:fe:fe:68:77:d7:52:f0:8b:f8:bd:10:dd:c0:34:65:94:ce:
         96:a6:4c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 06:15:59 2026 by rpki-client