Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft
File:                     h25oE78sGBHNEd6ZKBrNRL7A3nM.mft (raw, json)
Hash identifier:          cyHtslWPBIcH8BV0uatpBzd5CP3jXIONrWVT4w5j3mA=
Subject key identifier:   CC:B3:CC:B3:1B:4D:46:0A:0D:D8:63:AE:B0:7E:2D:FA:E2:16:5F:14
Authority key identifier: 87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73
Certificate issuer:       /CN=A91F4FB0/serialNumber=876E6813BF2C1811CD11DE99281ACD44BEC0DE73
Certificate serial:       0212
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft
Manifest number:          01E6
Signing time:             Mon 05 Oct 2026 04:13:50 +0000
Manifest this update:     Mon 05 Oct 2026 04:13:49 +0000
Manifest next update:     Mon 12 Oct 2026 04:13:49 +0000
Files and hashes:         1: h25oE78sGBHNEd6ZKBrNRL7A3nM.crl (hash: rEqL+WpjdnVrIHhaVJGp1XkJd7QLV8Hp5N8DXSMjNW4=)
                          2: 0B5DBB081C0311EF8B8AB54DC4F9AE02.roa (hash: WQwwG0p66GxjEWNcaSKndoSIUakwMJP7WJLK7nMnWQI=)
                          3: 2EFBFF901C0611EF883D807CC4F9AE02.roa (hash: uc4RYqpjqZuGmSUCE9a97wEXjfj0RfCgzqbAD8ekhMc=)
                          4: E8AC04B286F311F1B8F66003A7EE528E.roa (hash: gdGgY10s0aC8Do46TFQ8bG2KR+XSS6EIIPnk5BDXjnI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.crl
                          rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 04:13:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 530 (0x212)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4FB0, serialNumber=876E6813BF2C1811CD11DE99281ACD44BEC0DE73
        Validity
            Not Before: Oct  5 04:13:49 2026 GMT
            Not After : Oct 12 04:13:49 2026 GMT
        Subject: CN=6ac323fd-3598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:59:f9:2e:88:25:5d:54:47:60:35:64:a5:58:
                    cf:c7:43:71:50:b3:42:be:a1:4f:fd:a6:51:61:42:
                    9e:41:18:11:90:cf:ae:f3:ae:0e:98:e7:91:00:5b:
                    87:c1:14:b8:0d:3b:b2:37:08:30:58:87:2e:86:50:
                    04:d5:1e:cf:61:41:71:08:73:6b:d8:f8:dd:29:97:
                    f5:c2:3c:4b:27:a1:30:d7:e1:41:66:66:a2:30:78:
                    e1:6b:61:53:fd:96:de:88:1e:a3:18:be:d1:6b:b8:
                    f0:39:d1:4a:cd:e4:d9:27:83:4c:2a:04:22:3d:0d:
                    ea:b9:cd:31:96:6b:5f:2b:51:0c:e8:0f:3f:15:01:
                    51:21:eb:26:af:a7:23:0e:14:a5:ad:e5:1c:f3:f5:
                    0f:7c:86:b1:dc:b7:d0:1c:55:de:85:0c:b3:7b:2b:
                    cb:e7:b2:37:9b:7a:df:53:b1:fa:41:30:31:38:33:
                    b8:3b:4f:1f:ab:7e:bb:05:fd:4a:83:32:e5:13:6e:
                    95:67:c0:f8:4b:dd:68:38:c4:fa:16:44:40:04:b4:
                    e3:2f:f7:b7:64:b7:0a:02:19:eb:f9:59:e7:1e:04:
                    e8:69:5b:56:c2:91:84:48:6e:0f:5b:ed:7e:b2:13:
                    8c:41:7e:84:7c:19:1e:5d:53:8a:70:2c:f1:f2:a7:
                    8a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B3:CC:B3:1B:4D:46:0A:0D:D8:63:AE:B0:7E:2D:FA:E2:16:5F:14
            X509v3 Authority Key Identifier:
                keyid:87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:a4:6e:d5:1e:22:53:e9:0b:5f:13:db:3e:b8:f2:32:60:a1:
         7e:d5:5c:64:59:87:bb:fa:c0:e0:39:c0:6f:d2:d1:a8:94:d9:
         6e:e7:0e:6f:50:57:24:cc:33:09:cd:bb:8a:5c:b4:5e:ff:3e:
         5d:e4:60:af:17:eb:08:fd:21:58:f7:7e:fd:52:5f:7a:45:0a:
         a0:e8:34:2f:3f:1a:6f:35:b5:88:26:59:37:c5:39:17:ca:76:
         8e:7b:63:da:b5:7b:7f:75:d5:69:98:8a:a2:14:4f:2e:1f:a5:
         05:7c:10:e1:b2:79:f7:e2:3b:de:0f:1a:cb:e5:3e:69:bf:99:
         46:b4:80:e7:52:49:82:95:ac:95:1d:43:a9:1c:ac:2e:22:23:
         86:ad:b6:32:c5:7c:da:24:40:ed:1c:eb:e2:0d:f5:47:56:32:
         8a:69:0f:18:23:c4:31:3b:24:bb:1e:76:2b:ba:bf:86:e7:c6:
         c4:5c:78:43:74:a9:79:bb:16:d3:12:ca:3b:90:e9:62:c5:7b:
         9e:bc:70:cf:87:e4:68:f9:d2:3d:ca:c9:96:e0:ef:2c:28:fd:
         87:4f:be:96:3b:d1:a1:1a:eb:c3:e4:2d:dd:34:4a:b1:5c:54:
         1c:af:90:70:33:81:b3:41:37:b8:ad:00:8f:c8:d1:b3:47:66:
         58:ee:a9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 03:18:17 2026 by rpki-client