Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.mft
File:                     _h1b-QL6kS1-C16YDPkdvf0rtk8.mft (raw, json)
Hash identifier:          hDhTYHCzCD8ap++L8S1F0x0uCdsMjJizKy1wClt0ka8=
Subject key identifier:   85:86:65:53:15:4B:0A:76:F6:52:B2:FF:09:81:48:9F:08:4D:E3:1E
Authority key identifier: FE:1D:5B:F9:02:FA:91:2D:7E:0B:5E:98:0C:F9:1D:BD:FD:2B:B6:4F
Certificate issuer:       /CN=A91F8534/serialNumber=FE1D5BF902FA912D7E0B5E980CF91DBDFD2BB64F
Certificate serial:       221A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_h1b-QL6kS1-C16YDPkdvf0rtk8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.mft
Manifest number:          21EC
Signing time:             Tue 06 Oct 2026 15:54:46 +0000
Manifest this update:     Tue 06 Oct 2026 15:54:46 +0000
Manifest next update:     Tue 13 Oct 2026 15:54:46 +0000
Files and hashes:         1: _h1b-QL6kS1-C16YDPkdvf0rtk8.crl (hash: gd1u448wmsN6V0Uo71mHYjQ4Yh6+gXTArfeBcJcD6mc=)
                          2: C0C6DAC87F6711F181B5257061A30FBC.roa (hash: LArdPYBxgbX/0yRiPiY4+A0fZe2+AgQXn+s/Md8nMsE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.crl
                          rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_h1b-QL6kS1-C16YDPkdvf0rtk8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 15:54:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8730 (0x221a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8534, serialNumber=FE1D5BF902FA912D7E0B5E980CF91DBDFD2BB64F
        Validity
            Not Before: Oct  6 15:54:46 2026 GMT
            Not After : Oct 13 15:54:46 2026 GMT
        Subject: CN=6ac519c6-3a3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b6:b7:f7:29:05:ca:ad:af:6b:f0:60:97:d4:
                    32:4c:c7:7f:d7:48:8c:14:09:f2:d2:87:f8:0e:72:
                    c5:c8:c7:7f:86:0f:ed:b5:a0:e8:9c:f0:ca:52:e8:
                    af:b9:01:78:da:fa:9a:9f:d9:43:3b:30:1d:21:ec:
                    e5:cc:1b:d4:51:a4:0f:55:41:d7:64:0e:af:18:b5:
                    53:4f:57:71:ea:29:64:9a:1b:24:32:42:71:41:ec:
                    44:10:05:67:63:5d:74:d0:8a:b6:25:4e:af:d9:ee:
                    d2:9e:3c:0d:b1:eb:fe:74:c0:e0:9e:33:9c:86:58:
                    f0:30:7c:22:a2:02:85:bb:1e:1c:4f:2b:8a:ab:0f:
                    b5:d4:6d:13:fd:ba:26:f0:37:63:2a:6c:29:82:5b:
                    3d:dc:9a:40:29:29:76:9b:09:94:db:dd:29:cd:12:
                    77:0c:19:82:ca:d4:fd:56:f7:c2:e2:57:b3:06:91:
                    e8:0c:63:8a:77:b4:c9:20:a9:98:68:8c:27:02:78:
                    2c:54:64:92:18:a6:85:0d:f7:f6:14:c2:1c:6b:23:
                    6e:11:77:e6:68:51:f5:83:5c:8c:e2:1e:03:58:dd:
                    66:2d:e1:66:02:1a:eb:43:4f:a1:37:cc:fd:ec:63:
                    14:ca:ea:bd:04:df:a5:61:12:0d:e5:05:74:19:50:
                    12:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:86:65:53:15:4B:0A:76:F6:52:B2:FF:09:81:48:9F:08:4D:E3:1E
            X509v3 Authority Key Identifier:
                keyid:FE:1D:5B:F9:02:FA:91:2D:7E:0B:5E:98:0C:F9:1D:BD:FD:2B:B6:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_h1b-QL6kS1-C16YDPkdvf0rtk8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:bc:9e:9e:f9:1b:27:28:87:02:29:fb:85:3b:dd:4e:54:72:
         e1:0e:e0:99:02:74:ab:bb:0f:3f:30:d1:72:15:b4:c9:92:17:
         97:66:fc:3c:ae:ff:0e:8a:54:31:73:97:6c:89:20:61:03:ea:
         ef:68:33:fb:e2:16:45:8a:06:c8:d5:99:7e:05:15:05:10:a0:
         9d:4d:32:76:e3:f6:80:1d:0c:7c:af:e6:62:d4:f7:78:66:f7:
         4d:b5:dc:be:7e:5e:c1:82:15:b0:85:e7:53:d1:72:4c:8a:c1:
         75:2f:3a:d2:92:f3:78:0e:ca:f3:5c:ce:42:9b:03:6d:1a:c3:
         47:93:36:dd:d6:7c:b7:b7:01:1b:e9:3d:7f:4e:23:52:e0:4a:
         67:c9:25:d3:56:92:fb:5a:30:2f:58:4c:42:d2:71:0e:53:22:
         01:f9:89:5e:b6:e1:72:d7:ec:ec:76:8d:b5:e2:e0:9f:48:cd:
         46:97:6b:11:18:9e:b4:72:e7:b2:80:2b:2c:87:3d:02:61:29:
         79:95:3b:b4:7b:d8:09:7f:40:5a:5d:ad:c3:d3:eb:c0:cf:1a:
         c2:a9:1d:70:cc:55:b6:53:28:27:58:35:ee:bc:1f:f1:f9:42:
         5a:2e:87:30:1c:13:92:c1:47:a2:69:6b:c8:61:45:53:7d:f8:
         6e:56:30:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 06:21:12 2026 by rpki-client