Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft
File:                     k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft (raw, json)
Hash identifier:          BeVZ62ijzE3anRk/Yq65nyal2Sxizml91oL0xpJXJ+s=
Subject key identifier:   9E:A0:7E:3A:F8:CC:4D:8F:E7:26:B8:50:06:E8:F4:35:10:3E:4E:63
Authority key identifier: 93:A7:D8:35:E1:38:58:BB:59:95:1C:39:9A:5F:9E:AB:0E:2E:B9:31
Certificate issuer:       /CN=A91100B2/serialNumber=93A7D835E13858BB59951C399A5F9EAB0E2EB931
Certificate serial:       083D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6fYNeE4WLtZlRw5ml-eqw4uuTE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft
Manifest number:          1333
Signing time:             Thu 24 Sep 2026 19:17:21 +0000
Manifest this update:     Thu 24 Sep 2026 19:17:21 +0000
Manifest next update:     Thu 01 Oct 2026 19:17:21 +0000
Files and hashes:         1: k6fYNeE4WLtZlRw5ml-eqw4uuTE.crl (hash: v3TLfQzEg8wXABoiXiyRImOJCMfpWO9zuzyvzS/VsOE=)
                          2: 6EA6EB5A355011EBAAB1E56EC4F9AE02.roa (hash: LwJPI6nfsdC0VxNhRepAlsHVCIOUuNDvAHykCwTVC8Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.crl
                          rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6fYNeE4WLtZlRw5ml-eqw4uuTE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 19:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2109 (0x83d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91100B2, serialNumber=93A7D835E13858BB59951C399A5F9EAB0E2EB931
        Validity
            Not Before: Sep 24 19:17:21 2026 GMT
            Not After : Oct  1 19:17:21 2026 GMT
        Subject: CN=6ab57741-f851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ec:b2:21:f2:62:65:c4:8d:c1:5b:a9:22:b3:
                    c5:2e:73:20:fd:46:b9:fa:8b:84:df:10:1f:91:e4:
                    65:06:a4:1c:fb:7f:36:2f:62:8d:10:db:b8:0b:97:
                    8b:df:c7:5b:82:95:cf:bf:21:c9:db:33:3d:fc:72:
                    ff:be:bc:3d:ee:61:b5:3f:0c:f6:50:da:0c:bf:6a:
                    95:6e:7f:ec:16:91:06:7f:0d:d5:00:90:a6:1c:d3:
                    a0:ff:9a:50:26:45:de:df:a7:5a:e8:c4:47:02:fe:
                    fa:51:3f:13:af:80:1a:6b:da:48:21:a4:8f:a2:fc:
                    eb:d2:c0:9b:e5:65:78:fe:a0:c7:ac:0c:06:a9:a1:
                    4d:b6:b4:2f:79:da:86:c2:b4:1f:7c:97:89:4b:77:
                    2b:fb:c4:93:f1:32:5e:1a:97:cf:48:43:2c:b2:02:
                    04:79:a6:b8:d5:7f:c0:c4:00:af:05:6f:9e:8a:d8:
                    5e:29:11:4a:75:f2:45:3a:80:da:6a:68:ec:b1:7c:
                    3d:76:6d:16:e2:06:82:af:7a:fe:d9:2f:f8:79:e9:
                    55:e8:7e:ed:40:64:f6:da:9c:2f:e3:7f:ed:58:57:
                    53:f0:76:ca:6b:09:74:25:c8:4c:8d:70:1b:cf:63:
                    5d:3d:b9:d1:56:f7:97:ab:ac:c2:82:c6:6f:53:c4:
                    18:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A0:7E:3A:F8:CC:4D:8F:E7:26:B8:50:06:E8:F4:35:10:3E:4E:63
            X509v3 Authority Key Identifier:
                keyid:93:A7:D8:35:E1:38:58:BB:59:95:1C:39:9A:5F:9E:AB:0E:2E:B9:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6fYNeE4WLtZlRw5ml-eqw4uuTE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:f1:8a:17:43:6f:a3:c2:88:4a:2a:84:b2:18:68:0f:7e:1d:
         5c:2a:7e:6d:eb:37:2d:7e:5a:82:18:24:7e:e0:35:b9:05:34:
         7d:fb:e2:b6:9c:3e:7a:e5:e7:96:90:bf:91:3b:89:b8:de:ad:
         d2:98:b3:83:a2:08:38:5b:15:3c:54:eb:e6:f1:20:f7:5b:34:
         53:38:91:3d:5e:c0:58:9d:41:8b:1a:db:d1:36:9e:f2:ba:14:
         d1:ad:39:75:d9:7a:35:d1:19:18:f5:35:43:63:69:6c:96:2c:
         90:9a:b9:94:bd:77:72:e9:70:df:0d:62:33:f5:50:65:a2:2b:
         a4:ff:d0:b1:d2:ca:3c:90:ba:74:a1:17:5a:7c:1e:09:c4:71:
         67:cb:9b:03:e3:12:93:ff:e0:d2:f4:45:c5:bf:71:d9:35:dc:
         57:44:75:0a:22:d6:40:1c:23:e2:ce:2f:c2:69:a8:3c:b4:01:
         70:93:26:7a:90:21:f8:51:3f:28:bf:6e:6b:32:68:cd:ed:45:
         f6:9b:a2:d7:c4:fa:eb:c6:cc:19:96:31:27:fc:b5:f5:bc:b2:
         9b:94:c0:e9:cb:01:e3:31:60:01:47:9f:a6:fd:83:d7:a6:ab:
         0e:8d:04:6b:9c:39:f4:51:a1:da:48:32:09:d9:c8:89:fc:24:
         8a:6a:0b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:29:37 2026 by rpki-client