Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft
File:                     C6HFLWJbsbnkQzglDaPWTYBoego.mft (raw, json)
Hash identifier:          wTJSXgYk72GTReQ/IO90KWuWgf7BK2DfJCDWKEM6sNg=
Subject key identifier:   66:48:34:2F:82:10:6B:37:E5:87:42:8E:56:ED:F1:11:3F:05:68:30
Authority key identifier: 0B:A1:C5:2D:62:5B:B1:B9:E4:43:38:25:0D:A3:D6:4D:80:68:7A:0A
Certificate issuer:       /CN=A9140E48/serialNumber=0BA1C52D625BB1B9E44338250DA3D64D80687A0A
Certificate serial:       0638
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6HFLWJbsbnkQzglDaPWTYBoego.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft
Manifest number:          0630
Signing time:             Thu 24 Sep 2026 22:38:16 +0000
Manifest this update:     Thu 24 Sep 2026 22:38:15 +0000
Manifest next update:     Thu 01 Oct 2026 22:38:15 +0000
Files and hashes:         1: C6HFLWJbsbnkQzglDaPWTYBoego.crl (hash: wQJ4DN75kvcogNRZL+krHp6TU2UFdTN8gJ5Ih4NM+TY=)
                          2: D5FFCB96F9D611EB8A9FCE34C4F9AE02.roa (hash: Y4F1ja4wcw1eseQD+81vZYB519DcIWC7aDAimVmHoaw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.crl
                          rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6HFLWJbsbnkQzglDaPWTYBoego.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 22:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1592 (0x638)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140E48, serialNumber=0BA1C52D625BB1B9E44338250DA3D64D80687A0A
        Validity
            Not Before: Sep 24 22:38:15 2026 GMT
            Not After : Oct  1 22:38:15 2026 GMT
        Subject: CN=6ab5a658-04f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0f:89:c1:a2:4c:fc:28:f4:9f:61:2f:5d:47:
                    30:87:a6:79:b8:ec:1d:68:06:77:06:28:dc:8b:54:
                    d9:74:1f:8a:d6:e1:49:d3:a9:fc:4c:04:0e:5e:13:
                    bd:b4:43:05:2c:34:7f:06:2b:e4:f5:3d:20:8b:d5:
                    99:c3:00:8a:e5:6e:22:b1:d4:f9:0b:c7:1f:d1:f7:
                    89:1c:86:74:8b:7b:fe:69:e3:2e:0c:60:13:5b:ff:
                    04:2e:60:a6:85:ef:15:23:a5:7f:4c:fd:e6:92:8a:
                    df:e7:c0:81:f4:03:c2:7c:5e:87:d0:5c:99:8b:09:
                    38:43:69:46:8b:4e:39:87:6f:6e:9f:d8:0e:d8:d6:
                    f7:01:15:46:de:1a:44:d0:b7:e5:53:3b:56:19:44:
                    ca:72:3a:3f:94:e4:d7:4f:60:66:d2:df:54:be:19:
                    b6:55:5b:fc:9d:2a:2b:ad:72:d9:c4:5a:fc:36:8e:
                    43:1b:70:88:ce:0e:d5:97:42:1e:d8:93:e3:5c:79:
                    d6:cb:b8:60:f9:fd:b8:2a:21:a6:db:23:9c:b5:7c:
                    d3:fe:ce:a8:4c:2c:b8:99:87:1e:4d:fe:ea:5a:88:
                    6c:72:8d:2f:c3:43:64:f5:78:20:84:3c:c1:4a:11:
                    b8:52:43:cb:25:6d:ff:cc:b5:fe:ba:90:4d:0c:05:
                    7c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:48:34:2F:82:10:6B:37:E5:87:42:8E:56:ED:F1:11:3F:05:68:30
            X509v3 Authority Key Identifier:
                keyid:0B:A1:C5:2D:62:5B:B1:B9:E4:43:38:25:0D:A3:D6:4D:80:68:7A:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6HFLWJbsbnkQzglDaPWTYBoego.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:22:fd:79:ba:75:2d:00:6a:e7:86:97:3e:c1:9e:6a:5b:4e:
         ad:3f:f0:e4:79:fd:43:6e:f8:fe:f9:1e:7e:10:bd:4a:8a:5d:
         13:b5:4e:da:c1:af:e0:b4:2b:4e:ab:d8:69:b6:09:35:f1:5b:
         85:e1:e5:7c:96:aa:55:3c:98:3c:d7:42:8f:ab:b3:dd:e6:63:
         2f:45:93:fc:da:91:06:a4:9a:23:63:f2:b1:3f:a1:89:fb:a6:
         f0:aa:b1:f6:86:f7:3d:3c:37:c3:71:d8:d7:24:f5:81:5d:3f:
         b8:c7:8a:ab:c4:ba:b9:6d:1f:5f:21:07:a0:33:f6:07:1e:f5:
         4b:c3:8a:03:3b:36:b0:93:9e:f6:56:3d:a3:96:ec:c6:06:a4:
         33:3f:0a:6f:9f:e0:b3:d3:40:ae:e0:88:93:f8:cd:ab:f4:a8:
         d0:29:ff:df:96:ce:62:31:57:83:99:8e:e0:f5:d3:c8:2e:c7:
         3b:6a:72:a0:1a:06:eb:52:99:99:93:1c:f0:de:35:a3:7e:59:
         9a:a5:55:72:91:01:c8:df:0d:df:2c:82:f2:1c:68:51:8e:3d:
         b9:ef:87:aa:95:c0:c7:d8:d4:6e:b7:47:f8:19:18:1a:02:5e:
         23:3f:60:dd:f5:14:12:f9:ef:08:ca:b0:2f:16:66:3c:ce:91:
         87:fc:34:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:45:30 2026 by rpki-client