Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9141292/03931D4A6C4D11F1A8AAF10C6647A888/s6JcY1RwDlrrpk9RuuXhyFJ8wl4.mft
File:                     s6JcY1RwDlrrpk9RuuXhyFJ8wl4.mft (raw, json)
Hash identifier:          5DmyxQxyUb6PuIaDrsdOAhCBfgfgV+Rt6Dp3xEErfxg=
Subject key identifier:   17:43:07:A5:CC:CD:E1:DE:3E:46:FF:6D:BB:90:72:2B:C5:08:30:F7
Authority key identifier: B3:A2:5C:63:54:70:0E:5A:EB:A6:4F:51:BA:E5:E1:C8:52:7C:C2:5E
Certificate issuer:       /CN=A9141292/serialNumber=B3A25C6354700E5AEBA64F51BAE5E1C8527CC25E
Certificate serial:       40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s6JcY1RwDlrrpk9RuuXhyFJ8wl4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141292/03931D4A6C4D11F1A8AAF10C6647A888/s6JcY1RwDlrrpk9RuuXhyFJ8wl4.mft
Manifest number:          3F
Signing time:             Tue 13 Oct 2026 09:19:22 +0000
Manifest this update:     Tue 13 Oct 2026 09:19:21 +0000
Manifest next update:     Tue 20 Oct 2026 09:19:21 +0000
Files and hashes:         1: s6JcY1RwDlrrpk9RuuXhyFJ8wl4.crl (hash: BvwXbeuNcYQIdjtQv0QyaDvHW8dCWUORvwpXl+Xlr30=)
                          2: AE3AF652985611F19F9DCE754C11F970.roa (hash: jFbrBBBTbOxx4u9Zm1gwWIVaCSiZ62l036MMVRa+NCs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141292/03931D4A6C4D11F1A8AAF10C6647A888/s6JcY1RwDlrrpk9RuuXhyFJ8wl4.crl
                          rsync://rpki.apnic.net/member_repository/A9141292/03931D4A6C4D11F1A8AAF10C6647A888/s6JcY1RwDlrrpk9RuuXhyFJ8wl4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s6JcY1RwDlrrpk9RuuXhyFJ8wl4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 09:19:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141292, serialNumber=B3A25C6354700E5AEBA64F51BAE5E1C8527CC25E
        Validity
            Not Before: Oct 13 09:19:21 2026 GMT
            Not After : Oct 20 09:19:21 2026 GMT
        Subject: CN=6acdf79a-b96f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4e:bb:bb:96:f7:63:08:af:d1:5a:02:38:a1:
                    0f:64:1e:4d:9e:a9:c7:88:b8:0e:9c:39:be:0e:80:
                    2c:1d:94:6f:7f:1a:4c:c1:0f:2a:36:4f:9b:10:80:
                    3c:fb:4c:47:6b:3b:88:b2:1f:d2:81:fd:98:a0:6c:
                    11:a6:89:ae:34:5c:f4:88:bb:d4:c0:c2:20:bf:2f:
                    c0:c4:8e:77:0f:79:90:bd:e7:ce:ba:e7:2d:78:5e:
                    7b:5b:4e:4a:b2:31:de:8c:10:f0:4d:4f:b2:63:6d:
                    86:7a:ed:b4:03:ac:58:05:ad:9a:ac:77:6d:4d:0b:
                    9a:93:4b:0a:9e:7e:10:b8:0d:11:e4:18:e0:25:81:
                    db:dd:fa:ff:db:ff:95:36:b9:51:e8:02:4f:85:5b:
                    7f:11:b3:40:8b:d1:30:1a:ce:04:a2:51:17:b4:a0:
                    fa:02:56:5a:15:43:ae:40:85:94:61:ba:19:0c:b4:
                    0e:6b:27:fd:4d:dd:79:af:cf:9b:5d:dd:c6:36:89:
                    6a:36:6f:aa:a2:0e:a0:30:88:c4:87:70:3e:ae:27:
                    a6:6a:5f:e8:4e:05:27:a9:70:e4:07:9f:db:1c:68:
                    bc:6c:c3:bc:fb:fe:31:9c:6f:a3:d5:0f:2b:18:b1:
                    07:d5:7d:86:a0:9c:7f:16:f0:7e:c7:8c:d2:9c:d1:
                    71:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:43:07:A5:CC:CD:E1:DE:3E:46:FF:6D:BB:90:72:2B:C5:08:30:F7
            X509v3 Authority Key Identifier:
                keyid:B3:A2:5C:63:54:70:0E:5A:EB:A6:4F:51:BA:E5:E1:C8:52:7C:C2:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141292/03931D4A6C4D11F1A8AAF10C6647A888/s6JcY1RwDlrrpk9RuuXhyFJ8wl4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s6JcY1RwDlrrpk9RuuXhyFJ8wl4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141292/03931D4A6C4D11F1A8AAF10C6647A888/s6JcY1RwDlrrpk9RuuXhyFJ8wl4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:e8:12:16:c5:fa:54:e8:91:58:4a:40:1f:eb:3d:c2:8d:b1:
         12:85:92:77:9e:b9:d6:4b:25:69:52:7f:da:34:a5:13:df:05:
         23:40:31:b5:65:b5:f7:d8:38:65:58:6b:5f:4f:9c:b2:8b:d6:
         15:56:b1:86:23:42:81:12:e5:9c:31:82:d6:9f:d7:6a:82:ee:
         36:25:73:16:dc:5c:e4:fb:63:c2:f3:d2:8e:23:61:13:6a:22:
         e8:26:9d:23:47:15:78:9d:8b:a7:e5:71:05:b7:b1:3d:14:db:
         bb:64:03:fa:ca:16:1a:47:b8:88:eb:45:6d:56:1a:c0:20:9d:
         ed:57:bb:f2:31:49:db:76:48:24:4c:65:ce:ec:d0:0b:bb:0a:
         20:2e:e2:62:c6:aa:d9:ab:35:2d:23:48:39:f0:68:b9:bd:8f:
         b7:a0:a8:52:17:29:34:0a:c9:ce:be:b7:88:80:36:35:31:7f:
         d4:c6:70:63:dc:30:62:d8:bd:c8:84:28:58:a7:eb:6b:c4:77:
         82:51:7e:69:44:20:cc:a8:20:f1:23:9b:d9:fb:1d:7c:9c:06:
         c2:8c:f9:52:a6:2b:46:73:fe:2e:64:78:48:24:29:5a:32:da:
         66:0f:11:a3:8b:82:74:4f:d3:30:c2:e3:06:14:c3:cd:b8:9a:
         70:76:88:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:40:34 2026 by rpki-client