Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft
File:                     M6OypTA7URezLn5FhqypRAiRh0I.mft (raw, json)
Hash identifier:          8F2iAnvz8GPRBBe9ZNO8vwGT5NDPjRZTfWrvi2jpgFY=
Subject key identifier:   23:10:6B:3B:3A:83:EA:84:A7:66:62:CB:AE:59:A4:59:94:49:6B:C2
Authority key identifier: 33:A3:B2:A5:30:3B:51:17:B3:2E:7E:45:86:AC:A9:44:08:91:87:42
Certificate issuer:       /CN=A914BBEF/serialNumber=33A3B2A5303B5117B32E7E4586ACA94408918742
Certificate serial:       0CC9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6OypTA7URezLn5FhqypRAiRh0I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft
Manifest number:          0CBD
Signing time:             Sat 10 Oct 2026 18:36:03 +0000
Manifest this update:     Sat 10 Oct 2026 18:36:02 +0000
Manifest next update:     Sat 17 Oct 2026 18:36:02 +0000
Files and hashes:         1: M6OypTA7URezLn5FhqypRAiRh0I.crl (hash: o4oU8dwf4J6lA1wvfUKW2xi8oF9IzLKAEOIkZExEivE=)
                          2: 9E48E9821FB011EAAD480012C4F9AE02.roa (hash: 8VC3Iar+Y3S8HPOKyWalo2kgaJJ+RCJUC6oDDTxpM3A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.crl
                          rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6OypTA7URezLn5FhqypRAiRh0I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 18:36:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3273 (0xcc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BBEF, serialNumber=33A3B2A5303B5117B32E7E4586ACA94408918742
        Validity
            Not Before: Oct 10 18:36:02 2026 GMT
            Not After : Oct 17 18:36:02 2026 GMT
        Subject: CN=6aca8593-4bdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:86:86:36:f5:e2:df:b5:59:b3:6c:6c:45:2a:
                    6f:f9:86:e2:9f:61:26:fe:de:12:d6:2f:59:f5:37:
                    5c:ef:55:c6:17:f8:c1:76:6f:2a:e7:35:79:1f:52:
                    6a:4f:b0:99:2c:99:d0:62:64:16:c5:c6:69:65:1b:
                    3c:99:7f:32:f7:3c:44:c4:b5:a4:f9:4e:bc:21:d6:
                    29:33:27:e5:cc:32:78:68:3b:93:5e:c5:15:ab:4a:
                    65:72:c2:73:9e:64:97:b3:58:35:97:fd:ce:89:97:
                    b5:1b:27:a7:ed:c8:c6:a2:33:de:b5:94:df:c6:0a:
                    9c:0b:b4:9b:38:47:eb:d0:4d:25:f8:b9:a7:5e:8b:
                    55:cb:13:a7:a1:58:32:36:c2:04:2f:9c:e9:76:4c:
                    6e:58:bd:ca:dc:18:c1:4d:81:39:a5:b0:9e:f1:a3:
                    c6:4d:73:7e:a5:84:a8:ac:69:ff:8e:93:94:25:35:
                    a6:da:91:8e:36:31:f9:48:05:5d:74:7c:bf:2a:f6:
                    32:75:f4:ea:8d:0f:eb:8d:5f:0d:6a:f1:29:7d:8a:
                    67:a1:9d:fa:c3:70:c7:15:30:8a:68:3e:84:b2:1a:
                    fb:d0:e6:1b:a5:da:df:13:37:33:d7:66:72:ea:7f:
                    55:bc:4b:f6:7d:74:a5:1d:e7:d7:da:f9:0a:73:1e:
                    aa:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:10:6B:3B:3A:83:EA:84:A7:66:62:CB:AE:59:A4:59:94:49:6B:C2
            X509v3 Authority Key Identifier:
                keyid:33:A3:B2:A5:30:3B:51:17:B3:2E:7E:45:86:AC:A9:44:08:91:87:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6OypTA7URezLn5FhqypRAiRh0I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:b0:37:55:bf:39:d7:e1:dc:39:57:0f:a0:f0:c7:d5:7c:2c:
         b0:c6:d6:bd:1a:1e:e4:50:02:45:b0:4c:b2:84:8c:0b:5f:e4:
         69:12:a4:10:78:13:15:d6:2d:df:2b:1f:73:e5:cb:27:78:6d:
         a5:e8:cc:21:6f:c7:5a:4a:89:08:20:e0:0b:ae:bc:3b:2a:c0:
         3f:b4:59:33:13:b6:0c:96:fc:b8:4f:db:a7:3c:fd:a0:d7:10:
         c6:aa:b5:5b:f8:f4:ff:66:54:42:1f:f3:1d:e7:7d:c0:09:30:
         d8:25:7e:1a:34:22:dc:2b:15:4b:7b:9d:71:5f:99:0a:39:52:
         15:5a:3c:6d:81:1a:07:ba:e8:3c:c7:1f:a5:58:07:3a:7c:73:
         e8:24:c7:37:02:0b:97:94:36:04:08:bd:29:13:ab:a9:b6:5c:
         5c:e1:2c:fb:1e:72:b5:3c:8b:14:e1:aa:7c:26:94:04:73:ad:
         93:b7:c4:f9:0f:c2:ef:c6:bc:57:ec:ff:f6:15:e6:7f:0a:d8:
         85:da:81:d3:3d:e1:32:5b:4b:9d:88:f7:94:f2:af:df:42:0c:
         55:1b:e6:94:33:42:28:41:62:89:f7:4f:34:20:15:bb:ec:d7:
         0f:58:05:d6:8b:48:dc:2d:50:4a:d3:2f:6a:1d:d4:98:33:92:
         3a:c3:ad:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:29:00 2026 by rpki-client