Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft
File:                     n6yKuWoNopKfw9GHG-1vdD6MlXc.mft (raw, json)
Hash identifier:          A3Cz9Lge+f6zhbtSWTwL9r54AHmvXWZfqvtcLNr7D0E=
Subject key identifier:   36:41:C7:A5:A8:EC:96:6F:AD:AB:EA:DF:4B:DD:A8:CF:C0:A0:96:0F
Authority key identifier: 9F:AC:8A:B9:6A:0D:A2:92:9F:C3:D1:87:1B:ED:6F:74:3E:8C:95:77
Certificate issuer:       /CN=A916E2DC/serialNumber=9FAC8AB96A0DA2929FC3D1871BED6F743E8C9577
Certificate serial:       02E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft
Manifest number:          02DD
Signing time:             Wed 23 Sep 2026 01:01:32 +0000
Manifest this update:     Wed 23 Sep 2026 01:01:32 +0000
Manifest next update:     Wed 30 Sep 2026 01:01:32 +0000
Files and hashes:         1: n6yKuWoNopKfw9GHG-1vdD6MlXc.crl (hash: vzdCSAxSig6G7WWO7FMUEXrat4NJHaipGFjRZNesvBI=)
                          2: 6993B4CCD43B11EDA821F80DC4F9AE02.roa (hash: Xk3DoqygD1m1hjIgA00V9juY4iH7z8jLqrYLiGkjieQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.crl
                          rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 01:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 744 (0x2e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E2DC, serialNumber=9FAC8AB96A0DA2929FC3D1871BED6F743E8C9577
        Validity
            Not Before: Sep 23 01:01:32 2026 GMT
            Not After : Sep 30 01:01:32 2026 GMT
        Subject: CN=6ab324ec-3ea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:69:a4:21:6c:f3:40:2a:8a:36:8a:51:bf:49:
                    a0:71:ab:91:4f:fa:70:4a:12:95:28:9c:ef:d3:6d:
                    b0:5a:e9:b8:96:1b:d8:10:fa:a4:3a:e4:37:19:f8:
                    57:30:55:ca:0a:8d:6c:78:c0:1a:e8:6c:73:17:2a:
                    29:d4:97:ba:74:33:e7:95:9e:7c:77:37:6c:40:fc:
                    8e:62:58:e4:f3:2e:df:c1:f7:ab:c4:8b:a9:4f:c2:
                    ba:2c:77:1b:bc:86:a7:7c:ab:ca:55:c2:b1:73:04:
                    50:4f:b8:d1:02:a9:74:ef:34:e8:3e:a7:81:44:02:
                    68:f6:8b:c9:43:dc:6e:a5:74:83:f4:34:1a:9f:61:
                    38:bf:a0:8c:81:1a:c0:89:09:b6:d2:67:bf:30:e4:
                    89:8a:5e:e9:36:6e:ce:7c:47:46:53:ce:4a:66:62:
                    e1:6e:27:ee:19:ab:74:0c:55:c3:9c:72:3a:fe:f5:
                    ac:78:11:78:4c:ef:29:67:f9:fd:64:e8:25:d0:a6:
                    b7:36:dd:5f:a5:25:d3:1a:d5:81:8a:14:fa:88:6f:
                    83:8a:be:77:b6:bd:0f:f6:dc:16:c8:0f:72:40:e7:
                    39:92:e8:78:d5:bd:34:58:e7:13:96:e0:63:33:b1:
                    0e:d2:ee:95:b1:00:02:d1:f8:2d:f2:29:fe:f6:34:
                    fb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:41:C7:A5:A8:EC:96:6F:AD:AB:EA:DF:4B:DD:A8:CF:C0:A0:96:0F
            X509v3 Authority Key Identifier:
                keyid:9F:AC:8A:B9:6A:0D:A2:92:9F:C3:D1:87:1B:ED:6F:74:3E:8C:95:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:15:6b:a4:86:75:30:31:3b:a7:e0:99:7a:7d:5d:93:00:83:
         a2:8d:76:00:38:b6:33:f2:ba:92:43:87:9e:4d:a3:56:cd:7b:
         7c:30:44:e4:dc:5c:76:a6:8c:ae:3f:f6:99:9e:db:cd:ab:f9:
         5d:a3:31:58:e2:34:bc:54:f3:e3:ff:79:23:01:87:23:cd:3f:
         35:ef:20:86:47:2d:6c:ff:f3:b9:a5:22:83:81:3a:ca:36:b0:
         db:0d:8b:62:c9:e5:78:65:3c:85:b7:4a:c8:24:6e:1e:15:66:
         15:d1:a7:3c:6f:ef:3f:e9:ad:ac:95:b2:5f:2d:17:05:40:74:
         c9:7d:44:88:c7:da:fd:84:3c:cb:5e:38:95:d3:72:93:eb:0c:
         30:ab:8d:01:31:c0:63:60:2f:06:56:53:c1:6a:fd:a1:7b:6a:
         25:2b:dc:1f:9d:38:8b:70:d7:f4:0c:94:1d:d6:3d:71:74:a4:
         88:20:48:c7:5a:8a:ea:61:18:91:f6:ae:07:63:e4:fa:24:d2:
         30:11:a6:bd:89:11:13:45:34:7c:49:33:fe:25:24:50:52:4a:
         65:5e:34:46:47:6a:9a:c8:4c:2f:d1:bc:e7:1d:6f:e7:a1:17:
         d8:47:8c:73:52:6c:c8:22:0a:d6:c9:23:ba:00:5a:f5:f6:b8:
         2d:9a:be:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:39:55 2026 by rpki-client