Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
File:                     6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft (raw, json)
Hash identifier:          tllnbj1TgszYvKGJ91ZB+Z1sC54aABXzaHuO6vp7riw=
Subject key identifier:   B5:47:8C:3B:49:44:A1:B6:63:0B:0C:EF:81:6C:41:F2:4A:29:D4:8D
Authority key identifier: E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A
Certificate issuer:       /CN=A9171560/serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A
Certificate serial:       0E0B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
Manifest number:          0DFC
Signing time:             Thu 08 Oct 2026 17:57:25 +0000
Manifest this update:     Thu 08 Oct 2026 17:57:24 +0000
Manifest next update:     Thu 15 Oct 2026 17:57:24 +0000
Files and hashes:         1: 6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl (hash: uNQZEt5VGRLr0PznxTYaN7xk7dRM4thn8ROoUTQL/2U=)
                          2: 65AF30D422D211EAB3ABA447C4F9AE02.roa (hash: SpbIbEkDahuE0FpgXQMAQxNKykLsdisk7Ee0ynoLpdc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl
                          rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 17:57:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3595 (0xe0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171560, serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A
        Validity
            Not Before: Oct  8 17:57:24 2026 GMT
            Not After : Oct 15 17:57:24 2026 GMT
        Subject: CN=6ac7d985-b4ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ea:b6:81:04:ee:40:5f:b3:fe:ab:70:0a:39:
                    a3:69:30:8b:97:62:fd:de:b1:cb:0a:34:9e:26:38:
                    e9:dd:77:19:f0:b0:59:9c:c2:10:d5:9b:a6:20:d5:
                    52:66:8a:25:aa:56:5c:7d:68:cc:31:88:14:13:c8:
                    ce:28:46:2a:93:00:04:ad:05:c1:11:0c:eb:f2:14:
                    f0:3f:e9:65:b4:27:4e:0c:3e:4d:c1:c5:8d:72:89:
                    08:91:0e:40:78:0a:b2:74:49:0e:fb:eb:5c:b5:0d:
                    37:80:1b:8c:30:02:ae:07:7c:25:ee:a9:26:94:aa:
                    37:16:ac:e7:20:e5:c5:8f:2d:e7:fd:31:de:2c:0d:
                    3c:71:af:ab:1a:90:41:9a:45:6f:e5:47:47:7c:f5:
                    36:8a:7e:48:ae:7d:94:81:e6:2e:1a:53:36:12:7c:
                    0c:b5:2e:13:5b:40:c4:a6:84:f5:01:fd:90:0b:00:
                    fe:54:4c:09:7a:13:0a:6a:85:15:4a:33:4c:5c:64:
                    d3:ad:cd:33:68:19:c8:1c:f3:ea:eb:6e:c9:9b:dc:
                    28:cf:e5:92:8d:cd:88:a3:d2:37:c0:06:3e:af:2b:
                    1c:3f:a7:73:02:5f:08:7a:81:2d:c2:79:7f:2a:b0:
                    a8:0b:89:e2:39:40:2e:37:08:4c:82:8b:f1:72:cc:
                    c3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:47:8C:3B:49:44:A1:B6:63:0B:0C:EF:81:6C:41:F2:4A:29:D4:8D
            X509v3 Authority Key Identifier:
                keyid:E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:17:21:6f:56:d8:0d:9c:96:9f:ba:16:c9:16:cb:16:57:d3:
         36:fb:8c:95:86:4e:22:49:04:13:ce:32:b4:80:db:61:ed:6c:
         f4:da:96:e2:a0:08:37:84:7b:cb:b4:65:30:29:c0:f0:7f:eb:
         56:bb:58:31:ac:c4:cd:af:da:d7:d6:1b:6d:ee:87:ce:9a:ee:
         da:22:17:57:05:2b:f4:dd:8f:af:6e:f0:cb:0c:c7:68:12:71:
         23:9e:f4:d8:52:6c:cd:32:cd:28:98:0e:bb:0d:53:b5:3a:2a:
         cd:f3:e5:a8:06:ae:2f:65:f6:83:26:60:14:ff:f6:2b:c3:1e:
         2d:24:ac:26:43:b5:21:42:15:8b:c3:6b:a8:60:54:53:37:e0:
         b8:98:b7:4c:3f:95:5b:c9:50:56:b1:e9:ad:74:e5:b1:53:72:
         26:7e:7a:36:b7:07:57:71:50:0b:0c:bc:42:fb:8e:2e:3c:65:
         b4:ef:11:83:94:a1:8b:b4:86:7d:96:a1:b0:1a:3a:ab:ce:d3:
         d1:6a:2f:17:55:6c:1d:8d:a0:23:4d:c4:fa:34:a4:b2:d0:bd:
         bb:c5:e6:04:fa:dc:ca:29:20:a6:ee:4f:15:58:ff:19:a3:25:
         82:9f:d2:80:2b:f2:50:52:06:7e:08:ec:35:e5:32:90:41:cb:
         3d:f9:38:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:00:41 2026 by rpki-client