Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft
File:                     J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft (raw, json)
Hash identifier:          NxxVCbpMijhDGQGgs4UYaOv4xz54jSjaMbztx9//srk=
Subject key identifier:   BD:6C:C5:DB:06:AB:83:12:14:0F:57:45:AD:BA:12:33:88:B4:5C:8F
Authority key identifier: 27:A0:A2:DD:F3:5C:19:7D:4F:C2:62:90:C2:95:7D:49:68:CF:15:8F
Certificate issuer:       /CN=A917A2E5/serialNumber=27A0A2DDF35C197D4FC26290C2957D4968CF158F
Certificate serial:       C7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft
Manifest number:          C4
Signing time:             Wed 23 Sep 2026 06:36:33 +0000
Manifest this update:     Wed 23 Sep 2026 06:36:32 +0000
Manifest next update:     Wed 30 Sep 2026 06:36:32 +0000
Files and hashes:         1: J6Ci3fNcGX1PwmKQwpV9SWjPFY8.crl (hash: jVKRbeQdA31aZqVN6NU3DHC4E7ceWhx5dOyVJDV8qcU=)
                          2: 173F9AAC8C9811F0B7F99E73C4F9AE02.roa (hash: 2CLzGrfhQG/2tyHnpnUSdgFVCTpX5x8JNV+LDRDqVbk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.crl
                          rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 06:36:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A2E5, serialNumber=27A0A2DDF35C197D4FC26290C2957D4968CF158F
        Validity
            Not Before: Sep 23 06:36:32 2026 GMT
            Not After : Sep 30 06:36:32 2026 GMT
        Subject: CN=6ab37371-3937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d3:5d:fc:c0:f6:20:1f:a5:33:89:2b:04:bb:
                    e3:94:81:f1:94:72:2b:08:61:a7:0d:1c:07:ee:51:
                    e2:be:f7:38:ad:b7:fb:e2:d6:16:94:54:c1:5d:18:
                    04:a8:8b:2b:ed:6e:0a:48:d4:a1:e2:ed:59:df:6f:
                    ee:cd:57:c8:2f:50:70:c9:52:d3:89:9b:b5:f4:d4:
                    69:f6:6a:35:24:b7:9b:42:9e:5e:8f:b4:11:b2:5a:
                    6e:40:71:b5:22:e9:e2:86:98:0b:d5:a7:20:ae:72:
                    96:e8:26:bf:76:32:46:d4:4e:2b:c9:28:69:a7:37:
                    17:03:e2:31:36:16:a4:10:a2:c5:e6:bc:e9:52:d4:
                    07:41:c7:b7:a5:fe:21:ca:d7:46:f7:ce:8d:c9:46:
                    ef:7d:fb:95:61:4d:fe:b0:2c:69:5c:f9:32:58:4e:
                    30:1a:85:ee:4e:b8:5c:e1:44:da:cc:a5:59:c7:40:
                    67:3b:0b:86:af:3b:6e:f6:f6:8b:1c:e9:13:23:ef:
                    3e:9a:43:e3:cf:01:e4:9c:4b:62:5a:79:d7:43:d5:
                    34:b7:54:df:6b:95:ac:9e:5a:ae:71:28:da:6f:fd:
                    97:ae:66:ee:ae:b4:a7:37:4d:19:0a:d1:f6:26:6f:
                    52:dd:b1:c9:5b:8a:e1:6a:12:3f:91:95:bc:89:d6:
                    e9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:6C:C5:DB:06:AB:83:12:14:0F:57:45:AD:BA:12:33:88:B4:5C:8F
            X509v3 Authority Key Identifier:
                keyid:27:A0:A2:DD:F3:5C:19:7D:4F:C2:62:90:C2:95:7D:49:68:CF:15:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:a2:05:e9:e1:0a:fe:2e:c5:dd:5d:60:68:81:ec:87:ec:09:
         9b:1a:1a:bf:ef:9d:a8:3e:26:3f:07:b9:53:1b:dd:18:2b:06:
         0c:fb:bd:47:d5:cb:20:92:ff:f6:3d:e2:8c:c7:75:ad:68:48:
         d9:ab:41:78:6f:bc:5b:cd:9e:86:58:fa:94:97:e1:9e:83:7a:
         be:d3:0d:58:50:3b:9b:b4:2e:a6:07:db:c0:53:74:51:e1:27:
         6e:8d:e3:5d:c0:42:fa:d5:9c:e3:47:6b:a1:36:24:be:b5:0c:
         c8:7e:7a:35:55:6c:7b:b4:a9:ba:1e:e5:a1:26:fb:a6:ff:65:
         43:dc:a3:5a:89:39:ee:14:70:74:76:74:e1:73:e0:85:fa:67:
         e7:a5:56:e9:1d:94:0e:ba:db:c6:2e:35:72:fe:63:9e:54:54:
         10:86:d2:b9:cf:52:25:2b:54:02:73:5f:26:93:18:df:6f:7d:
         24:2d:13:a0:1f:2b:92:aa:93:f8:1c:e6:ac:bc:50:e0:63:46:
         19:f5:65:ef:cc:8a:ff:38:36:06:a8:69:b9:bf:ce:79:32:b5:
         d9:35:20:1d:d3:1c:a3:db:7f:63:24:57:ea:01:00:e5:13:d4:
         d5:0c:77:7c:4e:e7:c1:ac:a0:a8:88:0d:36:b7:e1:de:63:7d:
         0d:6a:3f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:06:31 2026 by rpki-client