Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft
File:                     6q7GCbncI1xGucXxvKPNvsf_7ig.mft (raw, json)
Hash identifier:          UDWJNPRW4gXw6Wm7ynPoCR1lp+RcmNF3nqdgrFDCsos=
Subject key identifier:   40:F4:A9:27:E3:E6:81:4E:2A:17:00:83:4E:75:82:28:EB:68:74:69
Authority key identifier: EA:AE:C6:09:B9:DC:23:5C:46:B9:C5:F1:BC:A3:CD:BE:C7:FF:EE:28
Certificate issuer:       /CN=A917A82D/serialNumber=EAAEC609B9DC235C46B9C5F1BCA3CDBEC7FFEE28
Certificate serial:       0D43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft
Manifest number:          0D20
Signing time:             Fri 02 Oct 2026 18:36:11 +0000
Manifest this update:     Fri 02 Oct 2026 18:36:10 +0000
Manifest next update:     Fri 09 Oct 2026 18:36:10 +0000
Files and hashes:         1: 6q7GCbncI1xGucXxvKPNvsf_7ig.crl (hash: 9mxzKCB/choaM+Y82dP2iIAnAM4rh/x9mO8ByOzM3Dk=)
                          2: 403FDDD0DF3511ED8FBA823DC4F9AE02.roa (hash: ZcreYCpZyWSjMYdhO/BQNJ+N4twNtDLduQjxj+MFalE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.crl
                          rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 18:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3395 (0xd43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A82D, serialNumber=EAAEC609B9DC235C46B9C5F1BCA3CDBEC7FFEE28
        Validity
            Not Before: Oct  2 18:36:10 2026 GMT
            Not After : Oct  9 18:36:10 2026 GMT
        Subject: CN=6abff99b-54ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3a:53:c7:a3:e9:64:06:7e:43:0f:af:5e:b5:
                    74:f1:2e:14:c7:de:6b:4f:42:08:fb:46:1a:96:e8:
                    bd:29:32:e2:2f:e1:22:e8:ef:8d:79:4a:07:14:dc:
                    6d:6a:b8:1e:c5:ff:07:6c:2a:d9:32:90:bc:a0:89:
                    fd:7b:e2:ae:27:91:15:36:d4:67:0f:f1:11:8f:70:
                    ae:ea:d1:53:c3:42:32:80:b2:9f:d9:f6:27:ed:5a:
                    ed:bd:29:ae:05:27:8c:a0:5d:67:64:9d:c2:3c:f2:
                    3d:a7:5a:7c:bf:b3:ce:d1:33:9b:9f:2a:f7:c0:2b:
                    08:cc:8c:f9:82:c6:84:5b:ac:88:b2:3f:1e:c3:8d:
                    d6:d3:4a:8a:3e:46:73:99:dc:89:b8:5c:d5:c6:75:
                    01:aa:c3:e1:5b:0b:be:e5:d5:4c:04:5c:ce:f7:40:
                    32:19:78:c7:d8:2f:0f:61:ba:6c:e9:f6:82:dc:1f:
                    66:8b:f8:30:25:17:f1:e3:18:c4:58:1c:36:fd:37:
                    53:96:81:59:86:74:69:06:95:03:3e:7b:cd:ef:15:
                    40:d1:52:b3:7a:75:6e:cd:69:28:26:8b:e8:2f:72:
                    ff:3c:ca:48:e1:e5:0b:19:09:b9:70:5c:fb:d2:58:
                    f0:48:3e:be:dd:de:44:c4:94:c5:fa:68:97:1b:d1:
                    d9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F4:A9:27:E3:E6:81:4E:2A:17:00:83:4E:75:82:28:EB:68:74:69
            X509v3 Authority Key Identifier:
                keyid:EA:AE:C6:09:B9:DC:23:5C:46:B9:C5:F1:BC:A3:CD:BE:C7:FF:EE:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:47:7e:1b:8c:73:07:fc:ec:e5:d3:3d:61:3c:b4:f0:b5:79:
         e0:90:42:5a:f9:26:72:67:0f:97:b5:05:df:13:98:79:f2:ed:
         97:11:de:55:44:10:c8:33:33:04:c3:89:12:3f:bc:74:19:26:
         66:4f:96:25:c4:a3:b2:b5:47:84:d1:8b:33:ed:c5:27:4f:41:
         0d:0b:4c:e3:6f:b1:52:ff:af:a7:43:6a:dc:74:3d:94:04:82:
         5d:2c:7b:d9:b7:e6:e7:b1:1a:44:4e:b2:5d:d5:79:21:7f:cb:
         25:12:cd:c0:e1:bd:8a:35:91:f9:f5:f9:be:40:44:12:5c:49:
         02:e1:5c:2e:6c:06:41:36:9d:77:57:59:04:69:e5:e0:5f:73:
         1f:f2:41:9f:df:fb:de:cd:f6:65:cd:a3:3a:d1:8a:dc:d9:ef:
         e6:b8:2a:9c:69:92:6b:59:66:b3:ea:fa:c3:1c:97:7d:41:22:
         fd:9b:1f:90:03:6e:78:aa:2b:7c:33:0c:a7:e2:0b:0e:6b:a1:
         b9:3b:37:3d:7f:98:69:ca:fa:9b:62:84:66:10:ea:4a:49:d6:
         8f:1d:21:aa:25:85:e7:c0:c8:33:d1:7b:63:8e:18:a7:7f:c4:
         17:80:2e:05:08:a8:ca:5a:7e:69:ec:59:56:fc:6a:7b:c3:0f:
         fb:4b:f4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:12:14 2026 by rpki-client