Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft
File:                     6qltynQw36Rxyim4Q4NsHIDlQ54.mft (raw, json)
Hash identifier:          V0+K1OV9akqFOewjlKxrdpZjC+ie/f3Ji1BaoEhufGs=
Subject key identifier:   B6:66:15:B1:18:87:D8:FC:A3:8D:2C:9A:E9:E8:B2:6A:A4:ED:1D:1D
Authority key identifier: EA:A9:6D:CA:74:30:DF:A4:71:CA:29:B8:43:83:6C:1C:80:E5:43:9E
Certificate issuer:       /CN=A91BB87C/serialNumber=EAA96DCA7430DFA471CA29B843836C1C80E5439E
Certificate serial:       0D9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qltynQw36Rxyim4Q4NsHIDlQ54.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft
Manifest number:          0D86
Signing time:             Tue 06 Oct 2026 18:05:37 +0000
Manifest this update:     Tue 06 Oct 2026 18:05:36 +0000
Manifest next update:     Tue 13 Oct 2026 18:05:36 +0000
Files and hashes:         1: 6qltynQw36Rxyim4Q4NsHIDlQ54.crl (hash: 4EIRjR70AaR50E8nZ6PSh1B2xmBX/JmJ1WYugpLXfp0=)
                          2: 5B01916AD15911EE8B8BB151C4F9AE02.roa (hash: RnS0uz9BUOtWm3F3mS8GZ7GfATfkcQHGMPASQ820wCU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.crl
                          rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qltynQw36Rxyim4Q4NsHIDlQ54.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 18:05:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3485 (0xd9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB87C, serialNumber=EAA96DCA7430DFA471CA29B843836C1C80E5439E
        Validity
            Not Before: Oct  6 18:05:36 2026 GMT
            Not After : Oct 13 18:05:36 2026 GMT
        Subject: CN=6ac53870-af22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3d:2f:33:46:18:9d:d8:40:44:88:69:a6:18:
                    db:be:cf:b0:36:f9:f3:f4:5f:4a:05:e2:5a:c2:25:
                    b1:ff:f0:89:1d:22:42:48:f6:92:73:55:93:28:e1:
                    32:4d:81:1b:12:ef:de:43:1c:3d:bb:2b:18:fd:82:
                    8e:b6:d5:c1:4f:28:f7:a7:f6:6d:1d:5b:3d:49:78:
                    41:12:21:cc:a7:a0:db:78:65:77:d9:7b:a4:e3:17:
                    10:91:64:a7:a3:93:60:b1:dd:69:ec:0e:ba:f0:2d:
                    7c:c6:05:f2:4a:35:91:95:3b:4c:22:36:05:bf:84:
                    f1:8d:f9:2d:6e:a0:82:92:35:54:f6:04:0d:80:85:
                    dd:cd:04:87:8e:93:e1:43:d7:73:b6:50:1c:00:0e:
                    84:bb:07:5c:ee:2c:ff:e1:be:c7:ba:6d:d5:4e:09:
                    65:e3:17:c5:82:25:8a:d7:3f:cb:10:ac:d5:d1:88:
                    15:1d:04:d4:f2:56:93:88:cd:5e:b5:08:1a:d4:74:
                    e7:d1:c1:e6:cd:0e:0d:e8:77:a5:14:b4:6d:bc:e8:
                    5d:7f:16:15:4a:b6:29:38:63:cc:56:ab:c6:94:8c:
                    63:2a:6a:1e:a7:39:1f:fa:3d:9f:51:e4:f5:a7:47:
                    ae:07:45:bc:3c:f5:6f:b7:40:27:ff:0a:2a:ff:14:
                    d9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:66:15:B1:18:87:D8:FC:A3:8D:2C:9A:E9:E8:B2:6A:A4:ED:1D:1D
            X509v3 Authority Key Identifier:
                keyid:EA:A9:6D:CA:74:30:DF:A4:71:CA:29:B8:43:83:6C:1C:80:E5:43:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qltynQw36Rxyim4Q4NsHIDlQ54.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:92:db:b8:fc:89:00:69:c7:83:1c:ac:98:6f:6c:11:fd:b1:
         86:f5:b7:d8:31:3c:09:05:5e:4f:cb:07:74:5e:c4:d8:75:c5:
         6a:48:8a:a2:11:02:16:d6:81:07:05:66:31:05:18:5f:60:25:
         fc:1e:16:6c:df:80:01:c8:5b:ed:36:85:d0:c4:65:69:f9:52:
         b1:e5:a1:fd:a7:69:6c:03:c2:0a:90:de:34:4f:ab:7b:59:4b:
         c0:e4:7b:91:75:a4:d3:c5:a7:23:1b:03:89:f8:df:e0:2f:64:
         09:1b:b4:9d:27:12:50:d0:2c:e4:9f:98:96:2f:73:f8:10:ee:
         ee:e3:87:ae:07:62:3e:71:24:b6:c5:fe:da:0c:a8:8a:a5:67:
         53:5f:8d:ff:b3:1f:14:e3:92:12:ac:2a:37:bd:87:6c:13:10:
         18:0a:43:26:7b:5e:15:7a:cf:f5:aa:1b:94:61:5c:41:56:3d:
         ba:ca:a0:a9:94:10:b9:e7:25:d1:71:0b:6a:72:b3:e4:11:6c:
         74:a3:51:90:bc:72:b5:65:1e:ac:36:90:dd:bb:c4:13:70:66:
         0d:88:7d:da:35:e1:40:0d:58:c5:ae:8a:69:6a:81:d1:a2:e3:
         49:2d:be:cd:93:e7:9d:c1:84:14:6d:f2:32:05:59:39:1f:8b:
         4d:f2:95:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:51:57 2026 by rpki-client