Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5988/AC20887A662C11F1B0BAC73CA147A888/6xxYjN08G9CTTu5TXHqhEm0ScoE.mft
File:                     6xxYjN08G9CTTu5TXHqhEm0ScoE.mft (raw, json)
Hash identifier:          P/u2cUCM4Xa0AB+ZKOxGRCOGuPMpuyIrfnTeoTMOqoI=
Subject key identifier:   13:C6:6F:E6:32:1F:28:BB:EB:CE:6C:44:6B:A8:B4:83:87:8A:19:54
Authority key identifier: EB:1C:58:8C:DD:3C:1B:D0:93:4E:EE:53:5C:7A:A1:12:6D:12:72:81
Certificate issuer:       /CN=A91E5988/serialNumber=EB1C588CDD3C1BD0934EEE535C7AA1126D127281
Certificate serial:       43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6xxYjN08G9CTTu5TXHqhEm0ScoE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5988/AC20887A662C11F1B0BAC73CA147A888/6xxYjN08G9CTTu5TXHqhEm0ScoE.mft
Manifest number:          41
Signing time:             Tue 13 Oct 2026 09:16:39 +0000
Manifest this update:     Tue 13 Oct 2026 09:16:39 +0000
Manifest next update:     Tue 20 Oct 2026 09:16:39 +0000
Files and hashes:         1: 6xxYjN08G9CTTu5TXHqhEm0ScoE.crl (hash: qe1co5FaX7uHSLonCXhzJAPtJenoUj2YaiuynGZLx30=)
                          2: Gb4F3ARXb4IKRJkWRPs6LX_-v3U.asa (hash: r1nSszHdUFuYZmemznKzUBY3KBsU1gmxiFT/Y+0E1Co=)
                          3: 634DC83C662D11F1A5BC4310A247A888.roa (hash: Ep5nijWyMpK5/K7vEOePnlUlFj8UkDN9w696/7fsWDM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5988/AC20887A662C11F1B0BAC73CA147A888/6xxYjN08G9CTTu5TXHqhEm0ScoE.crl
                          rsync://rpki.apnic.net/member_repository/A91E5988/AC20887A662C11F1B0BAC73CA147A888/6xxYjN08G9CTTu5TXHqhEm0ScoE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6xxYjN08G9CTTu5TXHqhEm0ScoE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 09:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5988, serialNumber=EB1C588CDD3C1BD0934EEE535C7AA1126D127281
        Validity
            Not Before: Oct 13 09:16:39 2026 GMT
            Not After : Oct 20 09:16:39 2026 GMT
        Subject: CN=6acdf6f7-3560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:21:7c:99:5a:b0:d0:9a:89:15:77:cf:96:f6:
                    23:84:3d:72:0b:5c:92:1d:22:e9:d0:33:ce:b0:df:
                    ed:3c:4d:fa:8b:4a:8c:f1:76:a8:29:33:3b:54:df:
                    cc:5d:77:7a:de:10:c0:67:fa:5c:af:43:26:53:c8:
                    85:73:d1:0c:05:66:12:77:3e:27:89:3b:d9:ed:9c:
                    ec:64:96:9e:2a:87:f7:4a:0b:f4:64:39:f9:c4:c3:
                    e5:1f:88:58:1d:60:2e:28:ac:66:f8:95:66:ab:b5:
                    04:98:17:7f:b5:ce:53:f6:2e:13:19:d3:83:6d:09:
                    f6:26:20:d7:ed:6f:14:00:1f:19:db:1a:f1:1b:ba:
                    71:79:64:a2:95:83:f1:db:f8:38:95:92:8f:dc:ee:
                    ef:11:92:2f:1e:9a:58:ef:ca:e9:e1:ec:ae:d0:10:
                    9a:35:cd:42:ae:df:26:ef:d5:b7:d1:ba:3d:87:77:
                    41:5a:00:00:a6:3a:44:4c:ab:bd:6f:a9:4e:f5:80:
                    84:69:3f:6f:93:19:e6:9d:2f:b6:7f:65:93:f7:c9:
                    9f:43:10:87:72:82:60:30:55:46:e7:fa:2e:65:9a:
                    c8:0f:4d:5c:cc:f3:5c:a5:41:fb:88:b2:49:a1:86:
                    f2:7a:c8:ab:f1:6b:75:b7:0a:b2:4a:b3:7a:db:90:
                    d7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C6:6F:E6:32:1F:28:BB:EB:CE:6C:44:6B:A8:B4:83:87:8A:19:54
            X509v3 Authority Key Identifier:
                keyid:EB:1C:58:8C:DD:3C:1B:D0:93:4E:EE:53:5C:7A:A1:12:6D:12:72:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5988/AC20887A662C11F1B0BAC73CA147A888/6xxYjN08G9CTTu5TXHqhEm0ScoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6xxYjN08G9CTTu5TXHqhEm0ScoE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5988/AC20887A662C11F1B0BAC73CA147A888/6xxYjN08G9CTTu5TXHqhEm0ScoE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:e3:60:0f:04:f4:62:37:46:36:a8:84:ff:ed:4d:4f:64:60:
         c1:87:1c:82:1c:a2:99:8e:a2:49:2f:39:dc:cf:f9:d0:79:b1:
         b8:b4:a4:15:a5:97:fb:bb:11:8e:26:71:3c:aa:e3:b6:82:a9:
         05:49:5f:b4:99:b4:a4:ec:66:46:b2:f5:b4:55:07:c7:df:3e:
         71:cc:bb:ba:f1:66:20:12:bd:f6:48:f4:2f:37:55:91:f6:90:
         b9:76:fd:39:39:07:95:7d:f5:69:ea:31:57:47:88:3f:b2:0c:
         b8:ae:87:5c:5b:31:bc:12:bc:54:1f:72:db:b3:07:17:68:80:
         d4:95:34:71:42:b8:83:1b:15:e7:57:53:82:c8:a2:96:46:13:
         7e:e9:e6:6c:7a:ea:5b:2d:2a:87:14:3a:bd:e7:39:12:fd:47:
         70:5e:18:96:25:7b:03:ec:93:fc:26:2f:78:d2:79:c0:7c:42:
         38:07:6e:b3:ff:07:45:23:d4:67:40:78:6a:3b:44:4a:7a:85:
         b3:55:f6:a3:85:e5:60:78:0d:07:1b:7b:06:e8:b8:b9:1d:34:
         5f:20:ad:78:74:16:91:9d:ea:7c:1f:02:d2:17:e7:0d:d9:0f:
         8e:89:bd:eb:0e:ae:f3:f9:11:7a:55:f1:45:55:e1:e0:9a:43:
         1d:6d:16:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 15:17:22 2026 by rpki-client