Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F9F3A/E967E46E542311F1BBF03D8499833773/j6zBw7Q1zIlk5NDpVuiZFz2e9rg.mft
File:                     j6zBw7Q1zIlk5NDpVuiZFz2e9rg.mft (raw, json)
Hash identifier:          poodTRL/pON5BeDHwWPEaRJo/d9ow7pkGEISH1eBLFA=
Subject key identifier:   34:75:4B:EE:21:AE:CA:23:6A:0A:B5:15:7E:CE:DE:6E:E1:25:39:07
Authority key identifier: 8F:AC:C1:C3:B4:35:CC:89:64:E4:D0:E9:56:E8:99:17:3D:9E:F6:B8
Certificate issuer:       /CN=A91F9F3A/serialNumber=8FACC1C3B435CC8964E4D0E956E899173D9EF6B8
Certificate serial:       50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6zBw7Q1zIlk5NDpVuiZFz2e9rg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9F3A/E967E46E542311F1BBF03D8499833773/j6zBw7Q1zIlk5NDpVuiZFz2e9rg.mft
Manifest number:          4D
Signing time:             Tue 13 Oct 2026 09:07:38 +0000
Manifest this update:     Tue 13 Oct 2026 09:07:37 +0000
Manifest next update:     Tue 20 Oct 2026 09:07:37 +0000
Files and hashes:         1: j6zBw7Q1zIlk5NDpVuiZFz2e9rg.crl (hash: m1yMakLec5Mj8j+b/cWSfHyV4ErwOezkE0gHdWR42CI=)
                          2: 606CBF12542411F18D5724329A833773.roa (hash: IQD5yYmAtkWqZXn7Iqc8fdYHqoPqKGHaWtIk3XfhhTc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9F3A/E967E46E542311F1BBF03D8499833773/j6zBw7Q1zIlk5NDpVuiZFz2e9rg.crl
                          rsync://rpki.apnic.net/member_repository/A91F9F3A/E967E46E542311F1BBF03D8499833773/j6zBw7Q1zIlk5NDpVuiZFz2e9rg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6zBw7Q1zIlk5NDpVuiZFz2e9rg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 09:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9F3A, serialNumber=8FACC1C3B435CC8964E4D0E956E899173D9EF6B8
        Validity
            Not Before: Oct 13 09:07:37 2026 GMT
            Not After : Oct 20 09:07:37 2026 GMT
        Subject: CN=6acdf4da-ab77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5f:ee:ba:86:5e:51:71:39:46:5c:17:eb:70:
                    79:a8:a6:8d:6a:49:be:c9:9d:40:cd:e8:e5:f4:ed:
                    64:b2:d2:0b:14:87:e4:a8:cf:96:9e:1e:38:b6:07:
                    63:d9:03:68:36:10:c7:ee:d5:e2:9c:60:54:06:51:
                    68:55:99:56:f2:21:f1:63:a0:d4:a2:7b:00:f5:8a:
                    f0:fa:26:38:8f:e9:b8:fc:0e:0b:60:ca:d9:2d:11:
                    eb:d5:a9:f8:2d:cc:b3:90:63:66:b7:6f:4a:b9:30:
                    11:2b:8d:ab:03:c4:70:5b:8d:5d:d0:33:01:66:76:
                    ee:4b:08:88:f0:42:b5:7e:b2:6a:34:a7:8f:0b:3f:
                    48:91:d6:63:8b:ab:49:a7:e6:84:c3:27:f1:d6:47:
                    40:c4:0c:d9:20:08:03:df:96:50:2c:01:dc:0f:17:
                    5e:26:1a:a3:af:36:70:b3:89:a2:76:f7:ee:e5:e0:
                    b4:24:9e:f8:e1:21:b5:9e:90:45:08:e9:b8:2d:12:
                    a5:4e:39:43:b7:6e:f5:7f:d7:fc:21:25:40:69:b2:
                    72:c4:d8:64:db:40:e5:15:5d:6b:3f:f4:a6:52:a3:
                    38:fe:eb:53:6d:21:d1:77:8f:85:97:c6:51:0a:02:
                    9f:61:b0:85:10:68:ee:67:a6:a9:0c:b2:93:64:69:
                    b9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:75:4B:EE:21:AE:CA:23:6A:0A:B5:15:7E:CE:DE:6E:E1:25:39:07
            X509v3 Authority Key Identifier:
                keyid:8F:AC:C1:C3:B4:35:CC:89:64:E4:D0:E9:56:E8:99:17:3D:9E:F6:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9F3A/E967E46E542311F1BBF03D8499833773/j6zBw7Q1zIlk5NDpVuiZFz2e9rg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6zBw7Q1zIlk5NDpVuiZFz2e9rg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9F3A/E967E46E542311F1BBF03D8499833773/j6zBw7Q1zIlk5NDpVuiZFz2e9rg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:56:3f:95:02:35:4d:32:99:6d:19:d8:58:1b:f4:72:42:35:
         08:f1:aa:1e:13:d1:49:e4:7b:cf:8c:f9:6b:a0:a9:44:8b:fe:
         73:27:02:24:5b:61:fd:ed:a0:ad:f6:2f:85:dc:2a:ae:8a:9a:
         b5:a2:60:17:f7:78:0e:ee:87:ca:18:bd:9d:d6:ec:c8:c4:82:
         0a:ad:64:bd:18:22:ad:09:33:cf:7f:3f:4c:63:1e:48:15:1a:
         a0:b7:3a:26:f5:f1:4a:47:3c:9b:a2:92:cf:2d:bc:ec:dc:27:
         61:2b:12:fb:a2:d3:ba:ad:b0:21:80:0d:c7:fb:ac:3f:6f:bd:
         58:f0:d3:a2:0f:ad:02:1a:26:40:7f:73:50:c8:a7:f9:b6:24:
         c0:40:fc:6a:dc:a9:cf:a7:c6:5f:21:3b:a6:5d:9f:d6:0e:f6:
         2a:e3:78:b7:0f:0d:c5:53:91:66:05:41:1d:e1:be:62:9b:6c:
         07:52:2c:1e:20:43:a1:98:cc:be:39:f3:55:3c:c9:ef:0a:c6:
         b8:94:b2:1d:35:69:cd:8b:13:f8:11:0e:a2:f5:ab:e5:0c:2c:
         ef:1e:47:8f:e7:47:46:c3:26:bc:5f:49:dc:e7:18:f9:99:3d:
         95:2d:28:62:5a:df:db:47:96:1f:e8:4e:2e:c6:3e:8b:10:7d:
         44:da:e7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:41:58 2026 by rpki-client