Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft
File:                     M6AXSkpLAJwBFRWWkTbzAQidtbU.mft (raw, json)
Hash identifier:          ujfcU8BbeQy5TQOju+LbKr90aVztxtyYD/Qfyh6AP0E=
Subject key identifier:   2E:A1:43:F4:09:F3:EE:06:F2:68:51:AC:FB:79:E0:AE:FE:06:D3:39
Authority key identifier: 33:A0:17:4A:4A:4B:00:9C:01:15:15:96:91:36:F3:01:08:9D:B5:B5
Certificate issuer:       /CN=A91FF1CC/serialNumber=33A0174A4A4B009C011515969136F301089DB5B5
Certificate serial:       0131
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft
Manifest number:          0131
Signing time:             Sun 27 Sep 2026 06:10:17 +0000
Manifest this update:     Sun 27 Sep 2026 06:10:16 +0000
Manifest next update:     Sun 04 Oct 2026 06:10:16 +0000
Files and hashes:         1: M6AXSkpLAJwBFRWWkTbzAQidtbU.crl (hash: j0FvEcBvederQYyfkGXIFXCBzDBqed3RQ7OYmtKGRII=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.crl
                          rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 06:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 305 (0x131)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF1CC, serialNumber=33A0174A4A4B009C011515969136F301089DB5B5
        Validity
            Not Before: Sep 27 06:10:16 2026 GMT
            Not After : Oct  4 06:10:16 2026 GMT
        Subject: CN=6ab8b349-0728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:af:fc:d7:27:2e:6f:c9:65:0d:0a:40:9b:38:
                    23:89:09:75:84:e2:9e:4c:c0:18:ab:84:78:9f:b9:
                    df:d0:70:13:35:56:c8:5a:c8:8d:0e:0b:a8:c5:f3:
                    e0:66:e5:5a:92:75:cc:6f:e3:fd:1c:36:59:12:f3:
                    76:54:ea:c9:7d:21:14:6b:e4:8a:58:7e:a3:ca:05:
                    42:fd:65:e0:7f:04:65:da:b1:7d:44:31:70:f7:b1:
                    cf:41:96:31:98:f8:58:df:e0:e7:50:7b:ee:d7:57:
                    b0:be:72:f4:f7:2d:27:0e:cd:eb:a2:50:f6:dc:41:
                    41:11:e6:a6:53:82:cf:21:e1:af:4e:56:42:f3:03:
                    b4:59:f5:83:3c:46:a5:23:a3:c4:72:e6:08:5d:28:
                    53:5f:48:ce:f8:7e:ce:1a:1e:b4:d6:57:7c:e0:09:
                    f1:85:c1:09:a7:23:9b:1f:7b:d8:05:09:74:56:b4:
                    d9:f0:6c:9d:6a:f5:45:eb:91:da:f9:be:c3:58:ad:
                    09:4e:08:2f:2a:ac:c1:4e:f0:98:8f:3c:d9:d6:44:
                    99:11:96:fa:9b:da:ed:6e:5d:90:97:fc:55:66:a9:
                    0d:65:a9:bf:ed:40:de:b0:51:53:1a:b1:68:99:c4:
                    4c:75:90:87:7c:7e:0c:bd:ea:5c:68:60:e1:b2:05:
                    88:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A1:43:F4:09:F3:EE:06:F2:68:51:AC:FB:79:E0:AE:FE:06:D3:39
            X509v3 Authority Key Identifier:
                keyid:33:A0:17:4A:4A:4B:00:9C:01:15:15:96:91:36:F3:01:08:9D:B5:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:bc:fe:be:f8:b6:28:40:25:31:63:0a:f6:11:41:4a:c3:9b:
         7f:19:9d:d5:84:15:92:4f:aa:e5:cc:8a:24:83:5d:0e:7d:97:
         26:4f:c0:1e:da:95:ce:83:d7:b4:23:bd:43:19:95:96:3c:2f:
         de:e9:df:af:34:13:26:36:b5:46:01:45:c8:78:d5:33:f0:c9:
         8f:2e:a9:da:6a:67:12:7e:6b:5f:c9:37:9a:bb:75:c4:5d:6c:
         8e:31:17:18:12:96:77:b2:ae:e7:3a:83:bc:67:a9:75:4a:a7:
         97:37:9c:ac:f4:1b:c6:5a:9d:f0:66:47:7d:09:6d:df:d1:20:
         8b:74:0d:5b:cd:53:32:3b:84:4e:8f:2f:9b:ce:cd:b2:c6:d1:
         82:f2:84:c6:05:8a:ef:58:ac:53:0d:7f:83:ad:9c:28:43:db:
         70:d2:b6:04:d8:db:e3:71:c7:ce:4d:00:a9:63:46:d0:c3:98:
         8a:c3:48:dc:02:93:bb:e0:3d:5e:6d:c9:80:11:80:c4:ac:68:
         e1:15:66:4d:0d:89:3a:a9:b5:6e:1a:b8:f1:3a:9f:b0:b4:f2:
         9a:bb:c5:64:b4:cd:0f:57:5f:37:33:a5:01:69:c2:58:a9:0b:
         b0:a3:a7:21:c4:6d:85:8e:fa:cd:22:0a:28:e5:d9:94:e7:16:
         94:ed:8c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:44:37 2026 by rpki-client