Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft
File:                     paap6sGs925VLHi914unT-3dP_k.mft (raw, json)
Hash identifier:          5AXvJPmziRP5rvo/vTEd5ybGcPJTZsj/a0Imo9zHzLY=
Subject key identifier:   44:BA:2A:BA:5A:94:A4:28:73:81:96:6A:D9:8D:49:F6:A6:E9:37:E4
Authority key identifier: A5:A6:A9:EA:C1:AC:F7:6E:55:2C:78:BD:D7:8B:A7:4F:ED:DD:3F:F9
Certificate issuer:       /CN=A9129AD6/serialNumber=A5A6A9EAC1ACF76E552C78BDD78BA74FEDDD3FF9
Certificate serial:       2C96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft
Manifest number:          2C83
Signing time:             Tue 28 Jul 2026 15:36:45 +0000
Manifest this update:     Tue 28 Jul 2026 15:36:45 +0000
Manifest next update:     Tue 04 Aug 2026 15:36:45 +0000
Files and hashes:         1: paap6sGs925VLHi914unT-3dP_k.crl (hash: +dBFHBopgiQq97FCJUsw1fWQ0lZ5ol+GZXuTviBvq2U=)
                          2: 9AD04EAAD58A11EE9992494AC4F9AE02.roa (hash: 2Vu6c2I8iVNOp/0hhK3ltNex+tULNdrSU6w0Dy/08/o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.crl
                          rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:36:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11414 (0x2c96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129AD6, serialNumber=A5A6A9EAC1ACF76E552C78BDD78BA74FEDDD3FF9
        Validity
            Not Before: Jul 28 15:36:45 2026 GMT
            Not After : Aug  4 15:36:45 2026 GMT
        Subject: CN=6a68cc8d-2a7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:00:e1:8b:52:28:5f:34:50:a4:de:69:c7:75:
                    56:f3:ec:b2:13:5b:c2:9e:d3:85:29:94:ee:29:63:
                    2c:b6:8c:db:1d:3c:fa:d2:e8:56:46:47:56:8e:51:
                    ec:9c:f8:fb:5a:1c:8c:f7:a5:33:e0:1f:f7:c4:94:
                    c2:52:68:b6:6d:67:97:c9:d0:dd:63:fc:9a:09:e0:
                    1f:14:63:53:8a:04:21:44:5a:e1:66:dc:96:fe:db:
                    b6:1c:10:6a:4f:e3:94:6d:aa:0b:0a:d1:d7:a7:17:
                    3d:87:5d:68:3d:4e:fc:37:e9:56:96:ad:37:d2:ff:
                    be:fa:2d:c8:4f:fb:17:bc:8f:7b:58:33:47:87:ad:
                    38:ef:2c:69:06:bd:86:37:43:92:92:67:2e:06:95:
                    89:65:9a:f7:4f:d5:91:29:97:1c:c5:37:c2:08:1a:
                    d0:e7:62:f1:dd:4a:61:20:0b:69:72:df:b3:5b:15:
                    65:f1:51:6e:ad:ed:11:4a:8a:e6:f9:a1:bd:50:d5:
                    dd:41:be:81:21:43:c5:cb:b0:f7:15:76:5d:7a:ad:
                    2a:b6:58:48:61:b3:82:c4:ef:f0:a4:e6:a2:e9:5a:
                    75:4d:f0:26:0f:24:42:5e:42:a8:ed:6e:ed:20:d0:
                    0c:aa:72:72:e4:05:c4:f1:d4:2f:44:22:14:6e:51:
                    cc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:BA:2A:BA:5A:94:A4:28:73:81:96:6A:D9:8D:49:F6:A6:E9:37:E4
            X509v3 Authority Key Identifier:
                keyid:A5:A6:A9:EA:C1:AC:F7:6E:55:2C:78:BD:D7:8B:A7:4F:ED:DD:3F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:43:f8:50:59:60:0d:7e:7b:a4:59:9f:bb:8f:41:a1:56:ef:
         0d:8e:01:49:77:d0:16:0f:92:cf:36:06:51:b1:5c:73:07:55:
         6e:05:a3:12:3d:ad:0d:aa:6b:bd:db:b9:da:62:82:5f:91:aa:
         3f:80:6b:a1:55:cf:63:46:39:af:cb:22:60:5b:d5:6c:24:cc:
         da:e6:5f:44:4d:d7:e1:b0:91:8d:50:98:2c:1a:c1:9b:44:77:
         81:06:c5:3c:ae:50:be:4f:95:6d:3f:39:5b:4d:96:db:c3:93:
         53:5f:94:c7:8c:eb:73:76:05:f9:08:f0:33:e3:e5:1e:bd:65:
         20:65:0f:43:19:e9:f7:de:22:8d:c7:b3:72:e7:ba:2e:d1:e8:
         38:b9:59:f8:45:c3:de:78:3e:89:37:d7:31:a1:40:5f:c8:04:
         bf:bf:7a:07:4c:95:b7:59:8e:3b:e5:0c:93:d0:45:06:a1:84:
         b2:91:3f:13:1e:9f:fe:36:a8:d0:2c:a9:3f:0a:35:41:a4:b6:
         f4:31:fe:bf:9d:9a:fc:a7:6f:7c:9f:85:1b:15:bc:88:7f:70:
         30:21:6d:07:23:d7:b1:b2:a0:22:3c:fd:74:77:5c:2d:18:34:
         e7:91:a0:24:6a:fb:cf:9f:7f:a6:ef:1a:73:9b:71:ea:03:54:
         24:66:da:76
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICLJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjlBRDYxMTAvBgNVBAUTKEE1QTZBOUVBQzFBQ0Y3NkU1NTJDNzhCREQ3OEJBNzRG
RURERDNGRjkwHhcNMjYwNzI4MTUzNjQ1WhcNMjYwODA0MTUzNjQ1WjAYMRYwFAYD
VQQDEw02YTY4Y2M4ZC0yYTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArADhi1IoXzRQpN5px3VW8+yyE1vCntOFKZTuKWMstozbHTz60uhWRkdWjlHs
nPj7WhyM96Uz4B/3xJTCUmi2bWeXydDdY/yaCeAfFGNTigQhRFrhZtyW/tu2HBBq
T+OUbaoLCtHXpxc9h11oPU78N+lWlq030v+++i3IT/sXvI97WDNHh6047yxpBr2G
N0OSkmcuBpWJZZr3T9WRKZccxTfCCBrQ52Lx3UphIAtpct+zWxVl8VFure0RSorm
+aG9UNXdQb6BIUPFy7D3FXZdeq0qtlhIYbOCxO/wpOai6Vp1TfAmDyRCXkKo7W7t
INAMqnJy5AXE8dQvRCIUblHMIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFES6Krpa
lKQoc4GWatmNSfam6TfkMB8GA1UdIwQYMBaAFKWmqerBrPduVSx4vdeLp0/t3T/5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUFENi9ENjc3REM5NERG
RDAxMUUzOTNEQjc5NUY1OTExRUEzMi9wYWFwNnNHczkyNVZMSGk5MTR1blQtM2RQ
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BhYXA2c0dzOTI1VkxIaTkxNHVuVC0zZFBfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
OUFENi9ENjc3REM5NERGRDAxMUUzOTNEQjc5NUY1OTExRUEzMi9wYWFwNnNHczky
NVZMSGk5MTR1blQtM2RQX2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKkP4UFlgDX57pFmfu49BoVbvDY4BSXfQFg+SzzYGUbFccwdVbgWjEj2tDapr
vdu52mKCX5GqP4BroVXPY0Y5r8siYFvVbCTM2uZfRE3X4bCRjVCYLBrBm0R3gQbF
PK5Qvk+VbT85W02W28OTU1+Ux4zrc3YF+QjwM+PlHr1lIGUPQxnp994ijcezcue6
LtHoOLlZ+EXD3ng+iTfXMaFAX8gEv796B0yVt1mOO+UMk9BFBqGEspE/Ex6f/jao
0CypPwo1QaS29DH+v52a/KdvfJ+FGxW8iH9wMCFtByPXsbKgIjz9dHdcLRg055Gg
JGr7z59/pu8ac5tx6gNUJGbadg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:28:27 2026 by rpki-client