Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft
File:                     paap6sGs925VLHi914unT-3dP_k.mft (raw, json)
Hash identifier:          ISxnN1RBlokqXZqtm7R7fHvLegYG0vfn2JIjy5O7xY4=
Subject key identifier:   00:BF:7C:5E:FA:45:49:5D:72:00:6A:CB:F9:18:1D:1B:A2:35:D5:A9
Authority key identifier: A5:A6:A9:EA:C1:AC:F7:6E:55:2C:78:BD:D7:8B:A7:4F:ED:DD:3F:F9
Certificate issuer:       /CN=A9129AD6/serialNumber=A5A6A9EAC1ACF76E552C78BDD78BA74FEDDD3FF9
Certificate serial:       2C7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft
Manifest number:          2C6A
Signing time:             Fri 12 Jun 2026 15:30:27 +0000
Manifest this update:     Fri 12 Jun 2026 15:30:26 +0000
Manifest next update:     Fri 19 Jun 2026 15:30:26 +0000
Files and hashes:         1: paap6sGs925VLHi914unT-3dP_k.crl (hash: QFB23W4vZmX4JWWWID8N4Y1zxdr1okIjRY4n9gR+xpg=)
                          2: 9AD04EAAD58A11EE9992494AC4F9AE02.roa (hash: hL/ySclBGJtSUV6puP2byNzzoVBcmJfiT5H7TGRB+KQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.crl
                          rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:30:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11388 (0x2c7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129AD6, serialNumber=A5A6A9EAC1ACF76E552C78BDD78BA74FEDDD3FF9
        Validity
            Not Before: Jun 12 15:30:26 2026 GMT
            Not After : Jun 19 15:30:26 2026 GMT
        Subject: CN=6a2c2612-c245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e7:b1:ff:8a:54:67:c1:36:1e:92:cd:19:9e:
                    cc:27:c1:ad:46:f4:31:61:3f:b7:5f:41:12:b2:35:
                    48:c2:89:35:ab:ff:9b:d9:98:ba:fc:bf:14:bc:b7:
                    b4:19:b4:92:3b:81:68:a9:74:95:dd:b9:21:f8:7c:
                    a5:38:10:3b:7f:33:0b:f8:55:58:9f:da:63:ae:27:
                    8c:71:37:69:42:2f:c0:af:b1:df:b0:5e:37:46:5b:
                    b2:5e:f4:10:c9:1a:13:0a:d3:05:b9:9a:33:e9:d9:
                    5d:77:d8:a4:90:96:83:b3:c9:a9:e3:e6:aa:25:c3:
                    85:98:76:48:5a:fc:b5:7c:06:7b:86:99:e8:1b:39:
                    9b:56:39:9b:68:ff:20:e4:0b:d3:9d:30:03:d9:6d:
                    8d:bb:40:6f:02:ec:d3:f5:48:86:eb:40:1d:0b:af:
                    9d:a1:f5:c8:76:34:19:8f:ae:4b:30:80:89:53:a6:
                    b6:39:f0:16:a6:69:62:b6:dc:aa:07:e0:8a:47:ca:
                    dc:52:82:a3:0b:5b:c9:44:16:08:d3:e4:51:5a:ec:
                    e6:ba:67:af:42:49:33:90:04:1c:70:88:18:d6:30:
                    56:6f:9b:01:29:1c:1d:0f:87:cb:b9:c9:c6:6d:52:
                    03:cf:86:6d:98:cd:1f:69:c6:ad:5a:b0:03:97:43:
                    d9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:BF:7C:5E:FA:45:49:5D:72:00:6A:CB:F9:18:1D:1B:A2:35:D5:A9
            X509v3 Authority Key Identifier:
                keyid:A5:A6:A9:EA:C1:AC:F7:6E:55:2C:78:BD:D7:8B:A7:4F:ED:DD:3F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:97:dc:1f:23:e3:f1:45:a5:f9:39:99:6d:a0:0d:8c:5c:ef:
         d8:9a:e0:92:14:01:2a:fa:e9:07:2a:52:14:d0:9b:7d:26:97:
         91:88:6d:a7:cf:5e:4e:5c:95:1d:58:57:01:b3:43:e8:57:f8:
         5a:a6:f9:9f:98:d1:56:4b:d1:38:cc:aa:2b:5a:88:8e:a8:ae:
         8c:50:e1:71:48:1c:9d:c8:48:6e:92:c7:11:1c:7a:8f:b9:37:
         5e:d0:7b:21:0c:e1:64:6a:69:89:ca:50:26:a9:7d:17:ee:b9:
         08:07:27:7c:66:f5:83:16:6d:cd:06:79:82:3f:c6:ab:4f:a3:
         56:29:d7:2a:de:a3:04:36:76:de:27:6b:b5:9c:cb:18:b7:c5:
         30:28:44:e2:c2:e4:ad:43:81:7d:6d:b4:f7:78:35:a7:9b:cf:
         03:cc:3a:19:a5:ef:dc:68:96:7f:2d:81:4f:31:18:31:68:ad:
         7a:85:82:9b:87:e1:9d:77:57:55:09:fb:f9:4d:84:7a:d1:4e:
         93:bb:21:77:03:9d:f0:9c:66:92:88:c5:d4:b3:a4:a8:ef:35:
         2a:b5:49:66:29:28:b0:13:0f:af:d4:84:46:7c:03:32:a3:83:
         6f:6b:e6:fb:4e:04:6d:6c:23:f5:12:3b:06:1b:5f:9b:d0:52:
         c7:75:55:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:33:26 2026 by rpki-client