Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.mft
File:                     6PktayopMPClvq9TBEyF2OreHro.mft (raw, json)
Hash identifier:          KH2wSBg9GeQRF078m1SCMXyANkDp4CxdaB7/HuyhxL8=
Subject key identifier:   48:9F:60:6F:55:30:D1:85:BF:96:D4:B5:FC:1B:F6:76:0B:42:20:3F
Authority key identifier: E8:F9:2D:6B:2A:29:30:F0:A5:BE:AF:53:04:4C:85:D8:EA:DE:1E:BA
Certificate issuer:       /CN=A9129C87/serialNumber=E8F92D6B2A2930F0A5BEAF53044C85D8EADE1EBA
Certificate serial:       0501
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6PktayopMPClvq9TBEyF2OreHro.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.mft
Manifest number:          04F9
Signing time:             Fri 12 Jun 2026 23:45:38 +0000
Manifest this update:     Fri 12 Jun 2026 23:45:37 +0000
Manifest next update:     Fri 19 Jun 2026 23:45:37 +0000
Files and hashes:         1: 6PktayopMPClvq9TBEyF2OreHro.crl (hash: Q05b4YB/nSWhhnnZgTtVy8Bj09MzDNqiCoixDqj2iII=)
                          2: BF9CF5EE597711F18D905478A6833773.roa (hash: hTeeZo8w2xGBlhPflI/Wkk6p0VKwgyMAy+sSrfqGpmg=)
                          3: 80A9DE56614C11EC9175DE54C4F9AE02.roa (hash: ERLTmQk83R4LxALyNwa1PO2UwX8u5XdkmpQu0uN+p1U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.crl
                          rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6PktayopMPClvq9TBEyF2OreHro.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 23:45:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1281 (0x501)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129C87, serialNumber=E8F92D6B2A2930F0A5BEAF53044C85D8EADE1EBA
        Validity
            Not Before: Jun 12 23:45:37 2026 GMT
            Not After : Jun 19 23:45:37 2026 GMT
        Subject: CN=6a2c9a22-a21c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4f:e1:ca:5f:8c:2a:7b:6c:3b:4c:bd:41:76:
                    9b:21:45:e3:23:86:1c:f5:cb:80:53:1e:9d:82:db:
                    07:1d:2f:77:e2:71:e4:8b:33:30:59:6d:ca:a4:02:
                    ab:95:f0:1e:19:88:d0:6e:a7:a2:25:c8:ec:41:41:
                    31:ae:fd:7f:f2:e9:9f:7a:b5:ba:27:32:bc:62:cc:
                    71:99:e6:52:01:69:c0:22:b0:96:62:a3:3e:88:f2:
                    b5:db:b3:09:05:27:2f:50:8c:4f:78:7f:ee:97:4f:
                    74:5d:c6:ac:81:a0:c3:4c:67:f8:d3:b1:60:b0:97:
                    2d:1a:35:79:2a:e5:b2:c1:db:82:f2:22:f1:b5:6d:
                    84:89:54:85:4e:31:c8:db:e5:90:30:60:cc:13:e6:
                    bd:45:56:f6:97:7b:7d:28:71:cf:52:86:09:ad:2d:
                    07:8c:98:4f:7f:f7:38:c6:60:e5:c6:61:e8:9a:82:
                    be:7d:7e:89:84:4a:b4:25:8f:ae:c1:3b:57:f4:b9:
                    50:d9:16:27:c7:99:c0:1f:db:bb:f1:8e:1d:5b:ac:
                    7e:7a:fd:30:7a:b0:c5:ef:51:78:4e:43:c1:86:11:
                    6e:b3:4a:11:af:b7:2a:5a:f2:9b:ac:1a:6d:28:03:
                    c4:14:2a:9d:35:3f:8e:bb:9c:e7:da:ce:79:6f:92:
                    ec:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:9F:60:6F:55:30:D1:85:BF:96:D4:B5:FC:1B:F6:76:0B:42:20:3F
            X509v3 Authority Key Identifier:
                keyid:E8:F9:2D:6B:2A:29:30:F0:A5:BE:AF:53:04:4C:85:D8:EA:DE:1E:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6PktayopMPClvq9TBEyF2OreHro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:01:fb:75:39:ce:3b:0b:9b:dd:8f:ca:b8:dc:42:4a:ca:63:
         2e:85:60:db:41:db:84:5d:51:d3:97:32:80:bb:ab:84:87:4f:
         34:42:fa:b0:9a:6a:0e:f0:40:92:9b:9b:6a:dc:2b:92:86:29:
         cc:12:24:dc:45:8a:5a:ab:f9:6c:3e:79:b9:6e:50:c3:11:37:
         4c:95:dd:d2:66:07:c6:aa:fe:c1:e6:6d:67:10:a7:e6:90:58:
         9a:84:9b:4c:da:3d:e2:74:c1:6f:23:ec:a8:89:92:12:10:45:
         d4:af:94:61:08:91:5b:ec:8a:81:b6:e7:5d:dc:57:c1:cc:21:
         3e:b8:f2:9f:89:73:0e:23:6d:a6:21:07:00:b8:e4:9e:58:c9:
         2f:ef:4c:26:a8:cf:d1:3f:c4:c7:0b:77:5f:77:9d:88:04:0f:
         a3:03:18:ee:e2:a1:8a:8a:8f:93:b3:44:ca:ca:66:82:1f:f3:
         5b:e7:a7:75:48:d6:a2:cf:29:fa:f0:1b:93:f2:01:8f:3b:82:
         38:d5:71:23:c1:6c:d7:10:d2:33:1b:69:c0:8d:de:43:e8:0b:
         ec:5b:45:92:4d:32:3b:f1:c5:81:26:0e:13:a2:df:99:da:d0:
         d9:cb:b1:7d:10:2f:0b:69:fb:87:b4:42:70:d1:41:cb:04:ec:
         f3:53:10:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:19:59 2026 by rpki-client