Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft
File:                     B6YH3KkzMh_3j-xozXpMFJVDel8.mft (raw, json)
Hash identifier:          gpcjq0sHpV70BiDUcK5elYjxLBjiq/qQZOERZemA104=
Subject key identifier:   3A:2F:D3:B5:C1:0A:C1:5E:6C:3B:4D:EB:AE:C6:B2:A2:AC:25:24:4A
Authority key identifier: 07:A6:07:DC:A9:33:32:1F:F7:8F:EC:68:CD:7A:4C:14:95:43:7A:5F
Certificate issuer:       /CN=A9129DCB/serialNumber=07A607DCA933321FF78FEC68CD7A4C1495437A5F
Certificate serial:       0AA6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft
Manifest number:          0A95
Signing time:             Sun 20 Sep 2026 19:30:43 +0000
Manifest this update:     Sun 20 Sep 2026 19:30:43 +0000
Manifest next update:     Sun 27 Sep 2026 19:30:43 +0000
Files and hashes:         1: B6YH3KkzMh_3j-xozXpMFJVDel8.crl (hash: IautDJ1QRx5VZwbbQ/lQxJe01p8pGvnWLqToswrsymw=)
                          2: BAA6E77E852D11ED9A1A8D47C4F9AE02.roa (hash: 8Im/zm3jvYg6x17xxxV1bfF2mu5a90mnM/wSlnRSAPQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.crl
                          rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 19:30:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2726 (0xaa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129DCB, serialNumber=07A607DCA933321FF78FEC68CD7A4C1495437A5F
        Validity
            Not Before: Sep 20 19:30:43 2026 GMT
            Not After : Sep 27 19:30:43 2026 GMT
        Subject: CN=6ab03463-b079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f8:1d:8d:73:bf:7d:ee:f9:94:85:fa:37:a2:
                    5a:40:c8:0b:f2:5a:5a:54:05:eb:b9:13:ff:a6:a8:
                    e8:fa:7b:04:9c:5e:b6:00:07:e0:77:3e:7b:97:25:
                    0e:cb:34:da:24:75:65:7d:63:53:8f:a0:f9:e6:80:
                    40:da:42:20:5f:4a:0d:df:22:ee:4c:7c:17:d7:7b:
                    f3:92:a2:21:ee:f1:8e:fa:e9:0f:43:2d:bf:69:4f:
                    e8:83:ff:6a:2e:40:3c:75:2b:87:7f:89:27:de:d5:
                    a2:f1:66:47:70:79:c9:ed:7e:d1:dc:ba:ef:35:e0:
                    fb:39:3c:f9:45:04:1f:b3:a2:63:27:ae:0d:b9:65:
                    a6:93:4c:db:ba:9d:19:94:3d:fc:52:0d:45:0c:49:
                    77:9b:71:c1:46:d8:6e:41:24:77:4f:8c:1e:5c:83:
                    fa:81:e3:7f:ba:8c:3c:b8:47:f5:66:35:2f:fc:e9:
                    06:cf:4c:ee:af:5f:29:a6:cd:9f:6b:51:9f:fe:fd:
                    d0:f9:b6:fc:28:1a:6b:17:0a:d1:5c:f0:51:28:a5:
                    ea:c7:2a:08:7d:7c:38:2d:28:af:a7:0b:e4:14:45:
                    27:f1:3c:18:1a:fa:ed:6c:e8:79:fe:88:1d:f3:25:
                    a9:28:2a:d4:a5:35:68:f2:56:b5:05:f2:fd:00:73:
                    4f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:2F:D3:B5:C1:0A:C1:5E:6C:3B:4D:EB:AE:C6:B2:A2:AC:25:24:4A
            X509v3 Authority Key Identifier:
                keyid:07:A6:07:DC:A9:33:32:1F:F7:8F:EC:68:CD:7A:4C:14:95:43:7A:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:d2:5f:51:6c:2f:4f:c9:5c:f6:42:a6:55:0b:3b:83:90:84:
         82:9f:9f:d6:8d:20:f2:fe:84:da:ea:8f:cb:21:ea:4c:e8:73:
         f8:ba:54:9d:27:ed:16:8f:3d:37:ad:e9:d3:17:e9:c5:37:4a:
         c9:f1:76:03:23:cf:d0:10:49:4d:d1:71:42:c1:4a:3d:a9:60:
         d8:16:8e:22:c1:10:b2:6a:bd:b9:82:2a:9e:d3:33:d5:12:3f:
         21:37:da:eb:31:bc:51:b2:16:f9:b6:af:45:89:71:1c:64:d0:
         f1:d9:32:cb:b7:a3:69:ce:4a:42:7a:e8:ff:3a:87:76:f0:c5:
         9c:ea:ff:68:07:ef:c6:4d:5e:87:6c:29:43:6a:4e:6b:0d:33:
         1d:e9:d1:db:10:dc:b2:73:6c:29:c5:89:83:33:88:1b:12:14:
         72:aa:38:65:66:c4:ff:24:69:4a:1c:4e:5d:6e:ee:01:6f:25:
         94:70:00:8e:20:f5:ca:7c:15:c5:73:64:2d:d5:b8:5c:33:4c:
         67:b4:ee:1f:8a:35:e8:52:8c:31:17:c2:c8:4e:de:1f:bc:2a:
         41:84:db:b0:60:33:cd:a8:1f:43:3a:f6:65:da:3a:ea:ca:e9:
         8a:4c:d9:53:c0:b4:f1:4a:fd:83:21:23:e0:30:91:78:7f:a6:
         fa:35:c3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:55:42 2026 by rpki-client