Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/6AZAMTRS0FNHrrnqq2DbjgDCGQs.mft
File:                     6AZAMTRS0FNHrrnqq2DbjgDCGQs.mft (raw, json)
Hash identifier:          Mzu8CUdPS4SHRbIS4V9o/poUqdDTQgklvdfrCxqvMxg=
Subject key identifier:   C6:E3:CE:87:5B:4C:6E:8C:D2:07:6A:D0:9D:AF:52:41:A2:A8:79:72
Authority key identifier: E8:06:40:31:34:52:D0:53:47:AE:B9:EA:AB:60:DB:8E:00:C2:19:0B
Certificate issuer:       /CN=A91AA85A/serialNumber=E80640313452D05347AEB9EAAB60DB8E00C2190B
Certificate serial:       78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AZAMTRS0FNHrrnqq2DbjgDCGQs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/6AZAMTRS0FNHrrnqq2DbjgDCGQs.mft
Manifest number:          72
Signing time:             Sat 19 Sep 2026 07:58:30 +0000
Manifest this update:     Sat 19 Sep 2026 07:58:30 +0000
Manifest next update:     Sat 26 Sep 2026 07:58:30 +0000
Files and hashes:         1: 6AZAMTRS0FNHrrnqq2DbjgDCGQs.crl (hash: t180Ozz9jEmQNR4My+lONMgyT6p9N/HtTQKL6NFA2ZM=)
                          2: 9ABBE50C0DFD11F18537B598053D8C67.roa (hash: B/TqzACGEfySc+XaR76BsEZga/Tqj8LPu2hT0skPKbE=)
                          3: D7C18BB20DFF11F1BA7C27AF053D8C67.roa (hash: hWKKvsTt7zCxD5Fv8v2sGwk7XoSlQUlgVYDrraM8C1E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/6AZAMTRS0FNHrrnqq2DbjgDCGQs.crl
                          rsync://rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/6AZAMTRS0FNHrrnqq2DbjgDCGQs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AZAMTRS0FNHrrnqq2DbjgDCGQs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 07:58:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA85A, serialNumber=E80640313452D05347AEB9EAAB60DB8E00C2190B
        Validity
            Not Before: Sep 19 07:58:30 2026 GMT
            Not After : Sep 26 07:58:30 2026 GMT
        Subject: CN=6aae40a6-2d62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6c:11:8e:b3:03:29:31:4c:b4:9b:11:11:34:
                    01:e9:b7:8e:9a:6c:f4:4e:d7:b2:24:d7:0b:74:34:
                    70:9f:1d:15:00:e0:fe:a8:2a:e9:9e:de:ed:ec:df:
                    3c:e3:40:b2:36:22:8c:1b:b7:5b:0f:ba:b5:40:c0:
                    82:fa:e2:08:ef:d1:fb:77:68:9d:94:6a:d5:1a:f5:
                    e4:77:3c:5f:74:2f:97:f0:23:02:7c:b6:66:f0:e3:
                    30:ea:b1:7f:a1:1b:e2:07:f3:03:58:32:35:18:d6:
                    46:f0:a9:a5:72:04:67:07:d3:7c:6f:8a:f7:ce:b5:
                    56:bf:6e:55:cd:d8:af:97:70:03:3d:99:b5:ec:35:
                    2f:fe:1b:e9:d5:a5:5b:67:ea:92:48:ce:25:de:ae:
                    78:d0:8c:71:c9:79:89:19:95:be:e9:5a:dc:0e:82:
                    94:6e:bd:d1:dc:d5:03:52:c6:09:e0:8c:02:3d:e1:
                    0a:5e:69:dd:67:ea:98:d5:20:0b:a3:b3:e3:56:e3:
                    52:32:e8:bf:bb:f7:89:3d:24:f9:f4:92:e2:92:a3:
                    bd:5b:9c:4d:52:64:7a:19:a4:3f:13:65:39:b1:55:
                    e2:f7:10:8b:9b:45:72:42:60:fc:5f:3e:ff:1b:a0:
                    93:cf:f0:51:c2:45:be:17:cf:ca:c4:98:ba:9e:3a:
                    4b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E3:CE:87:5B:4C:6E:8C:D2:07:6A:D0:9D:AF:52:41:A2:A8:79:72
            X509v3 Authority Key Identifier:
                keyid:E8:06:40:31:34:52:D0:53:47:AE:B9:EA:AB:60:DB:8E:00:C2:19:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/6AZAMTRS0FNHrrnqq2DbjgDCGQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AZAMTRS0FNHrrnqq2DbjgDCGQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/6AZAMTRS0FNHrrnqq2DbjgDCGQs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:df:e7:6d:1e:d5:fa:13:68:3b:4c:9a:ea:f3:55:c0:45:ed:
         ae:2b:b6:ff:73:d4:bb:b5:09:01:75:f8:7d:34:18:b7:c4:f7:
         4c:52:5c:da:b0:0b:b4:7f:2b:70:d2:a5:b4:4a:19:68:f8:ff:
         44:ee:a5:08:34:23:54:d3:4d:97:fe:d9:ee:cc:cc:40:bb:16:
         ca:53:3c:66:ff:19:7e:5d:31:bf:db:6f:97:ef:ac:69:ee:43:
         8c:99:18:d4:8d:bb:8c:93:04:14:2c:54:10:85:3c:ab:f5:92:
         93:1c:8f:1e:5e:69:c7:8a:9e:49:35:4f:00:e4:96:e9:c8:17:
         02:af:ad:f0:de:d0:35:e5:7f:0f:b9:06:d9:93:39:a7:dc:a7:
         a7:12:ad:c0:49:22:32:00:45:7c:53:81:f5:6e:95:62:28:e4:
         d5:bd:57:1a:62:06:b9:ad:7c:47:0c:ea:e9:5a:2e:eb:92:fa:
         80:08:47:07:a5:49:02:a2:6a:1d:df:a6:a4:84:ac:3b:46:5c:
         9f:08:2d:d1:be:f7:9e:15:09:ce:e2:c8:7c:21:68:ff:79:b4:
         5a:42:83:71:e0:0e:32:68:8b:66:c8:b7:b5:24:77:47:fb:a7:
         f7:5f:88:19:05:ca:65:48:e0:70:6c:79:4c:82:fc:05:3a:e6:
         1a:88:44:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:42:35 2026 by rpki-client