Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft
File:                     paap6sGs925VLHi914unT-3dP_k.mft (raw, json)
Hash identifier:          3voiMXWUXwrI8sGuH+qrvy3IZS9uzMJc8nba1o2Qkgk=
Subject key identifier:   50:BA:C4:28:60:CD:11:CE:B3:54:45:E8:9F:EA:6E:D3:F5:E8:D9:6C
Authority key identifier: A5:A6:A9:EA:C1:AC:F7:6E:55:2C:78:BD:D7:8B:A7:4F:ED:DD:3F:F9
Certificate issuer:       /CN=A9129AD6/serialNumber=A5A6A9EAC1ACF76E552C78BDD78BA74FEDDD3FF9
Certificate serial:       2CA1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft
Manifest number:          2C8E
Signing time:             Tue 18 Aug 2026 15:35:16 +0000
Manifest this update:     Tue 18 Aug 2026 15:35:15 +0000
Manifest next update:     Tue 25 Aug 2026 15:35:15 +0000
Files and hashes:         1: paap6sGs925VLHi914unT-3dP_k.crl (hash: 0ytUkvp5Rj0fCQ6IQfVCyNTbnBHZtdL6x3a9DK9U2hc=)
                          2: 9AD04EAAD58A11EE9992494AC4F9AE02.roa (hash: 2Vu6c2I8iVNOp/0hhK3ltNex+tULNdrSU6w0Dy/08/o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.crl
                          rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 15:35:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11425 (0x2ca1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129AD6, serialNumber=A5A6A9EAC1ACF76E552C78BDD78BA74FEDDD3FF9
        Validity
            Not Before: Aug 18 15:35:15 2026 GMT
            Not After : Aug 25 15:35:15 2026 GMT
        Subject: CN=6a847bb4-6a8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b8:c6:06:c8:ba:75:39:ff:bf:3b:ff:f8:c4:
                    85:ce:a8:b2:db:b4:90:e3:18:fe:a4:b4:30:dc:99:
                    95:c6:88:a8:1e:2f:e5:e4:91:9b:02:19:3d:d4:e1:
                    cc:c0:c1:f4:ac:18:b1:96:c9:b2:af:9d:4a:87:d3:
                    93:56:44:a5:51:2a:b7:49:e2:bb:7c:fa:ba:89:70:
                    e6:ae:3d:44:e0:0e:c9:c4:ce:a5:97:08:01:13:2b:
                    a5:e9:3c:5e:14:46:3b:5d:17:98:1d:2c:3f:b0:6c:
                    85:95:4f:c7:a4:a4:4f:90:63:65:8d:dd:f7:2d:6b:
                    93:1a:59:ce:a4:4d:f8:b2:a9:35:09:70:24:d4:20:
                    4a:6f:c8:9d:51:36:1b:24:14:92:e8:2e:4d:ca:64:
                    a7:ff:29:80:ac:55:19:f9:15:52:0a:d7:0b:6e:02:
                    a9:5c:c4:30:a8:3a:49:a7:4c:bd:04:cf:88:f4:20:
                    c4:ef:21:18:a9:c8:96:f9:2b:66:5f:79:6e:56:ab:
                    e8:e3:2e:d0:6a:a4:62:b2:c2:35:08:b2:a8:b6:94:
                    28:b1:2f:3c:1f:67:6f:bf:45:b5:bd:83:23:b1:1a:
                    dc:34:6b:68:92:c6:bc:31:4e:d1:fd:d1:a9:8a:4b:
                    aa:99:78:18:c7:95:f9:0e:60:04:5e:1e:c0:55:c6:
                    a6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:BA:C4:28:60:CD:11:CE:B3:54:45:E8:9F:EA:6E:D3:F5:E8:D9:6C
            X509v3 Authority Key Identifier:
                keyid:A5:A6:A9:EA:C1:AC:F7:6E:55:2C:78:BD:D7:8B:A7:4F:ED:DD:3F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:c8:8c:85:22:7b:c0:1a:d6:42:6c:79:b2:bf:08:86:ca:7b:
         5e:59:2f:8f:e3:2b:44:e3:98:8c:55:ea:69:46:4d:32:29:cb:
         0d:88:b2:79:99:d0:0e:0a:02:07:30:19:e7:c5:7a:59:60:e0:
         41:db:36:35:1f:47:0e:37:09:1d:f6:a2:b5:0c:48:70:60:e5:
         d8:e4:fc:57:c4:69:7c:8e:ac:91:e1:ba:7c:bf:da:ab:8f:5e:
         19:ce:52:7d:2e:eb:ac:0c:1e:a8:ef:b6:ef:d4:16:56:20:21:
         e8:5e:ed:5a:af:a0:61:5b:85:98:3d:12:30:f0:3d:e8:1f:c5:
         51:fd:c8:1f:06:e3:74:89:c2:75:39:cf:c4:f0:e3:f7:84:0b:
         b7:2b:b2:4d:77:34:b1:f5:00:71:05:a1:95:17:7b:cc:6e:36:
         1e:b6:bb:58:9b:1c:3c:17:e0:5e:38:07:db:51:c1:bc:5a:ad:
         28:37:b8:89:7d:2c:61:e7:e4:54:39:c2:c7:f2:84:91:76:49:
         20:32:94:8f:0c:93:1b:2a:cb:7c:1c:1f:dc:cc:08:36:cf:f8:
         71:b1:42:7a:cc:b9:f1:8f:b7:0b:2f:cd:ba:1f:68:b7:81:8e:
         f2:90:cb:ea:50:c6:0d:29:4f:77:ef:e7:97:6d:b7:5d:67:9b:
         0d:78:2f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:51:15 2026 by rpki-client