Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.mft
File:                     6PktayopMPClvq9TBEyF2OreHro.mft (raw, json)
Hash identifier:          8dqvbE+vPq6a/YdbYKo0Pq6egyDvvb5IlJCSygQht1M=
Subject key identifier:   35:13:86:AB:EA:1A:C6:4F:76:69:5B:23:11:F9:4F:78:5C:B0:03:E1
Authority key identifier: E8:F9:2D:6B:2A:29:30:F0:A5:BE:AF:53:04:4C:85:D8:EA:DE:1E:BA
Certificate issuer:       /CN=A9129C87/serialNumber=E8F92D6B2A2930F0A5BEAF53044C85D8EADE1EBA
Certificate serial:       04DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6PktayopMPClvq9TBEyF2OreHro.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.mft
Manifest number:          04D5
Signing time:             Sat 04 Apr 2026 23:36:56 +0000
Manifest this update:     Sat 04 Apr 2026 23:36:56 +0000
Manifest next update:     Sat 11 Apr 2026 23:36:56 +0000
Files and hashes:         1: 6PktayopMPClvq9TBEyF2OreHro.crl (hash: LxXoNlvDQ374090vwCxnS/HT2rKesnoru007QG9N+is=)
                          2: 80A9DE56614C11EC9175DE54C4F9AE02.roa (hash: ERLTmQk83R4LxALyNwa1PO2UwX8u5XdkmpQu0uN+p1U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.crl
                          rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6PktayopMPClvq9TBEyF2OreHro.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:36:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1244 (0x4dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129C87, serialNumber=E8F92D6B2A2930F0A5BEAF53044C85D8EADE1EBA
        Validity
            Not Before: Apr  4 23:36:56 2026 GMT
            Not After : Apr 11 23:36:56 2026 GMT
        Subject: CN=69d1a098-ce1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4d:df:55:cd:ee:91:5d:c6:e0:98:8d:c3:ad:
                    e4:18:c3:9a:6b:48:c1:1a:57:1e:2d:28:19:af:06:
                    a9:fb:5c:f2:53:27:36:b0:7f:fb:81:99:eb:1c:fa:
                    f7:a6:65:dd:80:1d:f3:ab:f8:2e:8c:22:34:08:54:
                    40:67:cf:8d:8c:df:d8:cb:00:ef:f0:f9:2a:f5:cc:
                    81:fd:57:88:5d:f0:d5:30:43:9a:5d:8c:35:81:6a:
                    61:3e:a6:30:60:65:28:c0:8c:e9:61:1c:0e:fb:c2:
                    52:5c:c4:a7:60:7a:e0:51:81:73:6b:fa:0d:91:2c:
                    21:e4:1a:8e:43:c6:dc:d2:6c:e2:0c:96:99:b1:52:
                    1f:ec:75:68:16:29:ff:aa:34:2d:ed:4b:c4:ad:27:
                    41:1d:4f:80:98:8d:47:5c:7a:e2:99:91:bf:26:d7:
                    f9:6f:fe:49:c3:90:ab:35:48:55:5b:29:a7:7b:24:
                    43:a1:8a:6e:26:53:bb:f5:0d:e1:1d:c1:a8:99:f0:
                    39:7d:23:81:bf:91:8a:c2:9d:30:7d:db:2c:ce:41:
                    f4:08:4e:dc:4f:84:cc:35:1c:00:0f:07:af:b1:47:
                    a7:81:21:bb:df:e9:c2:43:0e:22:c9:f9:f5:67:c0:
                    79:52:8c:26:54:fe:13:6e:15:13:c6:e9:f2:0f:8a:
                    9d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:13:86:AB:EA:1A:C6:4F:76:69:5B:23:11:F9:4F:78:5C:B0:03:E1
            X509v3 Authority Key Identifier:
                keyid:E8:F9:2D:6B:2A:29:30:F0:A5:BE:AF:53:04:4C:85:D8:EA:DE:1E:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6PktayopMPClvq9TBEyF2OreHro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:24:4f:f1:32:70:e4:1b:43:52:c0:7b:60:29:63:3c:e6:e6:
         1f:21:9c:60:4e:30:4f:cd:52:1a:41:13:39:22:8f:c9:04:be:
         31:ef:3d:0f:b0:37:b2:50:3b:b9:ca:39:a0:c2:bb:2a:8d:94:
         ed:bf:fd:16:af:47:eb:20:d3:53:d3:d1:09:b2:44:6b:56:95:
         ab:ec:7e:96:f4:30:d4:33:7a:ff:8e:cf:16:0d:45:0a:fd:11:
         d8:f4:bd:a7:c9:a7:84:04:88:96:32:fe:c1:8f:43:af:8d:f7:
         f7:89:c2:31:f5:fa:89:e5:64:76:64:e1:ce:90:76:1f:bf:4d:
         0e:94:9a:f2:bb:4b:e8:c0:ec:85:6f:2c:d9:5c:e9:db:86:d0:
         89:5d:6a:da:96:8c:84:59:54:24:2f:84:69:09:aa:c5:5b:f8:
         f5:bb:7f:04:b1:be:e1:ed:45:0e:a7:f2:0e:78:e2:13:ed:6b:
         72:ee:13:03:9f:e4:b0:cb:ee:7c:bd:a9:94:3f:61:cc:6a:be:
         63:06:fa:bc:8b:61:6d:68:5d:13:3c:a7:7e:79:c2:60:48:d5:
         1b:12:e6:bf:94:a2:f9:55:0f:c6:12:e0:ce:02:82:f5:63:d1:
         3a:b6:f4:37:32:63:04:c2:6a:db:9c:c4:a2:3a:22:9d:7b:66:
         6b:80:6b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:01:11 2026 by rpki-client