Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft
File:                     B6YH3KkzMh_3j-xozXpMFJVDel8.mft (raw, json)
Hash identifier:          dtDoueABV9dCuyR8r7jYONkENi+Ni2guPNLvvbpausI=
Subject key identifier:   E4:DF:81:7D:06:F5:8D:17:CB:C2:3C:6B:AE:E6:BB:EF:A3:CF:0A:73
Authority key identifier: 07:A6:07:DC:A9:33:32:1F:F7:8F:EC:68:CD:7A:4C:14:95:43:7A:5F
Certificate issuer:       /CN=A9129DCB/serialNumber=07A607DCA933321FF78FEC68CD7A4C1495437A5F
Certificate serial:       0AAF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft
Manifest number:          0A9E
Signing time:             Thu 08 Oct 2026 19:40:54 +0000
Manifest this update:     Thu 08 Oct 2026 19:40:54 +0000
Manifest next update:     Thu 15 Oct 2026 19:40:54 +0000
Files and hashes:         1: B6YH3KkzMh_3j-xozXpMFJVDel8.crl (hash: jZQudLwz2CKJmM5+7rbkVb9zfkKmISoMavIEX0+Omgc=)
                          2: BAA6E77E852D11ED9A1A8D47C4F9AE02.roa (hash: 8Im/zm3jvYg6x17xxxV1bfF2mu5a90mnM/wSlnRSAPQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.crl
                          rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 19:40:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2735 (0xaaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129DCB, serialNumber=07A607DCA933321FF78FEC68CD7A4C1495437A5F
        Validity
            Not Before: Oct  8 19:40:54 2026 GMT
            Not After : Oct 15 19:40:54 2026 GMT
        Subject: CN=6ac7f1c6-d118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:55:60:7c:0d:79:97:0a:2e:85:d7:74:78:1c:
                    8d:0c:d6:9e:de:8f:8d:a4:96:97:f5:9b:53:d3:b5:
                    61:7f:83:f4:5d:17:23:01:66:b9:e1:7c:49:3c:47:
                    ec:41:27:3e:15:6f:1d:98:cb:62:ed:fd:50:51:0a:
                    64:57:c0:13:39:af:87:88:77:be:4c:0b:2b:1f:96:
                    14:72:bf:f5:52:45:98:40:1b:c2:6f:66:05:1e:0d:
                    b0:3e:cb:f3:fd:74:44:77:e7:a5:2b:c6:46:b4:9a:
                    95:95:ab:ed:3d:df:dc:6d:0b:7b:42:a8:5d:93:66:
                    5e:8d:0e:3e:c6:f1:44:2e:9a:cb:0b:00:a8:9a:e2:
                    3e:d3:33:d0:ee:60:68:9f:60:17:85:c4:40:e1:9b:
                    ea:fd:9c:46:a8:b5:33:a6:06:7a:da:f5:11:24:a7:
                    f2:9a:70:67:3e:53:4b:27:67:94:6a:e1:90:fc:d3:
                    f0:1b:1f:0f:76:42:3a:5e:6a:8e:ae:37:02:16:58:
                    ca:20:f0:8e:06:ea:9b:4f:29:42:ab:49:5f:d1:90:
                    f4:a9:6e:55:b0:99:02:69:da:a2:2f:ed:c8:27:db:
                    b1:63:b3:1f:6c:86:c2:7f:a3:0a:93:92:72:12:70:
                    97:c8:8b:21:db:20:8f:16:5f:43:af:54:0d:6f:82:
                    10:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:DF:81:7D:06:F5:8D:17:CB:C2:3C:6B:AE:E6:BB:EF:A3:CF:0A:73
            X509v3 Authority Key Identifier:
                keyid:07:A6:07:DC:A9:33:32:1F:F7:8F:EC:68:CD:7A:4C:14:95:43:7A:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:0a:de:70:9a:1a:6b:90:84:df:55:e8:1f:fc:f3:38:b5:9a:
         8b:33:08:4a:60:0d:23:a2:66:5f:ab:5a:11:fc:dd:5d:67:e5:
         38:1b:51:ed:a0:7c:d2:a4:f1:71:a3:df:ca:d0:1c:5a:d0:38:
         fc:cf:a0:52:a3:6c:13:52:cc:7f:40:92:10:7b:a3:1e:da:2f:
         c6:a3:69:60:71:71:c7:ae:54:9f:ab:a9:05:c2:b3:a0:67:ca:
         54:83:47:dc:91:b3:8e:73:23:94:48:61:9e:4a:a3:a5:e1:63:
         e9:35:88:5b:85:57:7f:6f:76:2e:2f:e6:4e:1a:3d:38:0a:9e:
         27:9b:be:64:1c:26:9e:78:88:7f:25:32:33:e3:99:d1:ab:75:
         86:a1:7d:fb:8e:6a:44:49:fc:bd:d9:59:c0:5b:18:20:d1:c0:
         bb:3a:74:42:b7:46:93:f4:7b:98:12:c1:49:7b:b5:85:96:6b:
         5f:84:3c:a6:d9:66:71:47:30:88:95:97:0e:43:e8:62:17:5e:
         d0:c6:cd:42:45:80:5a:18:f0:f7:bd:e4:b4:ba:0d:ec:d8:62:
         05:b7:d6:c4:80:10:6b:02:0d:75:1c:a5:52:77:5b:4d:b5:fd:
         f3:8c:72:2e:3d:3f:b7:a6:bf:67:db:d6:20:a4:02:82:9a:3a:
         80:97:de:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:12:24 2026 by rpki-client