Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft
File:                     B6YH3KkzMh_3j-xozXpMFJVDel8.mft (raw, json)
Hash identifier:          ZGzejvoF82IzntFqHl4sVJqLfGZaiDWTe3ddBfWieVo=
Subject key identifier:   74:A2:6C:D3:70:16:22:07:8D:3B:44:A1:3C:A4:14:BD:55:C3:7A:C9
Authority key identifier: 07:A6:07:DC:A9:33:32:1F:F7:8F:EC:68:CD:7A:4C:14:95:43:7A:5F
Certificate issuer:       /CN=A9129DCB/serialNumber=07A607DCA933321FF78FEC68CD7A4C1495437A5F
Certificate serial:       0A78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft
Manifest number:          0A67
Signing time:             Mon 22 Jun 2026 19:41:07 +0000
Manifest this update:     Mon 22 Jun 2026 19:41:07 +0000
Manifest next update:     Mon 29 Jun 2026 19:41:07 +0000
Files and hashes:         1: B6YH3KkzMh_3j-xozXpMFJVDel8.crl (hash: 2yHGkAlozIouPkD/9jokfxXbDzGmq4RvwJXpCRhJn3o=)
                          2: BAA6E77E852D11ED9A1A8D47C4F9AE02.roa (hash: 8Im/zm3jvYg6x17xxxV1bfF2mu5a90mnM/wSlnRSAPQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.crl
                          rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 19:41:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2680 (0xa78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129DCB, serialNumber=07A607DCA933321FF78FEC68CD7A4C1495437A5F
        Validity
            Not Before: Jun 22 19:41:07 2026 GMT
            Not After : Jun 29 19:41:07 2026 GMT
        Subject: CN=6a398fd3-d1e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:93:9c:9f:7e:ec:57:c0:86:4e:34:0c:0a:18:
                    cd:56:c8:37:07:1a:06:75:18:42:9c:e9:5b:c9:81:
                    e1:e5:20:6a:8f:2a:7c:7c:c3:ec:79:2b:9b:0a:34:
                    d2:d3:7d:d8:61:d2:bb:ee:40:0d:70:80:25:ff:5a:
                    2b:93:d5:26:54:8d:da:c7:b6:a8:ca:df:df:64:2b:
                    99:16:76:0f:e0:24:16:e2:07:1d:7a:41:34:51:35:
                    fd:90:39:1d:54:cb:e5:0c:2c:9c:e4:19:8b:67:5a:
                    2a:16:99:f3:95:3a:7c:4f:17:a1:44:4f:f9:32:ad:
                    89:ce:05:1f:de:c9:0d:3d:c3:aa:c8:df:3d:6b:26:
                    71:72:73:16:e5:b9:a8:96:31:30:c2:d4:34:77:3f:
                    c7:35:99:32:3c:b2:65:29:c8:76:1b:cf:1d:30:75:
                    0e:2e:52:c7:1e:26:00:64:53:79:6d:0a:dd:20:81:
                    f2:52:1b:6f:fe:d4:02:d8:65:55:ff:85:eb:2f:33:
                    9f:d8:0d:ce:b4:8f:28:21:74:f4:f8:d0:46:7a:60:
                    d7:4a:8a:d4:47:29:7a:08:fe:8a:45:5b:82:83:1c:
                    b8:63:3a:2f:4f:e5:bc:b3:f0:ad:aa:54:54:ae:97:
                    7d:04:c8:f8:bb:7b:7b:a4:e9:5b:16:b8:44:c9:21:
                    13:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A2:6C:D3:70:16:22:07:8D:3B:44:A1:3C:A4:14:BD:55:C3:7A:C9
            X509v3 Authority Key Identifier:
                keyid:07:A6:07:DC:A9:33:32:1F:F7:8F:EC:68:CD:7A:4C:14:95:43:7A:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:af:12:3d:db:a7:cf:00:a0:fd:a0:15:60:b0:b5:52:7d:23:
         e5:84:17:ed:1f:9b:02:e6:89:9c:42:82:c2:a9:87:12:ca:5c:
         b5:40:5b:77:23:aa:dd:83:d7:cb:da:d1:98:5f:02:7c:e1:86:
         a3:19:7f:7f:af:48:51:41:23:b3:0b:42:b4:4a:10:91:d7:87:
         1d:51:36:9e:dc:fe:8f:fe:49:fe:b7:a0:02:64:74:02:e3:db:
         f1:d6:71:37:b7:92:6e:d6:9e:5c:af:d8:f5:0c:cf:42:dc:b8:
         85:5a:f7:76:ad:48:dc:2b:91:ba:a1:10:70:b3:f3:b3:97:df:
         46:34:dd:05:53:8f:9c:74:c1:9a:08:6c:30:6e:a3:75:c7:a4:
         7f:e4:e3:3a:fd:66:a9:be:1d:4a:08:22:1a:81:8a:51:38:04:
         7e:5c:4a:51:e6:a2:82:81:8e:3e:98:d2:21:f3:35:65:ce:35:
         02:7c:64:0c:2c:20:b8:bc:e2:18:4c:05:cf:44:dd:2d:6a:56:
         93:15:c3:37:04:bc:16:b8:28:cf:a3:51:49:fe:42:89:75:8b:
         73:08:04:54:e9:78:27:7f:98:0f:56:26:38:5e:d2:1d:7c:ff:
         e5:13:03:e1:8c:b9:1a:ec:30:47:54:4b:8d:98:2c:83:20:7d:
         70:cf:1d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:28:51 2026 by rpki-client