Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.mft
File:                     6bez7TFz3kD-TB_m2P5CucvpyDM.mft (raw, json)
Hash identifier:          sefZjja5GsvkdvJii4YS3UZ+qtTBDMcReweVyTGcsJA=
Subject key identifier:   4F:89:47:82:3F:64:99:DF:F0:1B:6D:8A:22:25:77:E1:51:03:18:4D
Authority key identifier: E9:B7:B3:ED:31:73:DE:40:FE:4C:1F:E6:D8:FE:42:B9:CB:E9:C8:33
Certificate issuer:       /CN=A9137E12/serialNumber=E9B7B3ED3173DE40FE4C1FE6D8FE42B9CBE9C833
Certificate serial:       0196
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bez7TFz3kD-TB_m2P5CucvpyDM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.mft
Manifest number:          0190
Signing time:             Mon 05 Oct 2026 04:47:40 +0000
Manifest this update:     Mon 05 Oct 2026 04:47:40 +0000
Manifest next update:     Mon 12 Oct 2026 04:47:40 +0000
Files and hashes:         1: 6bez7TFz3kD-TB_m2P5CucvpyDM.crl (hash: 2bDfXazjJYWrEPhObeIeZgcnMyJCom1BP2TJ1XU9GSU=)
                          2: 367EF0645F9B11EFB904A774C4F9AE02.roa (hash: 4vNJQxcsfIlM8JrvGlM4evgFRLcduyTRiUIuk3E5qvY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.crl
                          rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bez7TFz3kD-TB_m2P5CucvpyDM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 04:47:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406 (0x196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137E12, serialNumber=E9B7B3ED3173DE40FE4C1FE6D8FE42B9CBE9C833
        Validity
            Not Before: Oct  5 04:47:40 2026 GMT
            Not After : Oct 12 04:47:40 2026 GMT
        Subject: CN=6ac32bec-7339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fd:9b:29:cb:55:b5:9f:31:fa:c3:68:3e:82:
                    d4:cb:10:0c:5b:47:4f:b4:18:e9:3e:f0:a5:49:ca:
                    1a:4c:bb:7d:8a:2a:98:5f:84:e7:15:29:52:b9:1b:
                    1d:d5:24:fe:d1:f3:84:b6:17:50:20:ea:d5:bc:90:
                    56:86:23:57:9c:bc:85:24:91:ec:98:9e:75:f3:58:
                    da:f1:05:19:a8:60:69:99:21:12:3e:22:ea:b6:d8:
                    e4:a3:23:c1:36:a8:fc:5d:4b:99:56:ae:18:ad:27:
                    f3:fe:ea:3b:d5:81:8e:95:2f:72:6b:1d:d0:83:c5:
                    f5:80:b8:c2:99:1a:28:be:7b:e9:76:7f:42:5f:a9:
                    7d:2a:16:76:d7:a3:20:e8:a9:3d:e9:0a:c3:c9:fe:
                    f4:b9:76:e2:5a:f9:b5:97:72:57:42:fc:e1:6b:dc:
                    32:83:23:dc:66:21:b7:b9:5d:44:0d:28:6d:89:ba:
                    3d:a1:af:82:91:b1:50:1b:ac:cc:0b:6b:90:03:50:
                    c5:40:b4:e5:53:c6:2f:27:83:d1:cd:b0:18:ba:e2:
                    fa:af:fd:96:fc:73:7e:5a:30:a6:ef:60:93:08:49:
                    33:20:39:62:a6:32:aa:5c:c2:d2:80:c8:44:1a:93:
                    7c:88:46:23:b9:79:db:86:f9:d2:07:13:70:1d:8a:
                    b9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:89:47:82:3F:64:99:DF:F0:1B:6D:8A:22:25:77:E1:51:03:18:4D
            X509v3 Authority Key Identifier:
                keyid:E9:B7:B3:ED:31:73:DE:40:FE:4C:1F:E6:D8:FE:42:B9:CB:E9:C8:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bez7TFz3kD-TB_m2P5CucvpyDM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:6d:9f:45:61:a0:a9:71:04:f6:c4:4f:b7:39:e5:67:38:0f:
         56:5d:c2:a3:2e:6d:b8:7a:7b:48:67:81:52:ce:f0:d5:5b:20:
         68:82:9b:96:ba:2c:51:14:a8:92:cf:5b:de:ea:a1:41:83:60:
         ee:bb:0c:c1:e2:82:f0:79:76:a1:b5:bf:e0:94:f1:55:70:e5:
         32:f3:c1:48:f4:19:7a:99:42:85:2d:a5:61:3b:72:e4:bb:82:
         b2:89:fc:af:3b:5d:0d:2a:c0:f9:84:ae:5f:aa:17:69:3e:64:
         4c:2a:97:5b:bd:96:eb:7c:a1:61:a5:e4:f8:f3:35:4f:6f:56:
         8a:fe:8c:0a:df:1e:14:e1:d8:73:72:2a:85:e7:44:26:0a:42:
         a5:ae:81:66:43:1f:0f:99:5f:c0:59:1d:4e:3e:07:c8:bc:61:
         c3:0f:7c:37:02:23:85:f3:80:c8:25:5d:c6:9c:30:76:3b:6c:
         5c:d3:c1:34:fb:bc:fb:e4:36:f2:8e:0f:f0:1e:0f:7e:28:e2:
         25:c6:af:bc:6c:01:2d:58:41:35:f5:a7:4b:87:63:89:a1:c1:
         38:79:c0:5c:e6:fe:54:44:2b:bd:bf:ba:c3:50:a2:96:9f:90:
         b8:0e:66:4e:a1:8b:77:cf:fa:85:63:24:c3:36:d4:42:f1:fc:
         27:0e:40:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:26:36 2026 by rpki-client