Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft
File:                     -ty5VaOsFGWZfQjySL-GxDNE-3g.mft (raw, json)
Hash identifier:          Xu67ElmpSWPdFpDmK/Fz12Fw0N0Mv8KrgCek0+kW4aI=
Subject key identifier:   34:9A:B9:A5:8C:05:52:FB:47:84:74:EE:39:37:AB:29:CC:C1:EA:8A
Authority key identifier: FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78
Certificate issuer:       /CN=A9148F32/serialNumber=FADCB955A3AC1465997D08F248BF86C43344FB78
Certificate serial:       06A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft
Manifest number:          06A1
Signing time:             Tue 18 Aug 2026 22:47:29 +0000
Manifest this update:     Tue 18 Aug 2026 22:47:29 +0000
Manifest next update:     Tue 25 Aug 2026 22:47:29 +0000
Files and hashes:         1: -ty5VaOsFGWZfQjySL-GxDNE-3g.crl (hash: Wyzi+nnqK7Q3je8HHMU4QPul+UTM2tljhbZaFBEBZkc=)
                          2: 4D470362C55811EB981FA987C4F9AE02.roa (hash: wQ1ccwGJlTNocRYfMJoEjZ0WE0y8wwNJkSvp/kcCKyE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.crl
                          rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 22:47:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1705 (0x6a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148F32, serialNumber=FADCB955A3AC1465997D08F248BF86C43344FB78
        Validity
            Not Before: Aug 18 22:47:29 2026 GMT
            Not After : Aug 25 22:47:29 2026 GMT
        Subject: CN=6a84e101-b5fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:55:62:ba:b4:84:79:bd:52:a6:d0:89:e1:63:
                    b3:d7:74:5f:7a:86:e2:22:2f:17:da:f8:a5:92:f6:
                    27:4d:8a:aa:a6:f6:3f:8f:50:8d:16:d1:d4:9a:47:
                    82:86:3b:2f:10:75:cb:05:cb:dc:1a:c0:9e:29:d2:
                    c1:65:51:38:4b:3b:49:45:7c:26:13:f3:40:8c:3a:
                    af:77:cd:40:09:40:a2:68:d4:c7:2e:da:43:a2:b1:
                    50:2a:6a:2f:d4:40:42:f9:88:30:a9:7d:49:93:90:
                    96:37:53:69:ae:25:c9:86:17:ac:fc:0f:94:35:54:
                    cf:54:9f:1d:d5:71:e7:d7:16:2b:a2:e4:d5:f9:03:
                    66:e5:3d:9b:01:eb:4e:99:2a:25:06:6d:b3:7d:dc:
                    bc:5e:5d:c6:0e:a1:46:5f:57:69:0e:4a:f9:58:ce:
                    b9:cc:99:a3:77:55:8c:8c:1a:f4:c9:41:4a:fa:18:
                    77:18:c2:2d:34:eb:8c:ba:ac:18:1d:c9:55:cd:6b:
                    55:0a:1a:8d:31:aa:46:5b:04:db:d2:21:5c:2c:37:
                    86:a6:45:67:06:06:a0:86:fa:22:35:44:9d:af:ea:
                    ff:ac:b5:97:40:4f:69:1f:57:21:a6:30:73:e7:83:
                    f3:a0:cb:01:73:36:b9:48:0d:f7:de:9f:8d:31:9e:
                    f6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:9A:B9:A5:8C:05:52:FB:47:84:74:EE:39:37:AB:29:CC:C1:EA:8A
            X509v3 Authority Key Identifier:
                keyid:FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:92:89:24:1a:43:5f:c4:db:54:f9:c1:07:22:0e:39:25:fb:
         81:23:3c:c4:e2:1a:9e:1c:16:0b:e2:eb:3b:50:26:0f:9a:36:
         61:04:44:cd:69:14:3b:86:94:5b:b7:1b:73:f5:04:bf:ac:07:
         93:f1:fd:fd:36:eb:08:48:ad:4b:f8:55:4e:b2:66:68:88:91:
         97:17:63:47:03:0d:3e:9f:8e:6b:d3:ca:6a:56:b7:2d:46:b0:
         f2:e3:4a:68:2b:39:d8:c9:78:83:16:be:7a:1a:94:47:af:82:
         fc:ab:06:4e:f5:10:28:fa:e1:08:9a:31:45:9c:89:84:46:cc:
         a3:99:df:07:ff:e0:e9:44:de:00:6d:fc:b8:3f:ab:a6:a2:59:
         26:70:0b:c3:4b:fe:57:cc:81:17:e5:c3:87:bb:38:8d:72:b9:
         8f:f1:28:c0:98:c4:1b:7e:c3:00:fb:ac:0e:ad:74:38:f9:67:
         f6:82:59:97:d2:0a:86:d4:c2:c1:4f:18:5e:f0:e5:9b:9c:94:
         21:f0:25:9e:35:f9:fa:40:0e:53:6b:8e:09:0f:bf:33:5a:0c:
         aa:8c:84:45:ed:41:64:26:62:bf:b9:3e:b2:3a:fe:2c:41:ee:
         5f:f2:69:38:1d:5c:b8:e4:34:03:88:57:44:0b:9e:d2:ed:b9:
         66:9e:73:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:03:27 2026 by rpki-client