Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft
File:                     C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft (raw, json)
Hash identifier:          Mkc5VkkME5miY2oSjzKQB/4RM685AOJM9ulK7nxEW4c=
Subject key identifier:   B8:C2:63:17:D1:79:25:D7:DC:EF:7D:05:B3:C6:E6:98:CD:C6:91:AD
Authority key identifier: 0B:A6:82:E8:03:8D:77:1A:37:07:EA:FA:82:FD:D0:4C:42:9A:4F:86
Certificate issuer:       /CN=A9197E5D/serialNumber=0BA682E8038D771A3707EAFA82FDD04C429A4F86
Certificate serial:       0276
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6aC6AONdxo3B-r6gv3QTEKaT4Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft
Manifest number:          0270
Signing time:             Thu 03 Sep 2026 02:12:33 +0000
Manifest this update:     Thu 03 Sep 2026 02:12:32 +0000
Manifest next update:     Thu 10 Sep 2026 02:12:32 +0000
Files and hashes:         1: C6aC6AONdxo3B-r6gv3QTEKaT4Y.crl (hash: ImV6phwUnXI5fjx9Lk684XTxPMtMEXXWTHJpLq4bB50=)
                          2: 582836EAF0BF11ED9EC0094AC4F9AE02.roa (hash: WZyXijNT2/qLi4CbFT1eB1AVRbLAqbleS+ktkCs1S8g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.crl
                          rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6aC6AONdxo3B-r6gv3QTEKaT4Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 02:12:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 630 (0x276)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197E5D, serialNumber=0BA682E8038D771A3707EAFA82FDD04C429A4F86
        Validity
            Not Before: Sep  3 02:12:32 2026 GMT
            Not After : Sep 10 02:12:32 2026 GMT
        Subject: CN=6a98d790-e57a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b2:f3:7e:57:a7:fe:8e:5e:52:3a:76:13:35:
                    e7:a5:2a:1c:bf:df:47:7f:0a:8a:79:9c:dc:7a:33:
                    b3:78:4a:ee:34:06:ed:15:4b:03:c8:14:f3:8b:a9:
                    b7:e2:a3:e0:1c:db:94:83:ca:b2:96:09:16:c3:06:
                    13:23:ac:42:83:70:b0:6f:3d:bb:4f:f4:91:ce:8a:
                    ff:fb:00:79:92:bf:f7:37:40:d8:58:a5:04:ad:a9:
                    bb:26:be:f2:37:d6:dc:24:dc:57:a2:e2:f6:4a:a2:
                    9f:82:31:f9:97:b8:52:4f:ef:a4:de:29:0b:43:84:
                    9e:67:e6:e2:18:6a:3f:b3:57:fc:39:73:30:09:aa:
                    11:27:f9:cc:bb:43:d1:76:c3:e8:d2:80:f2:d4:d9:
                    d6:0e:4f:cf:88:46:c1:68:8f:ee:5a:2d:21:e1:89:
                    2f:96:c6:53:dc:d4:ba:5e:78:4b:88:2b:d5:53:70:
                    be:c4:4e:8e:8e:10:e0:a9:03:be:c7:a2:c8:5c:31:
                    3a:b2:86:7f:30:dd:78:8e:37:14:64:3d:04:93:d1:
                    3a:b1:13:ed:6e:9f:09:48:dc:a0:1c:cd:69:0b:30:
                    54:59:9f:a7:c1:46:b2:31:e3:c1:84:b9:20:d2:b4:
                    99:ec:6f:10:4c:5b:a8:58:1b:8a:ee:9a:86:d5:47:
                    f5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:C2:63:17:D1:79:25:D7:DC:EF:7D:05:B3:C6:E6:98:CD:C6:91:AD
            X509v3 Authority Key Identifier:
                keyid:0B:A6:82:E8:03:8D:77:1A:37:07:EA:FA:82:FD:D0:4C:42:9A:4F:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6aC6AONdxo3B-r6gv3QTEKaT4Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:32:93:9f:75:ab:bc:11:7f:1b:01:a0:ba:21:65:c6:bb:9f:
         9c:9d:e8:c5:7d:5a:ae:1f:bd:de:45:ca:05:28:84:49:f4:8c:
         22:aa:b5:06:e6:80:6f:cb:b1:da:d4:a3:60:bb:46:c9:11:9e:
         9c:0a:72:66:f6:00:4f:ee:bc:90:c4:f9:f4:ba:94:9a:0e:fb:
         c0:b7:6c:ed:66:e1:8c:36:03:44:0c:bf:4a:85:a5:76:13:44:
         c4:ad:0e:d3:1d:92:27:4f:eb:1d:e1:aa:c1:06:85:5f:61:a0:
         93:39:7b:ea:f5:a5:56:22:53:0e:b5:88:6d:47:ff:7d:2e:b1:
         74:57:67:29:63:77:8b:17:88:b0:eb:09:72:24:46:b9:2a:c3:
         8d:e7:06:c8:94:8c:24:09:66:da:8b:b9:82:a6:ea:0c:b0:b1:
         5b:40:3f:b0:88:87:02:07:ee:88:0b:dc:1f:4d:02:05:6d:d2:
         28:28:e2:c5:b2:2d:f0:4b:32:9e:07:06:49:6a:7a:b2:d2:93:
         4f:99:76:4f:18:d4:34:03:19:d1:1b:2b:fb:f4:8c:a9:a0:3e:
         15:85:3b:68:07:da:0b:56:7f:37:3e:8d:a8:f1:49:19:24:b8:
         0d:2c:0a:3b:a1:a3:9a:1b:cf:1c:69:90:a5:65:2c:ff:a2:45:
         eb:a3:8b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:28:22 2026 by rpki-client