Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.mft
File:                     Y0nPcXs0CWM10fw5e8UEBkinjw4.mft (raw, json)
Hash identifier:          xOkTEwFc8HsZPLzsix/Ubi6yM4dPxSMU/qFk3YyvgkU=
Subject key identifier:   6F:29:21:76:6E:1E:2B:BD:F2:AC:F0:1F:E6:85:18:59:47:DF:E3:76
Authority key identifier: 63:49:CF:71:7B:34:09:63:35:D1:FC:39:7B:C5:04:06:48:A7:8F:0E
Certificate issuer:       /CN=A9120D97/serialNumber=6349CF717B34096335D1FC397BC5040648A78F0E
Certificate serial:       6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0nPcXs0CWM10fw5e8UEBkinjw4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.mft
Manifest number:          6B
Signing time:             Sun 27 Sep 2026 08:30:39 +0000
Manifest this update:     Sun 27 Sep 2026 08:30:39 +0000
Manifest next update:     Sun 04 Oct 2026 08:30:39 +0000
Files and hashes:         1: Y0nPcXs0CWM10fw5e8UEBkinjw4.crl (hash: MmIcowWWOZ4TqPDugeIylWjlppx/tfvVJnB1eRFEbmI=)
                          2: B2D0F8D2178311F1B32BFEF6283D8C67.roa (hash: 0l1faSsNOHOUv9dts3Hprtyh48iyjB1f/xwuNggdhEY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.crl
                          rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0nPcXs0CWM10fw5e8UEBkinjw4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 08:30:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120D97, serialNumber=6349CF717B34096335D1FC397BC5040648A78F0E
        Validity
            Not Before: Sep 27 08:30:39 2026 GMT
            Not After : Oct  4 08:30:39 2026 GMT
        Subject: CN=6ab8d42f-48af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:99:c2:8f:0d:44:16:74:cd:5a:8a:5d:41:21:
                    e2:a8:fb:ca:75:d5:43:e8:f1:af:9c:b5:9c:bb:9a:
                    d7:21:da:a8:9e:c5:38:96:95:ce:50:43:22:24:bc:
                    10:80:00:47:9b:dc:ea:a0:0b:3f:25:9b:5c:56:c2:
                    27:a2:bb:78:5e:6c:df:17:6f:93:e7:f0:6e:05:de:
                    67:0d:51:3e:38:3b:91:8b:3e:42:9b:1f:69:08:5b:
                    55:51:fb:5c:5b:41:1a:75:63:86:47:48:c0:43:3d:
                    6a:35:52:5c:99:cf:b2:f9:65:f7:e3:50:22:ba:ee:
                    37:33:4d:cc:40:1b:85:e4:15:1e:eb:25:51:c4:85:
                    cd:66:1d:14:0a:3c:98:4a:f8:01:5e:35:c5:a9:d1:
                    ed:13:ce:cf:ff:db:09:c1:f7:d4:fc:1b:3e:af:33:
                    c6:67:d6:f7:6a:04:2c:a2:a4:f5:6a:dc:c7:75:b9:
                    08:14:8f:c1:cd:2f:5e:1e:f0:71:d0:dd:f5:77:d2:
                    52:19:6a:8e:07:b0:25:00:d5:07:67:b3:5b:e7:7d:
                    a0:5f:df:72:b6:ce:bf:4c:d7:f1:a8:ad:db:3a:83:
                    5f:62:2e:29:33:69:91:21:65:27:53:e9:a9:88:cc:
                    75:b4:72:8b:5c:19:97:33:2e:b9:56:3c:58:98:44:
                    a6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:29:21:76:6E:1E:2B:BD:F2:AC:F0:1F:E6:85:18:59:47:DF:E3:76
            X509v3 Authority Key Identifier:
                keyid:63:49:CF:71:7B:34:09:63:35:D1:FC:39:7B:C5:04:06:48:A7:8F:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0nPcXs0CWM10fw5e8UEBkinjw4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:99:94:14:f1:1e:7b:df:48:d8:4d:33:1a:a9:e4:32:78:5c:
         06:05:2b:0f:db:75:3c:c2:b7:14:bd:ee:80:4e:02:7c:c1:fc:
         9d:0e:a0:ec:37:1b:eb:d8:95:d9:5e:a1:4e:53:b2:fd:9b:46:
         35:ee:87:70:56:5d:b0:5b:a6:e0:43:77:dc:6d:9f:f5:14:61:
         01:15:cf:d3:30:11:e7:26:0e:37:0d:1f:85:c4:16:70:f5:ef:
         62:34:91:e0:7d:34:c9:57:e8:13:e5:41:89:47:9c:ee:19:6c:
         61:b2:50:1b:f8:2a:cd:aa:69:ca:2f:bb:e2:6c:a5:51:5e:6a:
         8f:34:de:53:8b:91:5f:74:1c:e8:be:b1:26:3e:bf:20:d4:a7:
         7e:27:ed:f0:81:28:8f:88:13:23:05:41:51:98:e3:8c:1d:c2:
         a2:95:13:9c:56:62:55:df:29:fe:31:79:54:d2:ab:04:b0:ab:
         80:12:49:6c:f6:e3:19:97:5d:b6:fd:f5:db:4e:3f:54:17:00:
         e3:04:9c:31:b7:16:e7:6d:fe:72:37:d6:00:43:95:4f:00:b8:
         88:69:c7:fa:34:41:4c:b8:81:24:e9:c1:ef:1a:43:55:4a:67:
         d7:fc:b2:09:bb:5e:42:85:3b:ba:74:b0:ac:95:59:f5:d6:d4:
         c9:77:0a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 14:20:49 2026 by rpki-client