Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft
File:                     paap6sGs925VLHi914unT-3dP_k.mft (raw, json)
Hash identifier:          Y3Faa/d2PbM7HtO1GAUH1l9W9DgyhSTcWvFCrw2iHQE=
Subject key identifier:   3B:15:25:80:32:3F:D3:1D:23:02:F7:A7:31:AB:C2:01:2B:D6:9E:F4
Authority key identifier: A5:A6:A9:EA:C1:AC:F7:6E:55:2C:78:BD:D7:8B:A7:4F:ED:DD:3F:F9
Certificate issuer:       /CN=A9129AD6/serialNumber=A5A6A9EAC1ACF76E552C78BDD78BA74FEDDD3FF9
Certificate serial:       2C93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft
Manifest number:          2C80
Signing time:             Wed 22 Jul 2026 15:35:50 +0000
Manifest this update:     Wed 22 Jul 2026 15:35:49 +0000
Manifest next update:     Wed 29 Jul 2026 15:35:49 +0000
Files and hashes:         1: paap6sGs925VLHi914unT-3dP_k.crl (hash: Qg9gC5qi+1LKHViIcNQdYb1NokfjZLWUPvxRkKoLJxs=)
                          2: 9AD04EAAD58A11EE9992494AC4F9AE02.roa (hash: 2Vu6c2I8iVNOp/0hhK3ltNex+tULNdrSU6w0Dy/08/o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.crl
                          rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:35:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11411 (0x2c93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129AD6, serialNumber=A5A6A9EAC1ACF76E552C78BDD78BA74FEDDD3FF9
        Validity
            Not Before: Jul 22 15:35:49 2026 GMT
            Not After : Jul 29 15:35:49 2026 GMT
        Subject: CN=6a60e356-cec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6c:f6:26:54:a7:35:6f:de:cd:39:5d:13:86:
                    33:a5:f6:cf:a3:b5:06:9a:f6:fc:9e:e5:26:c2:99:
                    49:51:9c:08:5c:e6:eb:30:35:02:49:48:95:e1:61:
                    5c:6a:d9:6a:dc:02:78:c3:d6:63:1e:59:fc:8a:38:
                    8b:06:20:bb:21:8b:dc:88:bc:52:86:e4:3e:35:8f:
                    36:ef:07:d9:2d:57:80:64:6e:4d:24:ab:8c:10:d9:
                    cf:61:75:71:73:5b:ae:1b:4a:f5:21:0e:b0:7b:28:
                    62:fa:06:ff:42:c8:e3:2d:be:2e:b5:32:06:33:a0:
                    b9:cf:c8:0e:9a:af:84:8c:60:65:90:e9:66:4a:eb:
                    b8:8a:08:3c:33:d7:15:5e:13:e2:c4:96:8b:6f:65:
                    c6:b5:c8:e4:4f:46:9f:bd:45:64:f4:dd:90:48:d0:
                    45:58:0a:dc:73:4e:22:1a:e2:df:4f:de:3a:47:b0:
                    63:39:ff:80:a2:86:bd:22:93:bf:cf:ab:40:c2:fb:
                    73:f4:11:c9:b7:01:39:c1:41:0c:4e:50:a0:01:7d:
                    0b:3c:90:77:f3:61:fa:fe:9a:d4:50:09:fb:5a:92:
                    79:63:62:02:a6:77:fa:35:77:89:13:92:39:23:e5:
                    76:6b:72:a9:1d:78:96:df:81:a1:e1:14:44:14:37:
                    36:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:15:25:80:32:3F:D3:1D:23:02:F7:A7:31:AB:C2:01:2B:D6:9E:F4
            X509v3 Authority Key Identifier:
                keyid:A5:A6:A9:EA:C1:AC:F7:6E:55:2C:78:BD:D7:8B:A7:4F:ED:DD:3F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:e5:6a:a8:43:dc:f9:eb:af:25:e5:c6:ab:a2:4d:d6:2c:47:
         f3:b6:1a:ff:53:fb:0f:d9:f8:ee:60:24:3c:9c:40:37:5c:fe:
         bf:2c:c1:3a:a1:96:54:15:ba:b8:0d:ee:a5:4d:f0:de:54:19:
         d7:3d:13:c8:9b:9a:ec:a4:8b:0b:85:6f:b3:33:bf:51:3e:b5:
         47:cb:6b:60:69:c6:17:2b:43:1d:ec:99:0d:eb:76:0d:6f:cb:
         be:20:de:c9:e9:9a:40:e2:e6:7a:16:74:49:60:66:21:9c:c8:
         55:86:8a:18:b7:1a:85:2c:28:b5:07:60:b2:1a:a7:dc:0e:c5:
         e3:7c:27:ec:3e:a7:b0:13:90:10:53:bb:7f:3e:e4:f5:e3:41:
         80:87:9d:ce:d2:52:3b:f6:bb:33:b9:7e:ef:7e:6d:06:44:91:
         0a:e9:33:4a:23:75:c2:9c:a8:d2:db:9d:3f:68:83:6a:9a:82:
         04:cb:d6:b2:c7:30:e6:01:6b:cb:fd:a9:9e:e5:54:09:16:35:
         b2:3c:38:ff:73:52:ed:a1:62:e4:87:69:8d:a9:87:cc:a2:2d:
         35:e1:ce:a8:96:dd:0f:87:23:92:f0:91:e1:b7:6c:b6:f9:f6:
         59:85:3e:cf:e4:4c:35:8a:4f:27:26:aa:9a:e3:c8:9d:48:b3:
         ea:22:fd:c7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICLJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjlBRDYxMTAvBgNVBAUTKEE1QTZBOUVBQzFBQ0Y3NkU1NTJDNzhCREQ3OEJBNzRG
RURERDNGRjkwHhcNMjYwNzIyMTUzNTQ5WhcNMjYwNzI5MTUzNTQ5WjAYMRYwFAYD
VQQDEw02YTYwZTM1Ni1jZWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsWz2JlSnNW/ezTldE4YzpfbPo7UGmvb8nuUmwplJUZwIXObrMDUCSUiV4WFc
atlq3AJ4w9ZjHln8ijiLBiC7IYvciLxShuQ+NY827wfZLVeAZG5NJKuMENnPYXVx
c1uuG0r1IQ6weyhi+gb/QsjjLb4utTIGM6C5z8gOmq+EjGBlkOlmSuu4igg8M9cV
XhPixJaLb2XGtcjkT0afvUVk9N2QSNBFWArcc04iGuLfT946R7BjOf+Aooa9IpO/
z6tAwvtz9BHJtwE5wUEMTlCgAX0LPJB382H6/prUUAn7WpJ5Y2ICpnf6NXeJE5I5
I+V2a3KpHXiW34Gh4RREFDc2awIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDsVJYAy
P9MdIwL3pzGrwgEr1p70MB8GA1UdIwQYMBaAFKWmqerBrPduVSx4vdeLp0/t3T/5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUFENi9ENjc3REM5NERG
RDAxMUUzOTNEQjc5NUY1OTExRUEzMi9wYWFwNnNHczkyNVZMSGk5MTR1blQtM2RQ
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BhYXA2c0dzOTI1VkxIaTkxNHVuVC0zZFBfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
OUFENi9ENjc3REM5NERGRDAxMUUzOTNEQjc5NUY1OTExRUEzMi9wYWFwNnNHczky
NVZMSGk5MTR1blQtM2RQX2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAieVqqEPc+euvJeXGq6JN1ixH87Ya/1P7D9n47mAkPJxAN1z+vyzBOqGWVBW6
uA3upU3w3lQZ1z0TyJua7KSLC4VvszO/UT61R8trYGnGFytDHeyZDet2DW/LviDe
yemaQOLmehZ0SWBmIZzIVYaKGLcahSwotQdgshqn3A7F43wn7D6nsBOQEFO7fz7k
9eNBgIedztJSO/a7M7l+735tBkSRCukzSiN1wpyo0tudP2iDapqCBMvWsscw5gFr
y/2pnuVUCRY1sjw4/3NS7aFi5IdpjamHzKItNeHOqJbdD4cjkvCR4bdstvn2WYU+
z+RMNYpPJyaqmuPInUiz6iL9xw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:17:18 2026 by rpki-client