Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.mft
File:                     6PktayopMPClvq9TBEyF2OreHro.mft (raw, json)
Hash identifier:          LZcKUhABH++jA2UJN9I9guqSvG8Qh/fJTUQMkPRql2I=
Subject key identifier:   96:0E:BB:34:64:3E:A5:B5:64:A3:DC:43:B1:70:F2:33:73:B0:4B:29
Authority key identifier: E8:F9:2D:6B:2A:29:30:F0:A5:BE:AF:53:04:4C:85:D8:EA:DE:1E:BA
Certificate issuer:       /CN=A9129C87/serialNumber=E8F92D6B2A2930F0A5BEAF53044C85D8EADE1EBA
Certificate serial:       0536
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6PktayopMPClvq9TBEyF2OreHro.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.mft
Manifest number:          052E
Signing time:             Thu 24 Sep 2026 23:24:26 +0000
Manifest this update:     Thu 24 Sep 2026 23:24:25 +0000
Manifest next update:     Thu 01 Oct 2026 23:24:25 +0000
Files and hashes:         1: 6PktayopMPClvq9TBEyF2OreHro.crl (hash: I+zzO/LVZHTEkA4lbIkK3Ql5OFO6qsjpw8CAGhcYl8E=)
                          2: BF9CF5EE597711F18D905478A6833773.roa (hash: hTeeZo8w2xGBlhPflI/Wkk6p0VKwgyMAy+sSrfqGpmg=)
                          3: 80A9DE56614C11EC9175DE54C4F9AE02.roa (hash: ERLTmQk83R4LxALyNwa1PO2UwX8u5XdkmpQu0uN+p1U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.crl
                          rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6PktayopMPClvq9TBEyF2OreHro.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 23:24:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1334 (0x536)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129C87, serialNumber=E8F92D6B2A2930F0A5BEAF53044C85D8EADE1EBA
        Validity
            Not Before: Sep 24 23:24:25 2026 GMT
            Not After : Oct  1 23:24:25 2026 GMT
        Subject: CN=6ab5b12a-4a57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:aa:53:ce:29:d5:7d:75:7b:76:ce:47:bf:0c:
                    74:2c:e6:b1:44:55:09:8f:26:46:f6:97:1b:6f:ee:
                    52:11:91:8f:42:7d:8e:8c:5a:85:00:02:4a:4f:fc:
                    5d:8e:1a:52:47:5d:db:20:22:de:5a:9d:01:97:de:
                    d6:f8:93:29:21:72:43:6b:a4:a6:15:7d:bb:20:44:
                    ab:4c:49:f5:1c:96:5f:48:d9:b8:bd:39:e9:91:dc:
                    53:2b:d2:16:07:31:57:4f:3e:6b:bd:ba:07:db:3b:
                    2e:17:ea:3e:55:53:4a:43:0a:df:6a:69:56:fa:b5:
                    ee:f5:03:ca:5d:89:17:d1:6f:4f:97:a5:d6:b4:ed:
                    e4:88:2e:8b:69:8b:27:42:b1:2e:99:0f:30:43:1d:
                    e4:76:99:62:97:7f:62:86:cc:fa:73:47:53:c9:e5:
                    a2:1b:25:18:68:02:1e:be:8a:ef:47:65:dc:01:83:
                    e4:3c:75:4d:0b:95:7c:da:18:cb:77:18:41:48:6e:
                    98:6b:6c:0f:c6:ae:b6:50:65:6c:3f:2a:9d:5a:25:
                    da:f6:04:f5:ba:82:e1:5f:12:38:c2:04:d2:7b:28:
                    6d:0f:ca:2a:2f:1a:2e:a7:34:39:da:07:a8:c1:b1:
                    3d:5f:4d:77:77:41:e0:3a:f5:05:02:5d:fb:6a:90:
                    ff:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:0E:BB:34:64:3E:A5:B5:64:A3:DC:43:B1:70:F2:33:73:B0:4B:29
            X509v3 Authority Key Identifier:
                keyid:E8:F9:2D:6B:2A:29:30:F0:A5:BE:AF:53:04:4C:85:D8:EA:DE:1E:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6PktayopMPClvq9TBEyF2OreHro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:4f:bc:8c:ab:23:81:e5:cc:f9:d1:22:3e:29:ea:bb:ea:b3:
         3b:b0:c1:e9:3d:6f:17:09:c1:cb:f5:ff:41:fa:32:bd:c4:42:
         63:de:80:92:13:f4:d9:0b:15:09:c7:3d:1e:f5:4c:77:11:70:
         c7:34:00:75:32:25:a1:cd:ef:4e:13:40:e6:5c:0a:cb:05:43:
         d2:0b:0e:7b:92:2f:35:b4:f9:4f:58:64:20:29:6f:d8:4e:6b:
         3f:4a:a3:c3:8c:07:23:48:19:73:bb:8a:7e:3d:85:da:46:56:
         22:7a:c5:f2:f2:5a:e9:19:fa:42:84:cd:70:b8:34:5e:dd:26:
         6c:ef:cf:6e:40:57:47:70:6d:bd:e3:fc:ee:c7:10:5e:1e:75:
         22:6e:3d:a6:c3:b4:f5:a3:db:6b:cb:06:f7:ef:e1:b0:27:bc:
         84:db:14:af:22:aa:cb:c0:e1:05:a6:27:40:d0:e1:01:6a:a3:
         9b:b0:b8:d8:9d:ba:0a:53:48:85:90:69:e0:46:64:58:ed:0c:
         45:ee:78:a4:94:87:eb:78:81:53:95:f8:24:8e:75:41:be:a2:
         e3:22:ae:a3:c7:0f:06:80:17:6c:a8:6e:e6:41:8b:2c:5d:b3:
         a1:65:d1:94:f0:e3:dd:28:56:d8:72:1b:4b:35:49:d0:c5:9b:
         a7:65:79:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:33:07 2026 by rpki-client