Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft
File:                     a51l6unGl9ohy0vuv030zgpBkyE.mft (raw, json)
Hash identifier:          0otmaT8pcy1/tFAVtk3kIrZobGVF/aKQt/CnP7mOAUE=
Subject key identifier:   AE:A9:EF:26:7B:8A:0D:0E:5E:F3:CE:29:CD:29:09:75:1D:70:E1:B5
Authority key identifier: 6B:9D:65:EA:E9:C6:97:DA:21:CB:4B:EE:BF:4D:F4:CE:0A:41:93:21
Certificate issuer:       /CN=A9141FD6/serialNumber=6B9D65EAE9C697DA21CB4BEEBF4DF4CE0A419321
Certificate serial:       35C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft
Manifest number:          35A6
Signing time:             Mon 28 Sep 2026 14:43:25 +0000
Manifest this update:     Mon 28 Sep 2026 14:43:24 +0000
Manifest next update:     Mon 05 Oct 2026 14:43:24 +0000
Files and hashes:         1: a51l6unGl9ohy0vuv030zgpBkyE.crl (hash: 50qBzoc6D6thOXv37gFZsk3c6JCTQbCVTAIYoDtyZW4=)
                          2: BBDA65F6479111F1892030F49D833773.roa (hash: t3MKX0SQ0l2/O3Cn8Pta+/GR5x74uHYlPAkfD5y3Nzg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.crl
                          rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 14:43:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13766 (0x35c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141FD6, serialNumber=6B9D65EAE9C697DA21CB4BEEBF4DF4CE0A419321
        Validity
            Not Before: Sep 28 14:43:24 2026 GMT
            Not After : Oct  5 14:43:24 2026 GMT
        Subject: CN=6aba7d0d-1cb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1b:e4:76:00:1c:f8:7d:58:c6:d9:2d:7a:f4:
                    49:48:6e:a3:12:fb:0f:37:50:a9:88:d6:5e:58:ba:
                    e2:7b:b0:61:c8:4a:89:63:15:9a:ca:cf:97:dc:c9:
                    9c:30:5e:5f:45:a3:64:fb:13:c2:69:34:bd:95:dd:
                    2d:f2:cf:42:78:4f:86:b6:02:1d:e6:29:c4:d1:06:
                    92:2b:3c:e9:a1:5c:c3:9a:0e:91:81:3b:96:6d:bb:
                    8b:a6:1a:86:c3:35:b8:ba:e9:61:e7:fc:c4:ca:ef:
                    f3:24:cc:d1:43:d7:dd:f7:39:03:a6:8c:23:85:23:
                    45:08:dd:50:5e:9e:f2:50:d2:7b:fb:98:0b:8e:2d:
                    16:8b:71:26:34:5a:f6:3c:61:00:87:80:a8:81:82:
                    ac:db:77:d0:83:36:e3:ac:1f:61:ba:88:4a:0b:61:
                    f0:77:93:4c:f6:72:5f:1c:7a:88:0b:29:b7:6a:d9:
                    d3:59:73:61:4f:52:f2:62:e7:ac:22:5d:24:02:4b:
                    c9:7c:7e:9f:91:ad:c6:61:7c:c5:e7:d4:1c:c3:f8:
                    51:51:2e:f0:2c:d7:e2:bf:77:a6:b4:50:11:65:9c:
                    a6:e9:c6:65:84:01:e3:84:0a:e3:73:d6:3f:94:c5:
                    30:9c:79:c7:50:75:cb:b1:f1:77:9a:c8:0b:d6:02:
                    02:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:A9:EF:26:7B:8A:0D:0E:5E:F3:CE:29:CD:29:09:75:1D:70:E1:B5
            X509v3 Authority Key Identifier:
                keyid:6B:9D:65:EA:E9:C6:97:DA:21:CB:4B:EE:BF:4D:F4:CE:0A:41:93:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:28:9f:2d:c3:db:ad:5a:3e:44:8f:ee:f2:66:0f:15:98:b4:
         bc:eb:ec:61:2c:fd:b8:76:22:c8:79:77:9b:c2:8f:ee:06:86:
         e7:27:6c:83:69:d4:89:9b:73:07:43:4f:79:82:d2:4a:6b:2e:
         92:ee:31:88:d4:ad:97:a9:83:09:71:c8:f5:8a:9e:cb:97:b7:
         03:3c:db:6d:1c:94:1c:8b:3b:56:4b:91:f2:4d:f2:96:f0:d5:
         70:58:87:2f:96:41:77:42:b4:94:4d:db:fe:06:c3:b7:8b:8b:
         b0:37:d9:6d:36:88:b3:a7:98:f0:85:4b:f9:34:eb:c8:27:1b:
         53:f4:9c:d7:85:bb:cf:b1:c4:83:98:ce:30:7b:a6:63:06:61:
         00:92:a3:97:b0:85:d9:67:87:58:15:c7:8a:ca:4d:1e:4b:e3:
         66:70:73:54:86:6b:b1:09:49:98:e8:7d:87:ba:93:62:11:40:
         b3:d5:e1:49:0f:99:61:ac:24:23:ab:87:47:df:f8:9b:ac:6a:
         e5:b4:36:eb:ce:43:61:00:c9:9b:74:2e:24:e5:df:60:4c:6e:
         03:78:58:c5:f3:27:cf:cb:8d:7e:5e:10:d7:de:75:3f:8d:66:
         ff:9d:ed:d4:5d:b6:2f:44:9d:eb:ef:ae:34:ba:c3:eb:79:75:
         09:1d:16:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:53:28 2026 by rpki-client