Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft
File:                     dOHLgzYmhzR4kyyiEYioj98uneA.mft (raw, json)
Hash identifier:          mCNYRYFgSvMwgcFCgnxz1vQwAHnXJGJ4U349fTPg9Sc=
Subject key identifier:   5E:62:F2:EE:C5:D5:11:DB:22:80:DE:67:58:63:80:81:E5:94:BC:04
Authority key identifier: 74:E1:CB:83:36:26:87:34:78:93:2C:A2:11:88:A8:8F:DF:2E:9D:E0
Certificate issuer:       /CN=A9121E13/serialNumber=74E1CB833626873478932CA21188A88FDF2E9DE0
Certificate serial:       074D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOHLgzYmhzR4kyyiEYioj98uneA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft
Manifest number:          074C
Signing time:             Wed 30 Sep 2026 14:49:28 +0000
Manifest this update:     Wed 30 Sep 2026 14:49:28 +0000
Manifest next update:     Wed 07 Oct 2026 14:49:28 +0000
Files and hashes:         1: dOHLgzYmhzR4kyyiEYioj98uneA.crl (hash: q7tMaYlgI4lo52ulpsiQnEL7BGH3ZCBQRvxm4jyUIss=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.crl
                          rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOHLgzYmhzR4kyyiEYioj98uneA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Oct 2026 14:49:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1869 (0x74d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121E13, serialNumber=74E1CB833626873478932CA21188A88FDF2E9DE0
        Validity
            Not Before: Sep 30 14:49:28 2026 GMT
            Not After : Oct  7 14:49:28 2026 GMT
        Subject: CN=6abd2178-a55c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:37:55:86:71:e8:d5:4b:42:19:13:fe:78:a0:
                    8d:9a:1f:8f:19:ea:4f:9e:53:a9:d2:87:51:ad:29:
                    42:d9:78:52:80:57:b6:73:b7:22:cd:cc:c8:61:62:
                    12:34:28:30:23:76:92:0c:38:9b:50:7e:b1:d3:60:
                    c4:4a:63:5f:8d:36:1f:51:f3:92:9b:37:f5:50:51:
                    b2:b7:64:74:8c:f1:85:ba:b2:66:2a:3d:25:34:6c:
                    9d:cf:dc:43:76:0c:fb:e7:b3:b6:6e:fc:ad:34:14:
                    b1:8f:c2:d2:9a:ec:2b:1f:a8:91:d7:5a:dc:2b:7d:
                    ea:9c:74:8a:96:4f:ad:b4:f8:e2:c0:18:57:48:16:
                    e3:a4:85:a4:41:90:c2:01:03:7c:73:89:37:8e:a0:
                    b8:e6:66:c4:11:47:1e:a1:5c:fc:69:2d:05:04:68:
                    74:7a:a2:66:34:c6:5d:67:db:76:78:d6:c2:c7:bb:
                    64:50:38:e3:ad:ce:3c:ac:b5:e0:0a:78:4b:a1:26:
                    38:43:4b:62:b1:92:e4:e8:09:f5:41:29:91:b1:06:
                    33:c0:ce:8e:b8:87:32:24:50:19:ef:65:58:40:cd:
                    3b:4c:8e:25:b1:05:ab:c0:22:fa:b4:e0:90:14:c0:
                    7d:ff:2e:ba:ec:bb:46:d2:27:e6:fb:d2:48:e8:6a:
                    41:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:62:F2:EE:C5:D5:11:DB:22:80:DE:67:58:63:80:81:E5:94:BC:04
            X509v3 Authority Key Identifier:
                keyid:74:E1:CB:83:36:26:87:34:78:93:2C:A2:11:88:A8:8F:DF:2E:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOHLgzYmhzR4kyyiEYioj98uneA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:d7:19:96:32:0c:21:3f:2c:14:8e:22:36:47:0a:dc:85:df:
         09:6c:c4:13:ad:ad:ca:80:7b:9c:79:f7:96:ca:f3:a2:4f:0e:
         03:bf:46:f7:13:33:8e:81:53:fe:76:a8:6f:b4:ab:31:f9:e3:
         5b:38:eb:d9:13:c0:ef:58:9a:a1:f5:fb:ab:0f:f4:ef:fb:f3:
         8b:ef:b2:a1:8d:5f:f5:16:59:4b:7f:7b:c2:28:a0:c0:ed:34:
         b4:bf:1b:80:e2:ea:6b:dd:75:5e:05:5d:fe:69:8c:89:02:e1:
         a2:fd:00:82:63:a5:45:4e:56:42:0b:de:8d:93:1b:63:f1:85:
         72:3b:4b:6d:cc:5b:df:c1:0d:98:14:ce:2c:77:a1:19:34:e6:
         0e:89:9f:99:b0:c1:24:a0:3e:57:e5:f5:ca:41:2d:3b:bc:f1:
         7e:42:81:6d:4e:3e:83:c7:19:28:a1:1f:d5:de:cc:1d:02:28:
         bc:49:fd:62:67:04:f3:7b:53:53:b9:64:e3:49:da:3d:10:ca:
         1a:8c:a7:2b:af:27:0b:12:36:23:0d:8e:06:d9:06:25:36:e7:
         9c:0c:0e:8a:59:d3:6c:31:6a:8e:fa:2a:f2:59:7f:c3:01:e3:
         2f:e8:ab:f9:0d:9f:47:d4:c5:d6:33:16:75:7c:de:84:95:c5:
         62:47:ac:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 20:05:46 2026 by rpki-client