Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.mft
File:                     sceOjrQ5MbA-kLu1U1edee0Z_VA.mft (raw, json)
Hash identifier:          4k6gtFLxcUqdUj8H2s1ozT63ZrcWiokthwrlMvJzC5k=
Subject key identifier:   17:C3:81:B6:68:9C:29:AF:AF:F9:D1:95:43:3A:27:DB:CC:94:08:DB
Authority key identifier: B1:C7:8E:8E:B4:39:31:B0:3E:90:BB:B5:53:57:9D:79:ED:19:FD:50
Certificate issuer:       /CN=A9126BDE/serialNumber=B1C78E8EB43931B03E90BBB553579D79ED19FD50
Certificate serial:       95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sceOjrQ5MbA-kLu1U1edee0Z_VA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.mft
Manifest number:          95
Signing time:             Wed 23 Sep 2026 07:10:57 +0000
Manifest this update:     Wed 23 Sep 2026 07:10:56 +0000
Manifest next update:     Wed 30 Sep 2026 07:10:56 +0000
Files and hashes:         1: sceOjrQ5MbA-kLu1U1edee0Z_VA.crl (hash: B6L6jRE3jvCGhTdeK/RJUIzfi31tWMy0OrjBeuOdrPg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.crl
                          rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sceOjrQ5MbA-kLu1U1edee0Z_VA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 07:10:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149 (0x95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126BDE, serialNumber=B1C78E8EB43931B03E90BBB553579D79ED19FD50
        Validity
            Not Before: Sep 23 07:10:56 2026 GMT
            Not After : Sep 30 07:10:56 2026 GMT
        Subject: CN=6ab37b81-a338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e5:2a:5d:ff:7b:41:e6:23:43:3b:7a:ac:f4:
                    9c:88:4e:b0:0d:83:19:2b:c8:46:ec:06:c2:2f:0e:
                    b7:32:a9:66:b6:e2:cb:ea:28:cd:43:3f:ca:4c:f9:
                    ee:8f:a1:d1:37:7d:2d:15:22:78:e1:64:92:45:9a:
                    48:ae:62:dd:8e:08:fb:ad:c2:42:f7:02:fd:f6:89:
                    fd:2a:c8:00:7e:9f:de:69:c0:94:9a:aa:37:a4:39:
                    ab:33:87:ff:37:e1:6f:46:8c:b7:9b:12:b1:9e:9d:
                    46:21:0e:65:d6:88:96:ae:0d:7c:49:20:68:98:ed:
                    2a:cd:0e:c5:5c:61:38:6e:2f:5e:a5:85:c0:1a:27:
                    1c:cd:2a:de:2e:70:36:c7:1e:0a:60:e2:10:f3:ab:
                    09:ad:df:ca:b4:f4:07:66:3e:54:d8:68:3e:83:2f:
                    4d:62:5f:83:ec:3f:ef:3f:65:0c:c0:de:60:c0:ba:
                    8b:5a:0f:1f:f2:cf:21:1f:0d:cb:46:c3:b7:d6:23:
                    31:a6:df:48:77:6b:6c:a3:ca:3f:cb:7d:95:75:0d:
                    65:06:10:9f:3b:c7:4b:c1:fe:5f:1e:9e:00:98:94:
                    98:d6:b4:b3:26:cc:c4:19:e9:54:df:9a:f2:53:60:
                    70:5c:d0:46:b3:dc:9a:b5:f3:c2:dc:86:fc:fb:42:
                    f7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C3:81:B6:68:9C:29:AF:AF:F9:D1:95:43:3A:27:DB:CC:94:08:DB
            X509v3 Authority Key Identifier:
                keyid:B1:C7:8E:8E:B4:39:31:B0:3E:90:BB:B5:53:57:9D:79:ED:19:FD:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sceOjrQ5MbA-kLu1U1edee0Z_VA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:58:fc:a3:4c:ce:5f:34:ba:6c:d9:29:d1:19:c4:66:02:f9:
         99:ac:2c:ef:a7:0d:32:b3:03:2c:52:fa:a0:a6:6f:25:dd:8b:
         92:76:b8:fb:9c:5a:0d:16:7e:98:09:25:24:40:3b:7f:b8:78:
         8f:b3:7e:f3:0c:6d:3c:96:b7:49:88:e5:01:fc:43:3a:c8:b1:
         da:a1:bc:c4:59:20:d3:70:d6:35:90:41:f2:48:37:aa:a9:8b:
         5e:22:73:2d:13:23:82:4b:14:50:36:73:b4:f3:5e:02:75:bb:
         9a:d1:f9:8e:ff:4c:d9:14:70:49:ad:ed:36:f8:84:d0:45:9d:
         11:11:d5:eb:e9:bd:e5:65:f9:f5:74:76:5e:c6:2d:5e:eb:b2:
         36:91:34:95:b4:81:20:6f:d9:c4:62:c3:98:c0:85:13:5f:8a:
         46:58:19:42:92:bd:4d:3c:0e:f8:56:9e:40:8c:96:63:6b:da:
         b5:37:b2:a3:15:1a:ca:cc:8c:c4:10:6f:46:08:43:1e:52:e6:
         37:86:55:84:a5:fd:0f:ca:e3:70:1a:44:ba:bb:4a:0e:a1:56:
         97:df:1c:22:86:62:a1:49:bb:31:e3:3d:0e:4a:33:cf:f5:98:
         fe:a1:7b:25:28:ad:03:82:6a:31:62:a3:8c:5d:06:f7:b3:1a:
         0b:c5:81:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:13:40 2026 by rpki-client