Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9129F26/710FE4848B0111F19365C7626D11F970/62HLzdtR6alUgo8dcysrkQCwBE8.mft
File:                     62HLzdtR6alUgo8dcysrkQCwBE8.mft (raw, json)
Hash identifier:          wytc/27OjhDLyu+95xE9cUgTn024L4w+KgLsp0GqdKw=
Subject key identifier:   B4:16:BC:90:0B:7D:91:C1:E5:87:78:C6:D0:AF:AB:2F:EB:7F:AE:10
Authority key identifier: EB:61:CB:CD:DB:51:E9:A9:54:82:8F:1D:73:2B:2B:91:00:B0:04:4F
Certificate issuer:       /CN=A9129F26/serialNumber=EB61CBCDDB51E9A954828F1D732B2B9100B0044F
Certificate serial:       23
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/62HLzdtR6alUgo8dcysrkQCwBE8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129F26/710FE4848B0111F19365C7626D11F970/62HLzdtR6alUgo8dcysrkQCwBE8.mft
Manifest number:          22
Signing time:             Sun 27 Sep 2026 09:27:25 +0000
Manifest this update:     Sun 27 Sep 2026 09:27:24 +0000
Manifest next update:     Sun 04 Oct 2026 09:27:24 +0000
Files and hashes:         1: 62HLzdtR6alUgo8dcysrkQCwBE8.crl (hash: cp9QD4VjJYxSHWlX5ES961wbCgJZOioPRie+6FS6aMs=)
                          2: 336DF8B28B0811F18D85AED87011F970.roa (hash: JB+3tqFVDLVL+fNG39cW33bCmFkKcUQfmjoHhla0fMw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129F26/710FE4848B0111F19365C7626D11F970/62HLzdtR6alUgo8dcysrkQCwBE8.crl
                          rsync://rpki.apnic.net/member_repository/A9129F26/710FE4848B0111F19365C7626D11F970/62HLzdtR6alUgo8dcysrkQCwBE8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/62HLzdtR6alUgo8dcysrkQCwBE8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 09:27:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129F26, serialNumber=EB61CBCDDB51E9A954828F1D732B2B9100B0044F
        Validity
            Not Before: Sep 27 09:27:24 2026 GMT
            Not After : Oct  4 09:27:24 2026 GMT
        Subject: CN=6ab8e17c-d8d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:17:27:63:39:3d:0d:ba:36:35:5c:d2:e6:97:
                    2b:33:1a:15:d1:54:8a:81:3a:20:40:5c:9b:ed:3c:
                    cb:21:7a:3f:b5:5d:6f:58:00:3c:54:e8:93:0b:cc:
                    ce:80:93:60:d7:e6:cb:38:47:7b:f4:a7:96:c6:b5:
                    e7:60:88:63:76:9a:66:48:1a:89:2b:04:e5:76:08:
                    5a:06:51:24:db:bb:29:99:ae:da:79:37:96:13:2d:
                    c4:ca:f1:d5:e8:b1:eb:37:d3:93:96:6b:d4:42:ee:
                    91:33:24:89:45:38:07:4f:f4:91:c3:ad:f2:ab:b2:
                    44:c1:85:a3:da:8c:80:a5:48:81:1c:21:b6:3b:b1:
                    7e:20:ca:7d:73:5a:ca:96:99:03:3d:e8:88:72:c7:
                    ce:aa:43:be:ad:a4:b1:cc:e9:e2:dd:d1:a3:69:7a:
                    1a:21:34:b0:53:fb:ab:3b:92:0f:83:d1:c9:39:07:
                    36:0b:b0:95:a7:8e:01:69:99:76:d7:67:51:3d:65:
                    38:87:a0:3a:c2:60:aa:62:96:26:b7:96:58:7f:99:
                    e6:58:2f:2c:b4:37:f8:70:f2:e8:12:3c:b7:f3:d5:
                    77:44:3e:2d:3c:5c:6f:cb:c4:55:2e:e1:b2:22:43:
                    12:1b:ca:c9:77:3f:f6:ee:05:5b:c2:ba:22:8e:6f:
                    80:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:16:BC:90:0B:7D:91:C1:E5:87:78:C6:D0:AF:AB:2F:EB:7F:AE:10
            X509v3 Authority Key Identifier:
                keyid:EB:61:CB:CD:DB:51:E9:A9:54:82:8F:1D:73:2B:2B:91:00:B0:04:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129F26/710FE4848B0111F19365C7626D11F970/62HLzdtR6alUgo8dcysrkQCwBE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/62HLzdtR6alUgo8dcysrkQCwBE8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129F26/710FE4848B0111F19365C7626D11F970/62HLzdtR6alUgo8dcysrkQCwBE8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:8d:bc:8d:29:3e:88:1c:23:86:74:07:91:ed:bc:02:8b:df:
         d3:5b:67:12:81:cd:ae:78:43:39:83:66:06:03:b1:af:0a:63:
         08:2e:35:0b:26:9e:cb:be:5b:9e:49:18:58:dd:66:bf:42:41:
         f7:d6:5c:b4:cb:25:04:09:5e:40:54:30:39:62:ec:71:56:f0:
         66:48:27:ae:ed:29:cc:44:3e:5c:c0:55:e3:39:5c:4a:9e:0c:
         ec:71:40:99:13:68:42:dc:22:ea:2c:cd:c2:5b:ed:98:94:30:
         e5:4e:c8:d4:ef:ad:5b:6e:65:3a:df:e5:48:63:15:f6:8b:04:
         e3:6a:3b:5c:54:a2:32:b5:99:43:8a:f9:12:96:4a:1e:c7:cf:
         6d:e9:12:7c:77:11:7f:63:2d:e8:c6:07:96:2f:a3:d8:1e:04:
         ef:69:9a:86:43:20:de:e6:8b:a2:89:df:5e:e8:20:cc:24:78:
         e1:09:01:27:42:af:cd:02:b1:eb:35:3b:7e:07:c2:94:6a:19:
         58:9c:d5:26:86:37:f2:5a:76:50:c7:da:16:93:9a:15:54:56:
         cd:d4:82:25:11:94:3c:8f:a5:ae:24:dd:6c:3f:7d:69:3b:ce:
         ed:8f:c8:d3:5e:8a:9a:de:a6:1c:9d:bd:ca:3c:5f:31:f5:73:
         1b:36:69:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:19:34 2026 by rpki-client