Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9129F26/7E8149E68B0111F1BBB8C7626D11F970/Ob7eFxEJRKwIGUEBhgvlpP-xj8c.mft
File:                     Ob7eFxEJRKwIGUEBhgvlpP-xj8c.mft (raw, json)
Hash identifier:          W/kMMw/QdDHU2mZRiIHcuf6OWV7RMk7baBLxwVD0Tls=
Subject key identifier:   FC:2E:43:0D:41:11:C4:A4:E5:D4:9E:FD:57:23:42:7A:13:90:76:D1
Authority key identifier: 39:BE:DE:17:11:09:44:AC:08:19:41:01:86:0B:E5:A4:FF:B1:8F:C7
Certificate issuer:       /CN=A9129F26/serialNumber=39BEDE17110944AC08194101860BE5A4FFB18FC7
Certificate serial:       21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob7eFxEJRKwIGUEBhgvlpP-xj8c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129F26/7E8149E68B0111F1BBB8C7626D11F970/Ob7eFxEJRKwIGUEBhgvlpP-xj8c.mft
Manifest number:          21
Signing time:             Sun 27 Sep 2026 09:27:28 +0000
Manifest this update:     Sun 27 Sep 2026 09:27:27 +0000
Manifest next update:     Sun 04 Oct 2026 09:27:27 +0000
Files and hashes:         1: Ob7eFxEJRKwIGUEBhgvlpP-xj8c.crl (hash: CFbIxut3Q74TmilPwWUs35gjLBPs2R8Tu2NIW9XsVKM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129F26/7E8149E68B0111F1BBB8C7626D11F970/Ob7eFxEJRKwIGUEBhgvlpP-xj8c.crl
                          rsync://rpki.apnic.net/member_repository/A9129F26/7E8149E68B0111F1BBB8C7626D11F970/Ob7eFxEJRKwIGUEBhgvlpP-xj8c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob7eFxEJRKwIGUEBhgvlpP-xj8c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 09:27:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129F26, serialNumber=39BEDE17110944AC08194101860BE5A4FFB18FC7
        Validity
            Not Before: Sep 27 09:27:27 2026 GMT
            Not After : Oct  4 09:27:27 2026 GMT
        Subject: CN=6ab8e17f-4745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:74:ec:e9:3c:92:b2:67:bd:f9:c3:da:21:12:
                    fc:af:c3:d4:f6:ec:d2:f2:c3:0e:5b:76:3f:69:a9:
                    2b:b9:2b:82:df:20:47:6d:3f:46:8d:e6:48:9c:4f:
                    af:c5:f8:3f:b0:e2:fa:8b:a5:11:6a:b8:32:a8:f3:
                    da:27:07:1b:db:b3:9a:c4:0d:46:62:3e:d3:39:3c:
                    de:10:31:c5:38:f8:bf:97:dc:18:0f:1a:02:59:89:
                    ac:d7:ba:7f:0d:5b:f4:81:4a:c2:9e:16:e6:a6:7c:
                    d0:05:8c:95:ef:d8:1a:f1:23:b2:bc:ac:b1:eb:05:
                    bb:c9:37:29:8f:f1:db:dc:cd:55:87:76:ce:9d:ae:
                    4f:44:fd:fe:53:a4:84:ff:38:fc:10:b4:07:5d:94:
                    8c:96:f4:f2:86:55:23:e6:04:f4:9e:f6:73:bf:dc:
                    e1:f8:03:c3:3c:47:92:10:f8:ff:3f:03:e5:28:62:
                    62:da:7a:40:64:0b:3d:26:20:e9:fc:e4:04:59:0e:
                    1f:8d:31:a2:4f:03:29:4c:85:ef:7b:44:27:a3:92:
                    96:0e:e5:e6:e6:a0:08:33:a3:5e:e9:3d:54:6c:9c:
                    5e:de:4d:00:71:23:39:0f:17:3d:54:65:5e:bf:b3:
                    2b:4a:a5:d1:56:dd:00:bc:5e:1a:ba:f0:76:e7:a7:
                    ba:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:2E:43:0D:41:11:C4:A4:E5:D4:9E:FD:57:23:42:7A:13:90:76:D1
            X509v3 Authority Key Identifier:
                keyid:39:BE:DE:17:11:09:44:AC:08:19:41:01:86:0B:E5:A4:FF:B1:8F:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129F26/7E8149E68B0111F1BBB8C7626D11F970/Ob7eFxEJRKwIGUEBhgvlpP-xj8c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob7eFxEJRKwIGUEBhgvlpP-xj8c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129F26/7E8149E68B0111F1BBB8C7626D11F970/Ob7eFxEJRKwIGUEBhgvlpP-xj8c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:82:32:93:a7:9b:85:c9:42:5e:f1:ce:90:2a:d2:d9:92:e5:
         0b:ec:a0:cd:0e:f0:04:8f:af:ba:13:d2:8b:89:4c:b6:8c:69:
         35:02:40:2f:2f:73:69:61:2b:49:98:75:06:e3:2f:5b:0c:fe:
         23:3e:9b:d0:c6:0b:dd:f0:22:4a:c1:97:36:17:f9:45:36:ff:
         96:6e:b3:44:1a:47:c3:10:5b:59:cf:f1:b3:5f:db:cd:e0:32:
         6a:d9:34:54:b0:7f:62:a0:ce:e8:2e:a1:98:e8:29:f8:6c:29:
         d2:9d:64:26:0c:6e:f4:59:15:d5:64:79:87:d5:90:1b:4a:29:
         cc:ba:46:7d:39:6f:45:05:91:38:4c:57:48:2b:5d:28:f6:f3:
         3f:8a:5d:f3:d2:ec:7e:39:36:50:f5:79:1d:de:10:de:a1:3f:
         e9:74:ef:af:f7:53:6c:21:77:a4:8e:0c:a2:2d:2c:fe:d8:99:
         ce:0a:6c:61:f9:c9:cc:a8:e2:03:d2:26:bc:51:1a:18:f0:97:
         c3:34:26:d4:9a:b9:90:3c:25:b9:61:c5:06:d1:ee:bc:06:c6:
         a4:68:60:68:88:b4:b3:04:53:e5:7e:66:5b:9f:33:39:cb:a2:
         29:ad:49:6d:c6:2c:9b:39:6f:f3:44:01:f5:c5:f5:f2:49:d4:
         bd:59:6e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:53:59 2026 by rpki-client