Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft
File:                     26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft (raw, json)
Hash identifier:          pyP1a0KGSDoD+HRo2wZn/rDTainTIgf9xOWDA1q1Mp4=
Subject key identifier:   06:98:42:7A:83:59:07:3E:5B:55:CE:3D:58:FF:1F:09:D7:8E:40:F7
Authority key identifier: DB:AF:FC:0C:00:2D:43:DC:47:34:6B:C4:E1:9F:EB:3E:BF:3B:B4:D5
Certificate issuer:       /CN=A9129F42/serialNumber=DBAFFC0C002D43DC47346BC4E19FEB3EBF3BB4D5
Certificate serial:       0469
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft
Manifest number:          0450
Signing time:             Mon 21 Sep 2026 00:01:09 +0000
Manifest this update:     Mon 21 Sep 2026 00:01:09 +0000
Manifest next update:     Mon 28 Sep 2026 00:01:09 +0000
Files and hashes:         1: 26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl (hash: ob9Vm/en3Y20gOVjV3p79Bbz5bUbxmXYkyF05cC5RvY=)
                          2: 1523921276EF11EDB8F27034C4F9AE02.roa (hash: xf1zNOGWmI0NSOQnM0W9wWka4ZzsBm8XfGy09ZatIOs=)
                          3: 422287F0D30511EE8753D541C4F9AE02.roa (hash: ZY34KXaHlctIKW6kICEG7jRT1kNuZ1kIhZ4FtfYhqRc=)
                          4: 3C70D06076D011EDBAECD665C4F9AE02.roa (hash: hYHdnr2oFJt+0Y0EftReU0/2zxETIJpzujXYr1vfHyc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl
                          rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 00:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1129 (0x469)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129F42, serialNumber=DBAFFC0C002D43DC47346BC4E19FEB3EBF3BB4D5
        Validity
            Not Before: Sep 21 00:01:09 2026 GMT
            Not After : Sep 28 00:01:09 2026 GMT
        Subject: CN=6ab073c5-95be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:76:23:6c:34:04:a8:09:39:df:7b:a5:20:fa:
                    11:ef:a5:61:25:73:7f:38:bf:7e:ca:3a:7f:36:41:
                    cc:fb:3b:e7:35:52:74:51:b3:0a:f1:a5:9b:d2:4c:
                    28:76:c6:58:13:fb:87:4e:06:2e:4a:e2:b8:c3:e8:
                    a4:a6:04:00:51:e9:16:3c:cd:94:70:90:48:63:b9:
                    64:40:70:11:92:ca:c2:d8:b4:d2:71:dd:ab:ce:cb:
                    c1:47:9d:8c:e0:11:a8:31:e9:85:55:ce:0d:b6:0d:
                    de:89:ba:21:b0:63:bc:1a:f8:b2:f9:ca:60:0b:93:
                    49:db:a4:d8:a9:24:4d:13:09:4e:e9:de:5c:88:13:
                    79:f7:d3:73:f7:c6:e3:9b:a4:6d:fe:ff:c8:60:ba:
                    62:4a:68:8a:ad:a3:24:14:41:14:5b:bc:15:1b:b9:
                    4c:ac:f9:46:ed:09:bd:f6:22:6c:31:eb:0b:2c:3a:
                    a0:49:03:aa:3c:b0:3b:71:43:3d:a7:6c:45:bc:de:
                    da:2a:0a:87:aa:63:1a:ee:1e:c5:c3:2e:20:4c:e8:
                    71:62:0b:60:5b:5f:54:c9:6d:cf:1f:f2:a4:f2:2f:
                    dd:fe:f7:22:ed:44:62:cd:de:82:b9:5a:e5:e5:62:
                    1c:6a:1e:8b:90:12:7f:8f:82:7f:08:f1:a6:e5:fa:
                    2c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:98:42:7A:83:59:07:3E:5B:55:CE:3D:58:FF:1F:09:D7:8E:40:F7
            X509v3 Authority Key Identifier:
                keyid:DB:AF:FC:0C:00:2D:43:DC:47:34:6B:C4:E1:9F:EB:3E:BF:3B:B4:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:3b:18:3c:55:c2:39:c0:57:68:6d:6d:37:93:d7:51:36:4c:
         e5:4e:cd:bc:5b:04:5b:0d:e6:53:05:df:ef:a5:70:62:13:a6:
         29:e1:aa:82:b9:46:c6:dc:f0:e2:dc:70:36:c7:96:b1:f2:d0:
         9e:7d:c7:33:5d:ae:fc:cc:c5:6d:00:11:18:c7:50:2b:1e:b9:
         7c:ae:04:a2:5d:00:50:6d:f1:d0:c3:d9:d5:67:7f:91:71:87:
         06:51:42:e6:74:fe:c2:e4:a6:eb:5d:c6:1c:d0:5e:86:0c:9d:
         2b:39:12:fd:fb:92:a7:2b:6d:4c:05:fa:f6:cd:45:8d:d8:9c:
         b2:ff:44:b9:9d:50:b1:d1:32:d9:d9:63:ea:14:a1:6c:10:e9:
         02:6d:4b:f4:35:34:a6:be:54:fb:85:e8:32:d7:67:b7:e1:d0:
         48:4d:32:82:b8:7d:e8:0a:71:b7:f7:eb:cb:58:97:b2:a1:52:
         f9:f0:a6:55:0d:e3:64:45:9e:13:28:5c:8d:ea:f5:80:ee:31:
         89:1b:e1:30:44:57:a1:25:70:2e:97:31:3a:5a:fc:96:30:ce:
         c3:37:4a:7a:9f:5d:d9:01:e6:e0:a6:43:7f:16:f9:c0:88:b2:
         c2:f5:6a:7e:b9:6f:7e:af:5e:b6:8f:d2:c1:fb:a8:a7:7b:4a:
         ca:7d:67:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:27:19 2026 by rpki-client