Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft
File:                     mlZqEuG8RjUyb14CrunbcYHdO94.mft (raw, json)
Hash identifier:          2oshJt26gCiS0aibv8D41MTiN98WgHuKQya0nu/nwWo=
Subject key identifier:   AB:6D:DB:29:49:30:17:C6:71:DF:9F:C5:F7:C3:CE:C2:AF:6E:43:D2
Authority key identifier: 9A:56:6A:12:E1:BC:46:35:32:6F:5E:02:AE:E9:DB:71:81:DD:3B:DE
Certificate issuer:       /CN=A9142B64/serialNumber=9A566A12E1BC4635326F5E02AEE9DB7181DD3BDE
Certificate serial:       3589
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft
Manifest number:          3587
Signing time:             Tue 22 Sep 2026 14:53:23 +0000
Manifest this update:     Tue 22 Sep 2026 14:53:23 +0000
Manifest next update:     Tue 29 Sep 2026 14:53:23 +0000
Files and hashes:         1: mlZqEuG8RjUyb14CrunbcYHdO94.crl (hash: /RmCEdkdaRzaLGDPYitWwtflGxNYM4aj7gx6Z86+Abg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.crl
                          rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 14:53:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13705 (0x3589)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142B64, serialNumber=9A566A12E1BC4635326F5E02AEE9DB7181DD3BDE
        Validity
            Not Before: Sep 22 14:53:23 2026 GMT
            Not After : Sep 29 14:53:23 2026 GMT
        Subject: CN=6ab29663-415b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:56:1a:64:5f:b6:61:0e:0f:b6:e5:c8:71:d4:
                    e3:6c:c0:2f:c2:e5:b5:25:14:82:dd:df:ea:25:2b:
                    a5:6d:6f:6c:ea:61:04:a6:8a:1a:36:e2:92:67:16:
                    08:04:be:52:93:d9:80:ae:88:e2:bb:fc:d4:06:ff:
                    cb:41:5b:ee:4a:d2:ec:b6:bf:ad:c4:83:40:12:72:
                    a7:a6:11:1d:28:3c:2e:49:a8:e4:64:75:28:f3:99:
                    3e:a4:62:2b:a5:0d:64:21:18:aa:3a:16:f8:ef:bf:
                    ff:9e:ec:e5:1c:bc:ab:0f:1c:83:84:fa:a6:a3:4b:
                    44:58:81:a6:af:cf:c6:11:bf:14:67:6b:37:f6:ae:
                    67:ae:45:9c:b7:63:98:19:35:c6:d6:8b:cf:b4:42:
                    ce:62:27:59:8d:7a:22:20:2d:1b:ee:29:ba:21:8b:
                    70:7c:9c:9e:27:7d:15:d4:a6:3b:33:5f:44:a2:51:
                    69:70:75:a7:c7:13:4b:ee:58:b7:52:e4:4d:60:2c:
                    82:1a:06:80:ba:3c:f4:99:fb:27:2f:c3:d1:e6:23:
                    a7:f4:a3:d4:7d:c8:40:6a:63:7a:a0:b4:fb:f2:08:
                    59:1a:67:85:6b:cd:31:58:5e:bf:f8:df:0f:34:7b:
                    2f:cf:ee:21:03:c9:df:62:61:6d:fe:4a:4e:f2:40:
                    63:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:6D:DB:29:49:30:17:C6:71:DF:9F:C5:F7:C3:CE:C2:AF:6E:43:D2
            X509v3 Authority Key Identifier:
                keyid:9A:56:6A:12:E1:BC:46:35:32:6F:5E:02:AE:E9:DB:71:81:DD:3B:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:39:b7:b3:09:62:3e:0b:20:f3:f3:8b:32:78:0a:95:a9:c9:
         54:df:03:fa:30:ef:cc:eb:ba:3b:90:89:0a:f2:8f:fa:fc:5a:
         3b:f7:2a:54:87:4d:08:92:92:01:e7:76:99:31:b0:04:3e:db:
         80:39:76:f9:3c:b7:e6:c9:1a:a2:c1:76:23:36:20:0f:bd:06:
         ad:e6:ce:d3:b0:ab:92:09:57:08:43:5e:ec:47:49:2f:a0:d0:
         20:dd:71:c1:fe:68:78:45:5a:7f:0d:d3:0f:24:c3:bb:e6:3a:
         58:56:f2:ee:8e:fb:46:54:a6:af:da:44:7e:fd:54:65:d2:91:
         1b:18:ac:7a:7d:7e:61:5c:53:81:d8:9c:7c:c2:aa:85:1f:64:
         10:39:2f:bd:44:5e:38:c9:73:76:fd:70:08:fc:52:2d:16:dc:
         a4:3a:a5:5a:61:67:67:16:dd:14:41:da:83:25:eb:5c:42:57:
         49:15:cc:4f:5f:a7:83:50:23:95:02:bd:1f:9f:e2:f7:95:a3:
         e4:6d:18:0f:92:8c:71:72:6c:fb:c4:26:ac:4d:a9:c2:32:8f:
         93:31:8c:aa:31:aa:2a:d8:33:5e:cb:2e:1b:dd:88:b1:2b:df:
         bc:2e:bf:38:12:63:34:b6:5d:3a:0f:3c:8a:62:b0:59:8b:d5:
         df:6d:a3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:58:37 2026 by rpki-client