Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9129F26/7E8149E68B0111F1BBB8C7626D11F970/Ob7eFxEJRKwIGUEBhgvlpP-xj8c.mft
File:                     Ob7eFxEJRKwIGUEBhgvlpP-xj8c.mft (raw, json)
Hash identifier:          BgOh4SFxliujPw4Ng28V9Wu8KEGwrJy7kU08i5tnRis=
Subject key identifier:   BB:6C:25:FA:99:84:5B:6E:7B:44:E9:32:7E:69:5E:93:74:EB:B9:81
Authority key identifier: 39:BE:DE:17:11:09:44:AC:08:19:41:01:86:0B:E5:A4:FF:B1:8F:C7
Certificate issuer:       /CN=A9129F26/serialNumber=39BEDE17110944AC08194101860BE5A4FFB18FC7
Certificate serial:       24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob7eFxEJRKwIGUEBhgvlpP-xj8c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129F26/7E8149E68B0111F1BBB8C7626D11F970/Ob7eFxEJRKwIGUEBhgvlpP-xj8c.mft
Manifest number:          24
Signing time:             Sat 03 Oct 2026 09:34:20 +0000
Manifest this update:     Sat 03 Oct 2026 09:34:20 +0000
Manifest next update:     Sat 10 Oct 2026 09:34:20 +0000
Files and hashes:         1: Ob7eFxEJRKwIGUEBhgvlpP-xj8c.crl (hash: fH7I3FQ+RdgP1L9izjim12g9P2g2cqtJv+ZtMDMcFKo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129F26/7E8149E68B0111F1BBB8C7626D11F970/Ob7eFxEJRKwIGUEBhgvlpP-xj8c.crl
                          rsync://rpki.apnic.net/member_repository/A9129F26/7E8149E68B0111F1BBB8C7626D11F970/Ob7eFxEJRKwIGUEBhgvlpP-xj8c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob7eFxEJRKwIGUEBhgvlpP-xj8c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 09:34:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129F26, serialNumber=39BEDE17110944AC08194101860BE5A4FFB18FC7
        Validity
            Not Before: Oct  3 09:34:20 2026 GMT
            Not After : Oct 10 09:34:20 2026 GMT
        Subject: CN=6ac0cc1c-e70c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:58:04:c4:f8:f2:35:30:05:8b:c3:bb:8d:53:
                    58:e3:9b:0d:50:f0:7a:01:56:72:e1:f9:13:1c:99:
                    cf:1b:ca:c1:ec:30:52:6b:47:bf:34:60:e6:51:06:
                    4b:05:80:b3:1b:0c:ae:8a:dd:9b:50:28:b5:19:88:
                    39:ec:8b:d4:b7:21:85:81:87:1d:3e:dd:87:9c:52:
                    4b:42:b3:f3:ee:99:5e:3b:58:cb:09:30:42:11:9a:
                    81:11:f6:f3:7f:88:8f:a7:de:df:72:9e:ef:a7:a4:
                    b0:0a:71:17:d7:2c:3a:e1:c5:34:e5:46:e4:28:a4:
                    15:35:da:95:7b:05:07:38:b8:d1:9b:b9:f3:e1:7a:
                    b8:58:58:14:c3:85:96:4f:35:67:86:29:be:32:96:
                    e9:9e:15:f3:35:dc:0c:7f:55:ae:93:05:8f:9f:a6:
                    f1:5d:1c:fc:75:0e:27:af:97:2a:5a:e1:51:b9:3f:
                    eb:43:5b:33:17:f8:2d:c4:6c:bc:06:95:de:ea:08:
                    3f:d5:9d:f9:39:48:0b:13:5a:2a:ee:16:ca:f7:c9:
                    82:25:b4:6a:76:91:c9:cc:c8:96:7b:24:e6:ba:15:
                    22:96:da:67:f0:89:6e:90:d6:f9:f7:41:28:24:82:
                    a6:18:5c:51:48:c0:f9:23:44:1b:99:5a:43:bd:3a:
                    9d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:6C:25:FA:99:84:5B:6E:7B:44:E9:32:7E:69:5E:93:74:EB:B9:81
            X509v3 Authority Key Identifier:
                keyid:39:BE:DE:17:11:09:44:AC:08:19:41:01:86:0B:E5:A4:FF:B1:8F:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129F26/7E8149E68B0111F1BBB8C7626D11F970/Ob7eFxEJRKwIGUEBhgvlpP-xj8c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob7eFxEJRKwIGUEBhgvlpP-xj8c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129F26/7E8149E68B0111F1BBB8C7626D11F970/Ob7eFxEJRKwIGUEBhgvlpP-xj8c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:7d:03:01:05:d9:61:f3:ca:ca:9a:5e:5b:ed:20:77:9a:9d:
         20:8a:6f:ff:0d:70:4b:fa:86:d5:53:dc:35:f8:e5:2c:ea:da:
         5d:87:28:59:15:8f:2d:0d:5e:21:63:03:1e:e2:29:f6:3c:09:
         ba:87:53:1c:c8:49:b9:0d:2a:e8:24:f8:51:83:e5:7d:8f:14:
         f1:dd:68:b1:9e:88:8e:e4:c9:3a:bf:21:02:67:13:8d:50:e7:
         bd:e7:fa:f5:3d:74:2a:7f:2f:73:54:23:53:85:99:db:e2:22:
         9b:3a:40:b9:8c:de:1a:16:fc:df:ef:f7:36:aa:89:c9:06:35:
         14:00:b8:5e:bf:bd:f9:64:8e:bf:c5:7b:d3:a1:a2:a5:aa:66:
         56:8e:ec:50:ed:68:5b:c8:f0:2f:9e:c6:16:8a:2f:a8:0e:c9:
         00:a9:85:66:0e:e1:ed:07:9b:5e:e5:30:51:c5:a0:7a:aa:b2:
         8f:d6:85:68:ec:6a:a2:84:5c:2a:08:67:c4:c9:ce:0c:1b:ef:
         79:18:dc:1e:be:1f:8a:48:69:71:68:41:b9:51:01:d1:76:8d:
         e6:31:44:f2:25:29:6b:9f:82:e5:3c:f2:f8:4f:d6:27:37:e7:
         53:d0:cb:d5:e4:c1:c9:9c:25:41:a9:82:46:6b:42:06:64:fb:
         8e:c2:87:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:10:05 2026 by rpki-client