Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9129F26/710FE4848B0111F19365C7626D11F970/62HLzdtR6alUgo8dcysrkQCwBE8.mft
File:                     62HLzdtR6alUgo8dcysrkQCwBE8.mft (raw, json)
Hash identifier:          2fzDSKsXXNOWF6gbus5TTHebzy0GnvaNn8vuQKzc0vA=
Subject key identifier:   C6:95:8B:CF:A9:D5:40:AE:5D:FD:F6:B8:67:13:18:EB:E2:08:75:39
Authority key identifier: EB:61:CB:CD:DB:51:E9:A9:54:82:8F:1D:73:2B:2B:91:00:B0:04:4F
Certificate issuer:       /CN=A9129F26/serialNumber=EB61CBCDDB51E9A954828F1D732B2B9100B0044F
Certificate serial:       2D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/62HLzdtR6alUgo8dcysrkQCwBE8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129F26/710FE4848B0111F19365C7626D11F970/62HLzdtR6alUgo8dcysrkQCwBE8.mft
Manifest number:          2C
Signing time:             Sat 17 Oct 2026 09:28:38 +0000
Manifest this update:     Sat 17 Oct 2026 09:28:38 +0000
Manifest next update:     Sat 24 Oct 2026 09:28:38 +0000
Files and hashes:         1: 62HLzdtR6alUgo8dcysrkQCwBE8.crl (hash: J8uEE82X5FVRQxRsHKn+3lGUAKd5aE1WIJgLy1uCE34=)
                          2: 336DF8B28B0811F18D85AED87011F970.roa (hash: JB+3tqFVDLVL+fNG39cW33bCmFkKcUQfmjoHhla0fMw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129F26/710FE4848B0111F19365C7626D11F970/62HLzdtR6alUgo8dcysrkQCwBE8.crl
                          rsync://rpki.apnic.net/member_repository/A9129F26/710FE4848B0111F19365C7626D11F970/62HLzdtR6alUgo8dcysrkQCwBE8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/62HLzdtR6alUgo8dcysrkQCwBE8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Oct 2026 09:28:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129F26, serialNumber=EB61CBCDDB51E9A954828F1D732B2B9100B0044F
        Validity
            Not Before: Oct 17 09:28:38 2026 GMT
            Not After : Oct 24 09:28:38 2026 GMT
        Subject: CN=6ad33fc6-e939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:31:cd:a8:ec:2c:e1:c5:6c:3c:92:f9:8d:f7:
                    0b:57:ad:11:68:86:6b:bb:3b:f2:f4:5f:cd:1e:ab:
                    11:60:96:a4:dd:4e:4c:12:40:f6:d1:0e:5c:cb:b1:
                    23:fa:e6:09:05:4d:6d:53:46:1a:0f:21:9c:eb:77:
                    7a:44:9a:ae:53:ee:c5:84:9b:71:c0:d0:b1:77:a2:
                    2c:ea:d0:2a:d9:f0:db:1a:59:26:9d:b8:77:77:ef:
                    c2:0a:7a:e0:04:d0:f6:18:de:0f:ed:cc:52:fe:47:
                    aa:0a:5c:a2:0d:60:bd:d7:d6:61:aa:d4:cf:f9:34:
                    b4:63:fe:de:18:e0:4c:38:69:98:12:41:8c:07:6a:
                    73:20:83:ae:ea:57:26:60:07:c4:76:db:99:ea:15:
                    2f:38:e8:22:fc:dc:f0:cf:e1:b5:8c:2b:a9:0c:f4:
                    6f:19:b0:49:3b:83:40:65:14:29:6b:dd:4c:d4:d4:
                    c4:bf:fa:81:35:d8:df:7f:39:cd:6b:b6:7a:9d:05:
                    89:c7:b2:9b:09:e6:06:b6:48:78:e9:96:28:9b:44:
                    5b:c9:f9:e5:7e:5c:bf:fa:08:06:d8:7a:89:52:4b:
                    7c:7d:24:8f:6e:b9:5e:55:2d:90:51:8f:f0:5b:9a:
                    a0:f8:1c:5c:4d:83:7a:dc:7e:23:29:d9:5e:74:8e:
                    20:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:95:8B:CF:A9:D5:40:AE:5D:FD:F6:B8:67:13:18:EB:E2:08:75:39
            X509v3 Authority Key Identifier:
                keyid:EB:61:CB:CD:DB:51:E9:A9:54:82:8F:1D:73:2B:2B:91:00:B0:04:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129F26/710FE4848B0111F19365C7626D11F970/62HLzdtR6alUgo8dcysrkQCwBE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/62HLzdtR6alUgo8dcysrkQCwBE8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129F26/710FE4848B0111F19365C7626D11F970/62HLzdtR6alUgo8dcysrkQCwBE8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:0c:72:31:1d:4e:c8:27:59:f3:61:46:ae:1d:e4:0f:92:52:
         9e:41:d5:ae:e1:cc:9c:86:fe:b2:c3:cf:f8:b0:ad:ae:ff:16:
         3b:6d:42:ca:6b:89:7a:82:98:f9:80:95:f8:20:6d:9d:e7:52:
         8e:4c:95:ac:5f:af:b1:50:3a:41:1e:34:e4:79:be:95:fc:e2:
         f2:c0:82:68:d7:24:d6:02:09:1a:45:de:58:8a:15:b0:e4:98:
         c0:81:b8:23:68:44:99:63:10:fe:24:b7:fd:83:4c:96:05:0f:
         3d:a6:a7:ea:4b:bb:68:bf:c3:57:15:be:6b:d0:5e:f8:d3:51:
         eb:65:ef:ea:8b:a2:9e:09:03:5a:a5:1b:b3:f7:5e:12:53:fa:
         f1:37:f9:65:6c:55:01:dc:d8:ae:a8:2f:e7:13:86:da:64:19:
         99:5a:bb:26:8f:b1:30:f1:8e:e3:f3:48:74:72:31:17:e2:97:
         0c:75:cc:6f:0a:32:cb:d9:84:3f:b2:77:98:69:df:da:0c:ab:
         85:67:11:74:3b:8f:07:0f:a4:47:aa:40:87:ab:8f:d5:24:0a:
         fc:49:7c:92:c4:b4:e5:1e:ff:72:04:fe:59:50:ec:7e:cb:44:
         8a:74:d0:7e:33:8a:30:5f:07:13:65:98:6a:b7:d9:bd:06:b6:
         f4:2c:39:eb
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
OUYyNjExMC8GA1UEBRMoRUI2MUNCQ0REQjUxRTlBOTU0ODI4RjFENzMyQjJCOTEw
MEIwMDQ0RjAeFw0yNjEwMTcwOTI4MzhaFw0yNjEwMjQwOTI4MzhaMBgxFjAUBgNV
BAMTDTZhZDMzZmM2LWU5MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDBMc2o7CzhxWw8kvmN9wtXrRFohmu7O/L0X80eqxFglqTdTkwSQPbRDlzLsSP6
5gkFTW1TRhoPIZzrd3pEmq5T7sWEm3HA0LF3oizq0CrZ8NsaWSaduHd378IKeuAE
0PYY3g/tzFL+R6oKXKINYL3X1mGq1M/5NLRj/t4Y4Ew4aZgSQYwHanMgg67qVyZg
B8R225nqFS846CL83PDP4bWMK6kM9G8ZsEk7g0BlFClr3UzU1MS/+oE12N9/Oc1r
tnqdBYnHspsJ5ga2SHjpliibRFvJ+eV+XL/6CAbYeolSS3x9JI9uuV5VLZBRj/Bb
mqD4HFxNg3rcfiMp2V50jiDPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUxpWLz6nV
QK5d/fa4ZxMY6+IIdTkwHwYDVR0jBBgwFoAU62HLzdtR6alUgo8dcysrkQCwBE8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5RjI2LzcxMEZFNDg0OEIw
MTExRjE5MzY1Qzc2MjZEMTFGOTcwLzYySEx6ZHRSNmFsVWdvOGRjeXNya1FDd0JF
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvNjJITHpkdFI2YWxVZ284ZGN5c3JrUUN3QkU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5
RjI2LzcxMEZFNDg0OEIwMTExRjE5MzY1Qzc2MjZEMTFGOTcwLzYySEx6ZHRSNmFs
VWdvOGRjeXNya1FDd0JFOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAoDHIxHU7IJ1nzYUauHeQPklKeQdWu4cychv6yw8/4sK2u/xY7bULKa4l6gpj5
gJX4IG2d51KOTJWsX6+xUDpBHjTkeb6V/OLywIJo1yTWAgkaRd5YihWw5JjAgbgj
aESZYxD+JLf9g0yWBQ89pqfqS7tov8NXFb5r0F7401HrZe/qi6KeCQNapRuz914S
U/rxN/llbFUB3NiuqC/nE4baZBmZWrsmj7Ew8Y7j80h0cjEX4pcMdcxvCjLL2YQ/
sneYad/aDKuFZxF0O48HD6RHqkCHq4/VJAr8SXySxLTlHv9yBP5ZUOx+y0SKdNB+
M4owXwcTZZhqt9m9Brb0LDnr
-----END CERTIFICATE-----
Generated at Sun Oct 18 11:36:05 2026 by rpki-client