Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9139C18/1599EC24335111F1872729B5C6833773/DrxJg4xa-JUImQoidYOOwMFWsLc.mft
File:                     DrxJg4xa-JUImQoidYOOwMFWsLc.mft (raw, json)
Hash identifier:          hQIS7RiPre9UgFGcIeeUjtAUSdp5pUeh/s3/LRO68ec=
Subject key identifier:   42:B4:D1:DE:A0:72:68:89:D7:88:E7:A6:E6:C3:F2:55:46:38:22:05
Authority key identifier: 0E:BC:49:83:8C:5A:F8:95:08:99:0A:22:75:83:8E:C0:C1:56:B0:B7
Certificate issuer:       /CN=A9139C18/serialNumber=0EBC49838C5AF89508990A2275838EC0C156B0B7
Certificate serial:       62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DrxJg4xa-JUImQoidYOOwMFWsLc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139C18/1599EC24335111F1872729B5C6833773/DrxJg4xa-JUImQoidYOOwMFWsLc.mft
Manifest number:          61
Signing time:             Wed 07 Oct 2026 08:40:59 +0000
Manifest this update:     Wed 07 Oct 2026 08:40:59 +0000
Manifest next update:     Wed 14 Oct 2026 08:40:59 +0000
Files and hashes:         1: DrxJg4xa-JUImQoidYOOwMFWsLc.crl (hash: eLnyGwkfl22wg9bWC3py0fqeQFfWrKyOiu36k6Xtqkc=)
                          2: 87952B92341211F181A039BCC7833773.roa (hash: jihd2+gV5EBFkgpYBoUkD4cr1iajWa+KP7BF8vtY6VA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139C18/1599EC24335111F1872729B5C6833773/DrxJg4xa-JUImQoidYOOwMFWsLc.crl
                          rsync://rpki.apnic.net/member_repository/A9139C18/1599EC24335111F1872729B5C6833773/DrxJg4xa-JUImQoidYOOwMFWsLc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DrxJg4xa-JUImQoidYOOwMFWsLc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 08:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139C18, serialNumber=0EBC49838C5AF89508990A2275838EC0C156B0B7
        Validity
            Not Before: Oct  7 08:40:59 2026 GMT
            Not After : Oct 14 08:40:59 2026 GMT
        Subject: CN=6ac6059b-06b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f0:3b:73:f9:26:42:4e:4a:e9:42:14:fd:97:
                    96:06:04:83:ba:ab:65:57:7b:b9:b6:68:5d:e3:b2:
                    44:26:ca:fb:2e:2e:43:8e:75:28:d2:78:73:40:04:
                    7c:cc:8c:03:78:e4:3c:c7:8e:01:32:e7:ea:c6:5d:
                    a2:80:85:0f:d8:58:46:f9:3b:25:8b:03:d4:5a:75:
                    c2:f3:47:a1:65:bc:4c:3c:81:50:73:62:94:c9:e4:
                    e8:ba:76:b0:91:cc:0b:f8:2b:00:54:f8:7d:10:4b:
                    f1:e0:eb:25:ac:ee:10:db:4f:59:ff:ea:6f:36:a9:
                    5b:1d:cb:ce:e3:17:ed:4c:ef:d2:24:2e:97:be:8d:
                    1f:33:61:1c:98:b6:4e:1f:20:3f:1d:56:b7:9d:38:
                    e6:e5:17:96:f4:00:c4:5d:ac:6c:d4:48:b3:ff:85:
                    1b:2b:32:b6:43:fb:2b:b8:fe:6f:68:4d:68:df:dd:
                    b4:87:9c:d9:e9:a4:e7:28:f0:fa:65:6b:a7:6b:b3:
                    b4:70:3c:a2:53:7d:a8:a5:cd:1a:14:6a:7d:e2:af:
                    52:75:9f:61:79:d5:93:01:bf:94:f3:da:13:d5:e0:
                    a5:1f:b7:3d:2f:3a:4f:e9:ec:7c:ca:5e:20:cd:af:
                    19:ce:12:e4:0d:28:ed:7d:c6:73:c1:32:7c:31:1c:
                    a4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B4:D1:DE:A0:72:68:89:D7:88:E7:A6:E6:C3:F2:55:46:38:22:05
            X509v3 Authority Key Identifier:
                keyid:0E:BC:49:83:8C:5A:F8:95:08:99:0A:22:75:83:8E:C0:C1:56:B0:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139C18/1599EC24335111F1872729B5C6833773/DrxJg4xa-JUImQoidYOOwMFWsLc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DrxJg4xa-JUImQoidYOOwMFWsLc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139C18/1599EC24335111F1872729B5C6833773/DrxJg4xa-JUImQoidYOOwMFWsLc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:08:4f:5b:54:67:c3:ec:8f:f1:b7:e9:a9:2b:6e:86:bf:0d:
         e1:44:d3:5b:6f:a7:9e:34:a4:ee:31:6f:27:81:25:01:31:8a:
         3b:d1:26:5e:e8:54:aa:a3:5a:bc:74:d0:99:22:c5:02:51:45:
         d9:50:4d:0a:d3:c7:df:d3:36:33:d8:22:8a:27:ea:b5:02:48:
         5e:92:29:3c:52:a1:ab:29:c1:16:1c:76:61:c3:eb:52:d9:9e:
         f0:92:8f:14:cc:b2:7e:8b:c5:fd:29:51:f0:f5:32:18:a8:1d:
         01:4e:88:c2:f3:cb:a9:77:e0:e5:b2:b6:9e:ad:8e:01:0d:21:
         0e:1b:7b:31:fd:3a:9f:a0:da:65:d2:b6:16:90:58:5b:c6:4b:
         08:c2:2e:bd:4d:12:2e:23:9d:41:da:bd:20:2b:cf:f8:e7:60:
         af:18:b0:3a:be:96:bd:b7:c3:ce:36:31:e6:35:9c:49:69:f7:
         f9:17:31:65:f9:78:62:a0:f5:00:5c:79:b7:6c:59:35:0b:f3:
         b7:2d:5d:02:b2:09:b6:50:e9:5b:e1:e6:71:c9:7d:f2:43:3d:
         d7:d9:0a:34:1d:7a:97:45:a2:8a:c3:1a:e2:f9:ce:ef:08:ae:
         bf:54:b7:89:a4:f9:03:2b:71:fb:0f:73:64:90:60:11:a2:d5:
         03:50:e9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:17:40 2026 by rpki-client