Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.mft
File:                     RuPL70om399mDjVsdEBr4caZKlE.mft (raw, json)
Hash identifier:          HdNd84SINgbyavy3gubkmBHIusfSZJbaNUrY/opeWTo=
Subject key identifier:   E7:E8:4E:D9:3C:19:8F:20:CA:74:0E:1C:FA:C5:75:E2:E6:94:85:89
Authority key identifier: 46:E3:CB:EF:4A:26:DF:DF:66:0E:35:6C:74:40:6B:E1:C6:99:2A:51
Certificate issuer:       /CN=A9113C02/serialNumber=46E3CBEF4A26DFDF660E356C74406BE1C6992A51
Certificate serial:       1B5E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RuPL70om399mDjVsdEBr4caZKlE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.mft
Manifest number:          296A
Signing time:             Thu 24 Sep 2026 16:14:19 +0000
Manifest this update:     Thu 24 Sep 2026 16:14:18 +0000
Manifest next update:     Thu 01 Oct 2026 16:14:18 +0000
Files and hashes:         1: RuPL70om399mDjVsdEBr4caZKlE.crl (hash: H1X2QORq1kqROctd44sK2LKsbsEozIHNsy7eU6bo/Tg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.crl
                          rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RuPL70om399mDjVsdEBr4caZKlE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 16:14:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7006 (0x1b5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113C02, serialNumber=46E3CBEF4A26DFDF660E356C74406BE1C6992A51
        Validity
            Not Before: Sep 24 16:14:18 2026 GMT
            Not After : Oct  1 16:14:18 2026 GMT
        Subject: CN=6ab54c5b-ef2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c3:58:c0:d5:0e:ea:eb:42:5a:e4:80:77:7d:
                    36:90:68:68:7c:bd:40:b9:4c:40:6e:a4:ab:1a:8d:
                    61:a8:df:97:25:76:08:0b:b4:ad:0a:a2:9b:0b:3e:
                    90:34:c9:5e:1c:d2:0b:0c:9a:28:85:56:78:b4:56:
                    7b:df:c3:d0:85:74:a8:37:e6:e3:15:0d:34:dd:5d:
                    04:a3:1e:87:bf:d4:95:d8:5d:57:5f:e4:cf:4a:1d:
                    02:2e:07:49:5a:64:ea:65:be:44:37:90:65:86:b4:
                    49:b2:52:5a:93:de:02:5b:96:3c:8d:9c:2b:a3:9a:
                    55:1a:e4:04:be:01:07:4a:3d:ab:80:84:55:3b:b7:
                    c2:95:fb:31:64:40:cf:f5:3c:c4:49:d5:67:0a:84:
                    a3:24:25:31:1b:30:cc:6e:b3:48:a2:1d:da:89:ae:
                    23:ba:34:03:6e:e7:dc:4a:fe:0e:9f:47:bb:a8:d7:
                    62:a1:c8:3b:50:38:32:56:6d:01:81:b9:6d:e0:cb:
                    aa:a0:c6:8c:36:d1:f8:b4:32:17:a7:71:97:c1:92:
                    53:6e:71:52:87:98:5c:d7:66:b6:27:5f:ea:92:9a:
                    54:26:45:9e:6a:3a:65:b7:41:a7:eb:5b:d2:88:36:
                    7c:01:a9:f8:39:90:97:53:90:f2:2c:d4:b7:10:4c:
                    0c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E8:4E:D9:3C:19:8F:20:CA:74:0E:1C:FA:C5:75:E2:E6:94:85:89
            X509v3 Authority Key Identifier:
                keyid:46:E3:CB:EF:4A:26:DF:DF:66:0E:35:6C:74:40:6B:E1:C6:99:2A:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RuPL70om399mDjVsdEBr4caZKlE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:36:fb:37:fa:47:2e:d8:fd:96:05:79:50:98:4d:48:35:d7:
         26:67:bb:b6:f7:8c:c4:cb:76:7f:e6:a3:39:8f:63:96:bf:e1:
         19:b4:0d:0e:47:d8:d6:7b:47:be:5d:fe:5a:48:71:fa:9a:fe:
         0c:60:e3:d4:5e:47:b5:90:70:c1:d6:85:31:91:39:c2:77:c9:
         77:45:8e:5f:f3:50:ac:ff:31:0d:0d:3d:7b:a9:67:4c:79:63:
         91:c8:42:24:8b:f9:a9:fa:93:bd:8e:90:e3:3c:f5:7f:e1:24:
         93:7b:67:31:99:52:79:89:80:c0:72:b7:87:a8:00:c3:07:94:
         09:46:b9:b3:de:87:c2:4f:b7:2a:32:79:f4:a1:26:4a:06:26:
         c8:f9:aa:0a:94:af:4b:00:ab:2e:47:a3:6d:30:83:3a:fd:75:
         4e:6a:68:46:d5:95:bf:ab:f8:b4:3d:91:20:08:5d:aa:84:2a:
         52:2f:70:03:a1:33:02:e4:c5:66:03:21:be:0e:eb:37:15:7a:
         9a:bc:e5:1e:9d:1a:77:00:f3:1e:d5:3c:0b:66:4c:ee:fb:63:
         6c:ab:c8:44:77:c9:de:fb:52:0f:b4:0c:39:93:fe:e0:14:2d:
         e5:a0:1a:9d:88:c8:17:87:a9:bc:aa:88:50:81:83:96:9b:83:
         58:ff:3f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:53:35 2026 by rpki-client