Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
File:                     G5AiZjIh2M567rA_P1eZ8NV-phY.mft (raw, json)
Hash identifier:          M/0+U3zlJJ1TzyAQK5cWqqbqQ7vpGIaCDfxYwSkXjzM=
Subject key identifier:   D2:CD:22:E0:59:79:D4:0C:DD:E9:10:B4:AB:7C:FE:AB:F5:92:B8:06
Authority key identifier: 1B:90:22:66:32:21:D8:CE:7A:EE:B0:3F:3F:57:99:F0:D5:7E:A6:16
Certificate issuer:       /CN=A9133E16/serialNumber=1B9022663221D8CE7AEEB03F3F5799F0D57EA616
Certificate serial:       09E4
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
Manifest number:          09E4
Signing time:             Wed 30 Sep 2026 20:06:10 +0000
Manifest this update:     Wed 30 Sep 2026 20:06:09 +0000
Manifest next update:     Wed 07 Oct 2026 20:06:09 +0000
Files and hashes:         1: G5AiZjIh2M567rA_P1eZ8NV-phY.crl (hash: +z5NQ5hbTyHR5WfITCrzN5pNW/rHs9+2tS/h8ElM9VM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.crl
                          rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Oct 2026 20:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2532 (0x9e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133E16, serialNumber=1B9022663221D8CE7AEEB03F3F5799F0D57EA616
        Validity
            Not Before: Sep 30 20:06:09 2026 GMT
            Not After : Oct  7 20:06:09 2026 GMT
        Subject: CN=6abd6bb2-377b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bf:6a:7f:d7:e4:b3:70:57:61:d6:85:7f:48:
                    f5:ea:47:d5:b7:89:1e:ad:f5:7a:ec:67:92:02:cd:
                    d3:1e:01:c2:e1:cb:06:75:e7:7f:4a:3e:c4:26:b4:
                    63:4d:57:68:cf:1d:c4:0a:2d:84:0b:ad:e2:79:04:
                    f4:97:83:00:5c:39:77:a0:16:b6:64:00:c3:56:0b:
                    fe:7f:c4:f3:4b:58:9f:b5:e6:d1:f0:43:b5:c1:f8:
                    a1:8d:47:f2:6f:bf:5b:69:c1:fd:6d:d0:1f:51:8b:
                    2f:88:92:70:82:ac:e5:83:2c:ad:a4:78:e0:6e:2d:
                    95:81:da:47:d7:4b:86:b0:de:17:ce:bb:04:96:9b:
                    1f:bf:57:ad:00:b2:95:b3:3c:7f:8c:1f:2c:22:2e:
                    f7:8d:29:12:e3:6d:7b:86:05:9b:d8:67:6a:1d:75:
                    4d:9f:5a:b7:0b:ed:2f:6a:78:f4:89:6e:03:bb:f2:
                    b3:36:cd:b3:43:21:99:35:f2:46:8a:48:79:86:9a:
                    bf:45:40:a5:56:54:f4:73:64:16:60:18:fc:91:18:
                    46:d0:00:b4:16:6f:59:fa:73:b0:f0:0c:24:82:3b:
                    2e:d8:fb:6f:b0:d7:8c:c0:8f:49:3a:22:e3:cd:45:
                    b8:c1:66:66:13:74:1d:d0:9c:21:aa:1b:57:28:24:
                    7e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:CD:22:E0:59:79:D4:0C:DD:E9:10:B4:AB:7C:FE:AB:F5:92:B8:06
            X509v3 Authority Key Identifier:
                keyid:1B:90:22:66:32:21:D8:CE:7A:EE:B0:3F:3F:57:99:F0:D5:7E:A6:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:78:fe:de:24:1b:80:85:9e:c7:33:ee:3b:88:8e:b5:3b:ec:
         82:e5:bb:c2:e4:67:7e:26:0f:ea:c8:b6:ee:ba:2b:74:3a:1a:
         75:5e:40:89:90:65:ba:f5:fe:17:20:89:ea:e5:dd:03:a3:32:
         c9:b0:95:9f:4b:51:06:24:57:77:65:68:3b:1c:04:50:2d:19:
         45:88:89:7a:69:1c:f2:1b:f8:46:61:fc:4c:e0:29:3b:98:60:
         50:cf:9a:8b:b4:54:94:9b:b0:bf:db:c8:ae:c9:4a:97:e7:96:
         9e:03:bd:bb:69:fa:d1:6b:70:0a:31:bb:25:c2:7e:5b:fd:c9:
         b4:87:77:27:da:b2:82:67:dd:34:86:a0:f4:85:39:4c:00:41:
         bf:4a:6d:20:56:aa:84:fc:23:17:c7:ae:89:b2:0c:a8:bf:37:
         df:43:6d:ef:8e:59:e1:4a:c2:6c:7e:08:d6:23:74:a9:a1:de:
         b5:94:b8:d4:2e:97:88:f7:81:8e:48:4b:5e:cc:75:e1:4a:37:
         43:68:cc:23:50:48:7e:cb:ab:9d:b8:43:a5:fe:14:7a:ec:c3:
         01:aa:1a:b6:1d:00:7a:a6:9b:df:2f:35:a7:61:4c:9d:ba:e5:
         87:ff:ee:b7:16:60:9a:9d:18:04:be:ae:34:03:4f:1b:25:4b:
         84:0f:41:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 20:10:17 2026 by rpki-client