Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft
File:                     swdOfJTfh5gMatv0V4ZRQGxcU6k.mft (raw, json)
Hash identifier:          t0zK11AYZhLbOEmY2rJtBwmp77Mw8sH8zNeU9UwpsNc=
Subject key identifier:   91:8A:A7:EA:4B:FD:7C:A2:FD:13:72:45:09:68:8D:E1:0D:40:CD:66
Authority key identifier: B3:07:4E:7C:94:DF:87:98:0C:6A:DB:F4:57:86:51:40:6C:5C:53:A9
Certificate issuer:       /CN=A9139B16/serialNumber=B3074E7C94DF87980C6ADBF4578651406C5C53A9
Certificate serial:       0DDF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/swdOfJTfh5gMatv0V4ZRQGxcU6k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft
Manifest number:          0DDE
Signing time:             Wed 22 Jul 2026 18:04:46 +0000
Manifest this update:     Wed 22 Jul 2026 18:04:46 +0000
Manifest next update:     Wed 29 Jul 2026 18:04:46 +0000
Files and hashes:         1: swdOfJTfh5gMatv0V4ZRQGxcU6k.crl (hash: V6xOuhnD97UV6EB+FYo3BWtcU1VUj/x44ClbXoNbVfc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.crl
                          rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/swdOfJTfh5gMatv0V4ZRQGxcU6k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:04:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3551 (0xddf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139B16, serialNumber=B3074E7C94DF87980C6ADBF4578651406C5C53A9
        Validity
            Not Before: Jul 22 18:04:46 2026 GMT
            Not After : Jul 29 18:04:46 2026 GMT
        Subject: CN=6a61063e-9020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6c:95:2f:3a:86:eb:18:de:ee:6d:d1:06:cc:
                    75:14:63:4d:25:9b:7a:17:fd:a1:31:72:77:78:2a:
                    94:21:d9:72:3c:a0:37:5c:11:e2:d7:ea:9c:a6:18:
                    ec:95:c2:4b:12:83:8d:f5:f4:dd:a4:1e:ef:55:2e:
                    6a:0e:a4:fe:8a:35:b1:01:8a:92:d1:5a:6d:9e:6a:
                    a4:db:7b:8f:b6:09:bf:5b:a6:b9:29:13:ae:a4:e1:
                    a0:aa:fa:64:3d:5f:f5:ec:69:f3:25:36:43:6e:de:
                    ce:4b:2d:c1:08:33:62:4a:b5:a1:e3:e8:9a:01:57:
                    51:0d:e0:0e:8c:47:7d:f1:de:b5:bd:31:5a:5a:55:
                    31:b8:7b:d9:31:28:0c:55:48:f2:e7:72:81:4a:95:
                    22:80:b8:91:d7:12:af:a2:db:e7:c5:34:46:91:68:
                    b7:5d:7e:ae:5d:8c:65:ce:43:52:ce:b8:9e:95:a5:
                    c6:40:63:5b:7d:ea:ba:3d:23:ad:7d:c0:c6:39:f4:
                    20:e4:fe:7e:5f:84:31:c4:de:38:46:3a:e6:9a:d1:
                    d8:c7:dd:f2:69:61:5a:61:6d:95:de:e4:bb:9f:f0:
                    14:f5:87:e9:fe:d3:0c:60:c5:1c:91:fb:9c:fa:9c:
                    a9:d2:e5:7b:b5:70:57:21:5c:da:6e:12:c9:af:a0:
                    bb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:8A:A7:EA:4B:FD:7C:A2:FD:13:72:45:09:68:8D:E1:0D:40:CD:66
            X509v3 Authority Key Identifier:
                keyid:B3:07:4E:7C:94:DF:87:98:0C:6A:DB:F4:57:86:51:40:6C:5C:53:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/swdOfJTfh5gMatv0V4ZRQGxcU6k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:4a:b4:cc:f4:2e:58:a5:41:60:b3:93:2e:82:b8:d0:99:45:
         8c:57:de:de:b6:b4:2a:33:58:2e:50:73:67:63:4a:d9:a5:12:
         5d:ce:ae:19:4d:88:d6:a3:0d:fc:e1:5f:7b:19:98:9f:9b:34:
         4c:44:89:3c:dc:f3:31:90:56:4f:a1:2d:71:f5:8c:32:e1:01:
         de:8a:0c:ba:03:df:19:62:57:7d:e9:5b:4b:cd:b0:49:21:df:
         20:be:c4:ff:fd:17:ca:f5:23:94:6e:06:52:ef:be:7b:55:f1:
         86:f4:3d:bc:b4:8f:d3:8f:56:80:3a:bc:73:f6:b7:35:34:c4:
         63:5e:50:e6:63:96:a4:19:35:66:4c:d0:9b:5a:da:42:39:57:
         5f:34:85:c0:f5:89:96:1c:30:5a:29:35:d0:b7:22:b0:a8:4f:
         b8:de:73:89:f8:68:02:41:e4:80:e4:0f:40:6b:53:6b:8a:0f:
         86:8b:c5:d8:f3:cc:a8:71:b5:14:fb:58:ac:9c:a2:96:3f:d4:
         fe:c1:ad:30:47:a1:9d:a5:e5:00:05:8a:dd:df:24:19:bd:09:
         1b:10:9c:38:7d:1c:7e:c2:be:3b:91:fa:79:73:70:58:76:4f:
         dd:ed:57:24:7f:2e:d7:12:dd:74:dc:b2:0f:af:73:63:37:79:
         ec:cf:3f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:23:40 2026 by rpki-client