Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft
File:                     Fz6pPabl71KPpzMJc4hIg92lJ-4.mft (raw, json)
Hash identifier:          RVUZhZShzC5w6pmJxkyE27u0ptw80O6tsujYr1jtOlc=
Subject key identifier:   07:8A:F6:00:FB:15:16:4C:F2:A8:81:10:1F:80:81:45:4A:D9:1A:F2
Authority key identifier: 17:3E:A9:3D:A6:E5:EF:52:8F:A7:33:09:73:88:48:83:DD:A5:27:EE
Certificate issuer:       /CN=A9145E09/serialNumber=173EA93DA6E5EF528FA7330973884883DDA527EE
Certificate serial:       D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fz6pPabl71KPpzMJc4hIg92lJ-4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft
Manifest number:          D4
Signing time:             Mon 11 May 2026 06:50:17 +0000
Manifest this update:     Mon 11 May 2026 06:50:16 +0000
Manifest next update:     Mon 18 May 2026 06:50:16 +0000
Files and hashes:         1: Fz6pPabl71KPpzMJc4hIg92lJ-4.crl (hash: JOcgdozcGmz3PUcuJ6ulzmcnHUVueSpMcixDpXAycUM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.crl
                          rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fz6pPabl71KPpzMJc4hIg92lJ-4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212 (0xd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145E09, serialNumber=173EA93DA6E5EF528FA7330973884883DDA527EE
        Validity
            Not Before: May 11 06:50:16 2026 GMT
            Not After : May 18 06:50:16 2026 GMT
        Subject: CN=6a017c28-f133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:64:14:1c:f1:28:42:2a:41:5f:60:ef:89:7f:
                    37:f2:7a:fc:2c:d8:36:27:b7:8a:dc:b3:a2:5e:a9:
                    7d:f2:86:39:9e:83:76:89:e5:44:51:bc:d4:35:0b:
                    a8:42:c6:62:e4:90:f1:cb:04:c5:4f:87:6b:4a:ee:
                    cf:0a:d1:2a:15:d6:b6:61:ae:65:24:b3:c7:15:ec:
                    b4:a6:d7:2f:17:93:0b:dc:06:59:fe:b0:c9:22:51:
                    3e:93:26:35:29:ee:77:31:9c:37:6a:26:d7:03:57:
                    15:e3:78:ac:63:50:39:bf:15:01:03:76:a2:a4:29:
                    7f:7c:ef:d8:0e:13:45:42:71:9c:67:8f:0e:6b:d8:
                    35:05:ed:61:35:7a:19:9c:c7:7b:ab:20:ad:e0:66:
                    c2:b9:ad:eb:8a:b9:31:50:31:2a:9d:ef:a8:35:7f:
                    26:87:d8:7d:f9:46:2d:24:9e:2b:f2:40:e4:f4:41:
                    62:c0:50:e1:13:8f:0a:e1:d3:cd:7c:bd:53:e5:bc:
                    24:b5:6c:22:74:f5:25:08:ce:1f:fb:43:d5:d0:89:
                    bf:1a:4c:1f:94:e3:6e:26:3f:b4:44:ab:12:f1:5a:
                    62:5a:96:03:7b:78:32:4e:b2:3a:f9:2e:26:86:67:
                    7c:f6:fe:82:5d:2c:f5:e5:27:54:12:5a:a9:33:f4:
                    42:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:8A:F6:00:FB:15:16:4C:F2:A8:81:10:1F:80:81:45:4A:D9:1A:F2
            X509v3 Authority Key Identifier:
                keyid:17:3E:A9:3D:A6:E5:EF:52:8F:A7:33:09:73:88:48:83:DD:A5:27:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fz6pPabl71KPpzMJc4hIg92lJ-4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:e9:11:91:05:b0:02:79:5a:c6:97:ab:c9:a2:9c:a5:f7:83:
         f0:0c:11:fa:e1:c0:82:5d:20:09:83:20:9f:27:29:ca:ef:4c:
         58:d7:83:31:6d:71:59:35:7b:8e:f2:ce:c7:ba:02:22:e1:fb:
         b0:43:be:31:4b:8b:32:90:fe:e7:c7:aa:ed:e5:d0:1f:a4:c0:
         74:ca:7c:0a:75:de:0f:b8:ad:74:e5:61:19:03:1f:11:0f:c4:
         eb:db:af:91:c4:bc:88:42:e3:6e:35:7c:0b:0b:ed:e5:9a:af:
         20:66:8d:c7:0b:d6:7c:1f:6e:f3:36:44:45:ec:82:70:4c:4e:
         1a:f2:ed:73:0e:8b:06:19:21:18:b0:dd:14:e3:d0:26:5a:01:
         b6:17:e2:54:93:5c:76:ca:8f:05:a5:42:98:3c:48:75:86:56:
         b3:19:e3:c5:af:c9:26:6d:08:0c:9d:24:ba:72:87:34:24:f9:
         b1:d9:63:65:fd:eb:a1:1f:1d:67:1c:a2:25:35:9f:c3:88:fa:
         d8:5b:96:49:ba:0c:41:62:21:37:c9:b2:3e:fe:86:07:0f:7e:
         8a:aa:c9:7b:84:dd:cd:a4:22:49:39:40:50:fa:56:11:fe:3a:
         89:6c:4b:32:c1:39:79:68:5a:c2:9a:c9:ce:c5:93:06:56:4d:
         92:d6:bc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:16:20 2026 by rpki-client