Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft
File:                     Fz6pPabl71KPpzMJc4hIg92lJ-4.mft (raw, json)
Hash identifier:          VWaP3aNeXXNtSvZ2mZ/oiR//ue4hYz0Z310gg/9yQs0=
Subject key identifier:   0C:8F:30:0A:9D:D7:6C:86:02:B6:ED:90:4A:15:40:61:01:0E:12:06
Authority key identifier: 17:3E:A9:3D:A6:E5:EF:52:8F:A7:33:09:73:88:48:83:DD:A5:27:EE
Certificate issuer:       /CN=A9145E09/serialNumber=173EA93DA6E5EF528FA7330973884883DDA527EE
Certificate serial:       0119
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fz6pPabl71KPpzMJc4hIg92lJ-4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft
Manifest number:          0119
Signing time:             Fri 25 Sep 2026 05:58:01 +0000
Manifest this update:     Fri 25 Sep 2026 05:58:01 +0000
Manifest next update:     Fri 02 Oct 2026 05:58:01 +0000
Files and hashes:         1: Fz6pPabl71KPpzMJc4hIg92lJ-4.crl (hash: sn6lcBf7V//+eNuhGUdOVVkDt47zUGE/SigIst5VxBg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.crl
                          rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fz6pPabl71KPpzMJc4hIg92lJ-4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 05:58:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 281 (0x119)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145E09, serialNumber=173EA93DA6E5EF528FA7330973884883DDA527EE
        Validity
            Not Before: Sep 25 05:58:01 2026 GMT
            Not After : Oct  2 05:58:01 2026 GMT
        Subject: CN=6ab60d69-e0d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:82:a9:94:8d:2b:ba:dc:40:4e:b5:6c:f9:06:
                    c3:b2:51:08:93:e4:ea:cb:2a:55:22:db:20:83:c1:
                    76:de:30:6c:51:9e:30:13:47:7a:6d:e7:e3:a6:d7:
                    ae:e5:b7:d9:d3:eb:ff:4e:89:d6:fe:9a:42:31:98:
                    97:3e:d7:91:23:27:fd:15:62:45:46:ed:0c:2d:e5:
                    7f:0e:4f:99:eb:a5:7e:92:c2:48:0c:f3:1c:fa:de:
                    9d:b8:aa:f6:6f:4d:1a:0b:d3:e0:bb:c5:60:06:6c:
                    6b:df:bc:d2:de:34:71:74:0d:61:69:c8:c7:ab:8b:
                    70:c3:b1:8c:56:77:1f:d9:e7:f8:ba:59:9e:50:99:
                    93:c7:55:c6:2c:5f:46:9a:f4:eb:49:3d:3e:8d:fd:
                    f6:29:2a:c6:5b:3a:30:6a:0c:e3:7b:1b:81:43:2b:
                    2e:12:27:7a:a7:a5:b5:27:39:b7:51:c2:ae:38:b6:
                    b7:ac:b5:f5:a8:62:af:d8:b5:f8:9a:76:16:46:17:
                    50:88:b7:4c:8c:6d:69:c6:35:7b:b9:61:4e:70:98:
                    c6:c8:10:4e:66:0c:dd:63:b1:43:55:79:fb:95:3e:
                    3e:e1:11:d0:a1:b9:9b:4d:cf:7c:13:f8:f1:d0:43:
                    36:6c:0e:65:b8:0c:92:9d:7e:1c:c5:c9:1d:77:cb:
                    c4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:8F:30:0A:9D:D7:6C:86:02:B6:ED:90:4A:15:40:61:01:0E:12:06
            X509v3 Authority Key Identifier:
                keyid:17:3E:A9:3D:A6:E5:EF:52:8F:A7:33:09:73:88:48:83:DD:A5:27:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fz6pPabl71KPpzMJc4hIg92lJ-4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:ec:0b:2a:62:b4:7a:88:07:35:a4:32:82:ff:13:4a:ac:52:
         a3:14:f0:a8:a2:f6:ad:56:22:7e:17:3a:69:5f:4f:93:6d:bb:
         f1:47:e2:ba:9a:99:d7:26:aa:07:9a:d2:ec:22:e2:78:87:ba:
         96:bf:59:1c:1e:79:74:2e:d4:6c:a1:a5:34:dc:a3:dc:5e:e0:
         d6:e5:4d:c6:ba:93:27:32:5d:74:70:80:d6:22:a8:ab:13:1e:
         e4:d6:e4:f9:c9:db:e7:b0:06:44:ea:40:c2:f7:e6:70:84:c0:
         e7:8b:b7:ab:2e:ad:3d:e8:00:e7:42:7b:1a:8f:34:7c:56:90:
         9c:fb:b2:8a:20:bd:25:13:16:84:11:0d:eb:fc:22:d7:61:59:
         7c:4d:b6:39:35:d5:52:a6:f7:0d:00:9c:66:e4:a2:ba:67:67:
         47:55:f7:31:d2:7d:09:a0:26:ab:14:a4:9c:48:b2:9b:e1:ec:
         62:19:88:b5:c6:9a:a5:ae:31:df:74:30:90:1e:71:a0:04:14:
         e9:f5:d2:da:f4:8d:c0:92:ac:c0:ef:4d:db:ff:fb:d8:94:c5:
         ae:c7:ca:7b:23:2a:f1:aa:c4:2a:c3:79:f7:c2:87:de:79:f0:
         d9:a1:c0:0d:ec:c9:20:6f:63:ad:3c:2e:12:26:66:28:29:50:
         3a:6c:36:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:05:46 2026 by rpki-client