Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.mft
File:                     P0isoSpZJ6cC7O4kQVGJGU7UqoA.mft (raw, json)
Hash identifier:          8tsK2wuHIhlSLgwmQ6d1JxANBy6BW5vLt7kmt9gXwRI=
Subject key identifier:   38:3E:44:25:A1:72:0B:CA:F1:DA:F1:6E:F6:C6:27:D4:28:80:9C:75
Authority key identifier: 3F:48:AC:A1:2A:59:27:A7:02:EC:EE:24:41:51:89:19:4E:D4:AA:80
Certificate issuer:       /CN=A916A2FB/serialNumber=3F48ACA12A5927A702ECEE24415189194ED4AA80
Certificate serial:       F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0isoSpZJ6cC7O4kQVGJGU7UqoA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.mft
Manifest number:          F4
Signing time:             Fri 25 Sep 2026 06:24:23 +0000
Manifest this update:     Fri 25 Sep 2026 06:24:23 +0000
Manifest next update:     Fri 02 Oct 2026 06:24:23 +0000
Files and hashes:         1: P0isoSpZJ6cC7O4kQVGJGU7UqoA.crl (hash: Zl0N/3GfxY8anLLzQpJBAkLBJ21+jEj6QIAnec2T1T0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.crl
                          rsync://rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0isoSpZJ6cC7O4kQVGJGU7UqoA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 06:24:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A2FB, serialNumber=3F48ACA12A5927A702ECEE24415189194ED4AA80
        Validity
            Not Before: Sep 25 06:24:23 2026 GMT
            Not After : Oct  2 06:24:23 2026 GMT
        Subject: CN=6ab61397-1c52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:03:49:1a:0b:cd:62:68:5e:5b:f7:42:b6:a3:
                    60:96:f5:63:08:be:1a:fe:32:88:56:ee:33:ff:7f:
                    02:6e:63:69:bb:0b:af:6a:82:65:a7:92:4b:66:d1:
                    a3:9e:05:5c:64:c6:23:ff:0c:ab:6d:4f:3d:ad:92:
                    35:65:fb:24:f7:67:4e:6b:b8:3c:e2:2b:51:0a:a9:
                    96:36:83:13:6f:cf:ff:f2:36:da:c4:b7:9f:28:8b:
                    2b:a1:e0:2c:f2:f4:ee:8b:26:22:27:48:50:5b:d0:
                    33:60:38:4a:2b:6c:c7:9c:37:83:f5:49:e6:37:11:
                    49:3e:ff:65:64:eb:df:59:bf:b3:01:a7:42:73:ef:
                    78:9f:6a:b3:86:b2:a7:3a:68:89:09:72:6f:4c:cb:
                    08:3e:9e:56:de:15:c4:0a:d8:e1:e4:1f:c8:bd:14:
                    88:48:8f:d1:9f:3a:1f:d2:4d:e6:19:26:ea:a9:b9:
                    b7:70:7e:46:eb:c0:4c:6b:75:62:ed:5a:30:ae:09:
                    5f:51:2d:25:af:63:db:e1:92:23:03:93:2c:8d:c3:
                    e0:68:66:e3:7b:dc:96:80:74:bb:de:46:19:dd:9e:
                    f0:20:59:c9:d5:53:07:a8:21:7a:22:de:2c:3f:5b:
                    65:9b:0b:f9:d7:f7:d8:a2:e9:91:b8:48:1a:fb:85:
                    c0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:3E:44:25:A1:72:0B:CA:F1:DA:F1:6E:F6:C6:27:D4:28:80:9C:75
            X509v3 Authority Key Identifier:
                keyid:3F:48:AC:A1:2A:59:27:A7:02:EC:EE:24:41:51:89:19:4E:D4:AA:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0isoSpZJ6cC7O4kQVGJGU7UqoA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:76:b0:60:4e:5e:10:3a:23:5f:e6:63:61:dd:65:1f:22:ad:
         ed:dc:e3:60:03:98:44:fa:5c:ef:68:58:6d:0e:ee:1f:75:29:
         13:c7:b5:2a:f6:2a:f9:f3:f4:1e:7d:67:db:1c:21:e8:a7:1f:
         f4:1a:f2:09:a4:a1:73:dd:b6:a4:64:9b:20:32:e7:0e:9e:c3:
         ef:fd:c6:97:fb:72:c8:e0:2b:89:97:1a:fb:c4:06:44:5c:49:
         82:90:80:2f:10:7b:26:2b:74:55:e2:df:61:65:f9:77:bb:9f:
         f3:10:18:c9:eb:a1:80:3e:64:4a:74:88:82:54:97:eb:24:da:
         7c:58:fe:39:60:ad:b3:2d:9c:39:25:60:6e:05:16:fd:d2:16:
         4c:fd:0d:de:6b:f1:bb:7b:ea:da:81:9f:ad:d3:63:58:aa:cd:
         9e:a0:cd:97:45:0b:c0:0c:2b:dd:67:8e:e9:86:8a:f6:ff:44:
         78:3b:ee:b4:f7:64:8e:eb:2c:a5:0d:e6:74:e9:c7:2c:a1:23:
         81:85:5b:2e:6f:21:db:92:ad:c6:8e:02:ce:36:74:e3:2d:d4:
         9c:a0:52:b7:50:a0:7d:41:94:e4:e3:a7:3c:9d:8c:9f:5d:9c:
         f0:e6:c9:50:cb:bb:12:b1:d0:e4:cf:8f:fa:34:29:98:07:72:
         67:68:65:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:58:58 2026 by rpki-client