Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft
File:                     Wr4zfmXAC-qEfODSWciH5P2zuSE.mft (raw, json)
Hash identifier:          uiQy5qZ8Ev050Z2jbHGz9GCnOn/VrWTyNp5KCxMZ7ro=
Subject key identifier:   D6:93:55:E3:3E:C5:FC:97:7C:E8:EC:93:AE:85:C7:CD:0C:80:C6:26
Authority key identifier: 5A:BE:33:7E:65:C0:0B:EA:84:7C:E0:D2:59:C8:87:E4:FD:B3:B9:21
Certificate issuer:       /CN=A9173CDD/serialNumber=5ABE337E65C00BEA847CE0D259C887E4FDB3B921
Certificate serial:       0123
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr4zfmXAC-qEfODSWciH5P2zuSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft
Manifest number:          0123
Signing time:             Wed 23 Sep 2026 05:37:35 +0000
Manifest this update:     Wed 23 Sep 2026 05:37:34 +0000
Manifest next update:     Wed 30 Sep 2026 05:37:34 +0000
Files and hashes:         1: Wr4zfmXAC-qEfODSWciH5P2zuSE.crl (hash: fMVJA4u4SjJmIi9UHN0TSoyDaTtav7zNABgW8zc4Lvg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.crl
                          rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr4zfmXAC-qEfODSWciH5P2zuSE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 04:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 291 (0x123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173CDD, serialNumber=5ABE337E65C00BEA847CE0D259C887E4FDB3B921
        Validity
            Not Before: Sep 23 05:37:34 2026 GMT
            Not After : Sep 30 05:37:34 2026 GMT
        Subject: CN=6ab3659e-9b65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7e:03:1e:50:74:86:63:3b:6b:07:66:53:c2:
                    01:88:04:3c:9f:7f:62:65:4b:22:82:0f:e6:55:9e:
                    de:7a:4f:97:0c:e6:7a:38:84:17:4c:58:2c:37:45:
                    96:a6:73:2f:45:d1:31:42:75:8e:85:2f:6c:3c:80:
                    3c:17:71:66:f0:7c:c3:cf:36:04:e8:bc:4a:43:bb:
                    fc:f3:c8:78:a2:89:56:94:ca:56:06:c0:c0:5c:af:
                    e3:9f:57:8a:21:3a:ec:8b:82:03:59:c6:9a:8a:6a:
                    7f:31:5c:52:41:36:a6:d4:4e:f4:b7:d0:03:72:74:
                    10:a5:e0:7b:3b:c8:fb:70:d7:01:bd:c2:69:f9:ae:
                    ee:d5:f9:88:0c:00:e1:fc:8c:9c:0e:db:9f:45:a1:
                    77:01:78:2c:43:c2:df:36:9d:9c:44:11:06:e2:6c:
                    33:66:9e:02:e4:12:66:4b:79:40:3c:d7:15:be:a4:
                    b3:4a:5f:26:77:13:b0:5d:32:32:e6:0d:41:e1:be:
                    27:70:59:8f:4e:95:85:ed:f3:4f:05:73:ae:9d:82:
                    a8:73:8b:74:12:98:02:a0:18:bc:d6:b0:f1:4a:bc:
                    f8:e6:54:0d:45:e4:25:15:7d:2c:cf:62:94:35:85:
                    2a:a5:c3:2c:1c:26:40:02:53:07:93:8d:52:7b:cd:
                    4e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:93:55:E3:3E:C5:FC:97:7C:E8:EC:93:AE:85:C7:CD:0C:80:C6:26
            X509v3 Authority Key Identifier:
                keyid:5A:BE:33:7E:65:C0:0B:EA:84:7C:E0:D2:59:C8:87:E4:FD:B3:B9:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr4zfmXAC-qEfODSWciH5P2zuSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:e3:db:4c:c3:d6:9c:4b:56:e0:b4:6d:02:9c:df:22:69:29:
         d7:bb:2a:fb:2d:15:77:46:2c:26:b0:f9:e0:16:5a:49:e3:40:
         bb:4b:d4:4a:b0:84:43:cd:55:d2:88:0a:5a:e8:98:e1:05:2c:
         cf:79:ca:d7:0b:71:19:d2:d9:2c:df:80:86:09:9d:2a:59:7b:
         cb:b1:e9:e3:4a:f6:72:4d:cf:1e:82:b8:29:e4:13:3e:ff:5e:
         dc:56:76:b5:93:d1:cb:e4:49:19:85:19:58:50:91:44:eb:1d:
         4a:cf:d8:5f:64:d7:a7:17:33:48:ac:16:ae:fd:0e:41:5f:56:
         1d:20:f8:03:25:bd:c1:e9:73:a3:1c:3f:e1:61:d0:3b:39:48:
         95:2d:65:f4:58:02:a7:a3:7c:e9:75:2a:2a:d9:7d:46:0d:e5:
         75:fb:be:66:52:83:14:d3:b7:10:b7:bd:0b:34:3b:9d:6d:98:
         dd:3b:2d:27:da:a3:f1:e3:05:03:d5:6a:cb:58:6c:fd:9f:05:
         29:a1:6b:8a:34:da:ef:13:d1:dd:09:42:92:4d:df:29:11:80:
         18:3b:c2:c6:2b:71:94:5b:bd:53:71:19:ce:44:52:e5:10:6f:
         58:03:f9:d1:3a:42:ae:dd:f5:c6:86:bc:e2:0e:b7:e4:8d:35:
         a2:0d:34:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:17:43 2026 by rpki-client