Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174A0F/5617C9586F5911F192237A477AEE528E/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.mft
File:                     Pe9sKBE-9o5iWPASLX2RJXr4Bsk.mft (raw, json)
Hash identifier:          17c53uTI7aCxrz6Hbcoi8OQ/f8nT2kGJ/tROefZQt5c=
Subject key identifier:   40:37:6B:01:A7:51:B3:B2:15:D9:3B:73:7F:3C:1D:B0:3E:A9:0A:96
Authority key identifier: 3D:EF:6C:28:11:3E:F6:8E:62:58:F0:12:2D:7D:91:25:7A:F8:06:C9
Certificate issuer:       /CN=A9174A0F/serialNumber=3DEF6C28113EF68E6258F0122D7D91257AF806C9
Certificate serial:       33
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174A0F/5617C9586F5911F192237A477AEE528E/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.mft
Manifest number:          33
Signing time:             Fri 25 Sep 2026 08:28:49 +0000
Manifest this update:     Fri 25 Sep 2026 08:28:48 +0000
Manifest next update:     Fri 02 Oct 2026 08:28:48 +0000
Files and hashes:         1: Pe9sKBE-9o5iWPASLX2RJXr4Bsk.crl (hash: fNuK5Q9NTf2mU/zOm6qhTyOGIfVMxOulWyxOANN66FE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174A0F/5617C9586F5911F192237A477AEE528E/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.crl
                          rsync://rpki.apnic.net/member_repository/A9174A0F/5617C9586F5911F192237A477AEE528E/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 08:28:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174A0F, serialNumber=3DEF6C28113EF68E6258F0122D7D91257AF806C9
        Validity
            Not Before: Sep 25 08:28:48 2026 GMT
            Not After : Oct  2 08:28:48 2026 GMT
        Subject: CN=6ab630c0-13ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a8:49:4f:fa:41:2d:32:e9:83:e7:3d:d7:f1:
                    0d:09:84:6e:bc:3d:33:87:20:26:b5:bb:96:32:d3:
                    fc:1c:38:1c:b2:10:6d:53:43:74:f4:13:5e:40:18:
                    05:4a:66:e6:68:7d:37:bc:da:75:ba:35:55:59:13:
                    3a:90:1a:a4:3a:45:71:e4:ab:0b:41:e2:9d:7d:d3:
                    11:fb:12:b7:34:5f:d5:71:de:37:e1:66:90:9a:6b:
                    bd:fc:0d:38:2d:77:88:9b:62:53:c2:d4:d6:ec:b3:
                    1b:c8:f0:20:9c:98:74:6a:80:63:8d:33:f3:f6:cd:
                    ed:ad:e2:29:6f:62:4d:8b:e3:ab:cb:b6:53:73:4f:
                    58:da:0a:f0:33:f2:25:e5:cf:1b:1e:c7:a9:85:70:
                    3d:11:64:c5:20:08:6e:d1:7a:e5:71:d5:09:00:bf:
                    3a:74:13:52:91:4a:fe:7e:db:c9:88:35:48:ba:7b:
                    59:38:6d:af:50:d0:13:14:eb:28:77:ba:68:a5:a2:
                    bb:2c:27:46:1a:f6:2b:cd:96:62:ee:bb:db:44:a7:
                    38:ec:c2:20:cb:50:20:cc:f3:fd:83:bb:7d:d2:87:
                    a2:cb:e4:45:94:a5:55:4c:57:08:d8:ed:85:32:99:
                    53:f4:a7:d8:49:fa:77:2a:6a:8a:a3:f7:33:ad:f3:
                    c4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:37:6B:01:A7:51:B3:B2:15:D9:3B:73:7F:3C:1D:B0:3E:A9:0A:96
            X509v3 Authority Key Identifier:
                keyid:3D:EF:6C:28:11:3E:F6:8E:62:58:F0:12:2D:7D:91:25:7A:F8:06:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174A0F/5617C9586F5911F192237A477AEE528E/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A0F/5617C9586F5911F192237A477AEE528E/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:4a:7e:06:43:b1:c3:6b:41:f0:aa:f4:1d:40:b2:88:36:d8:
         91:53:5f:d0:65:94:a1:a1:43:9c:a1:b9:e2:88:1a:4c:a8:29:
         84:e8:ba:d9:2d:37:77:67:88:3d:71:b4:bd:0b:8a:cc:83:3c:
         17:e1:63:e7:96:bf:4d:b0:93:a3:d9:c4:38:8c:db:78:16:fb:
         cb:cc:d4:2f:ec:f6:59:5c:ce:32:9e:6d:e8:99:0e:59:91:ad:
         88:5a:e5:72:ac:4a:9c:ea:1e:98:b6:a7:13:6b:2d:e6:eb:a0:
         53:8c:2a:0b:6d:54:9b:4b:69:36:59:7c:cc:e7:35:25:85:e7:
         da:d0:1e:b4:01:3b:d8:1a:96:8a:8b:06:0c:a3:bd:4a:90:54:
         a2:b8:04:0e:71:cc:b3:33:8a:76:0d:68:f0:2f:a0:6d:79:f8:
         af:fa:4f:b0:3c:78:9a:e8:5e:b9:49:69:b5:c7:c0:2f:ae:0f:
         35:01:9b:1f:ba:78:05:43:b0:cb:c2:38:44:72:35:bf:06:c1:
         e0:2e:48:ce:dc:76:57:19:0a:e8:e9:41:18:57:6b:6f:22:b5:
         a2:f8:59:90:a4:1f:e3:e4:f8:48:55:55:aa:8c:b1:db:98:d7:
         8f:b4:20:99:59:4e:68:be:ff:4e:3e:52:c2:c7:84:5b:da:75:
         ae:1b:21:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:41:55 2026 by rpki-client