Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft
File:                     CRERb8OOld9ZFjfYxmS0X7FvS9o.mft (raw, json)
Hash identifier:          pq9Efk1W8rhP5DWwh4uRhzQeG8ytgRTLmhd/tvr/eME=
Subject key identifier:   E7:2F:3C:C1:FE:3C:84:D8:1C:8C:D2:C0:B1:0F:FD:6D:53:D5:3C:79
Authority key identifier: 09:11:11:6F:C3:8E:95:DF:59:16:37:D8:C6:64:B4:5F:B1:6F:4B:DA
Certificate issuer:       /CN=A9174C7A/serialNumber=0911116FC38E95DF591637D8C664B45FB16F4BDA
Certificate serial:       F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft
Manifest number:          F5
Signing time:             Wed 23 Sep 2026 06:05:27 +0000
Manifest this update:     Wed 23 Sep 2026 06:05:27 +0000
Manifest next update:     Wed 30 Sep 2026 06:05:27 +0000
Files and hashes:         1: CRERb8OOld9ZFjfYxmS0X7FvS9o.crl (hash: zYSj8/BD7vr62p1vzlkd21NY2Yh89HVdovncoJ3eQeA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.crl
                          rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 06:05:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 245 (0xf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174C7A, serialNumber=0911116FC38E95DF591637D8C664B45FB16F4BDA
        Validity
            Not Before: Sep 23 06:05:27 2026 GMT
            Not After : Sep 30 06:05:27 2026 GMT
        Subject: CN=6ab36c27-e478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:34:0c:62:14:ec:1b:2e:8b:6f:7f:9d:01:d0:
                    3e:e0:0a:1f:89:08:d9:3f:9d:89:8b:9a:ac:43:d2:
                    69:9c:55:3f:23:30:61:b0:ef:05:30:e7:fb:d6:65:
                    3d:06:97:36:bb:a5:2a:c5:c2:b6:27:95:e9:71:5d:
                    90:46:36:63:38:69:74:ab:44:3a:e1:d9:85:24:33:
                    eb:87:21:c5:f5:94:7a:3c:59:fe:dc:4d:f4:2c:90:
                    07:5a:ef:b2:1f:b1:34:21:d8:b9:39:58:85:90:c1:
                    64:3c:bd:1d:fd:17:1e:ff:fa:f1:b4:62:fd:4b:d5:
                    cb:b8:27:73:ef:86:a9:ba:0a:7a:07:2c:ef:85:ab:
                    b8:02:34:22:bf:ff:5f:7d:22:8a:41:3d:69:1d:34:
                    b2:46:2d:87:78:75:f5:fe:de:6f:57:e4:4d:f6:2a:
                    17:f2:1e:cb:4b:9e:67:cb:58:98:d6:62:07:76:b6:
                    f8:3e:14:6e:69:92:f7:64:2f:43:9a:28:82:f9:83:
                    d1:84:46:64:9e:d2:cd:15:93:a2:e4:41:58:93:3a:
                    93:fe:5a:f8:ee:c3:0e:b4:d8:e6:2b:99:4e:c3:7d:
                    bc:6f:f5:2c:be:3d:31:8e:5e:8e:82:ed:32:62:9a:
                    b4:ce:e0:d4:53:22:1f:37:ff:79:d8:73:93:1a:ba:
                    fc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:2F:3C:C1:FE:3C:84:D8:1C:8C:D2:C0:B1:0F:FD:6D:53:D5:3C:79
            X509v3 Authority Key Identifier:
                keyid:09:11:11:6F:C3:8E:95:DF:59:16:37:D8:C6:64:B4:5F:B1:6F:4B:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:a3:ec:cd:82:eb:b7:b8:c8:0a:0e:ec:cd:8f:33:fc:88:7a:
         2d:b4:7d:21:3e:ae:1e:b3:ff:3e:42:ad:29:f5:c2:cc:40:27:
         51:ae:d3:5e:4d:65:55:91:36:8c:1a:4e:00:f6:a3:db:af:95:
         9c:03:81:2f:6a:6d:36:1e:ff:e2:85:ae:17:e3:15:d1:c6:08:
         72:99:a8:e0:f6:e8:79:44:f7:d1:f8:f9:8e:11:fd:a1:16:49:
         30:be:99:ff:94:97:f7:08:84:17:13:36:a0:24:53:3f:ad:ba:
         64:f4:bd:59:3d:89:50:f8:6a:25:06:50:7b:0e:18:7b:4f:5b:
         ec:e3:fb:58:c1:bf:83:cd:56:13:d4:81:ed:95:a6:f3:aa:9a:
         3e:7f:43:cf:c0:91:28:64:ec:2b:1b:85:f9:c6:31:c4:12:ed:
         38:b5:fe:f7:49:31:b7:08:25:86:f9:5b:44:7d:f0:5a:b8:f2:
         db:51:a5:a8:ea:37:39:72:e4:c8:b9:07:7f:b9:c1:8d:20:99:
         ab:27:cb:61:99:9b:59:c1:3d:1e:90:00:91:00:1f:0a:ba:f0:
         08:34:1b:48:80:75:f4:2f:4a:d7:3d:86:03:e8:39:f8:97:09:
         68:7c:fc:bc:c5:c0:c1:52:bb:3e:14:f6:b9:a5:c0:70:fe:0a:
         8a:fe:fd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:31:25 2026 by rpki-client