Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178F3F/47C8BE507F4611F19147BB5D95A30FBC/PkEPPHi3zvQgcVmBdk5xnuGbZkU.mft
File:                     PkEPPHi3zvQgcVmBdk5xnuGbZkU.mft (raw, json)
Hash identifier:          mjQ3dYCuQCKcEX6L8a5vrFDmVVmKramXJnOtYO0zPxw=
Subject key identifier:   F4:B1:72:75:EE:FE:B5:8A:64:3D:36:D2:AD:6D:25:B7:1A:EE:FF:E8
Authority key identifier: 3E:41:0F:3C:78:B7:CE:F4:20:71:59:81:76:4E:71:9E:E1:9B:66:45
Certificate issuer:       /CN=A9178F3F/serialNumber=3E410F3C78B7CEF420715981764E719EE19B6645
Certificate serial:       07
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PkEPPHi3zvQgcVmBdk5xnuGbZkU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178F3F/47C8BE507F4611F19147BB5D95A30FBC/PkEPPHi3zvQgcVmBdk5xnuGbZkU.mft
Manifest number:          07
Signing time:             Thu 23 Jul 2026 11:17:32 +0000
Manifest this update:     Thu 23 Jul 2026 11:17:31 +0000
Manifest next update:     Thu 30 Jul 2026 11:17:31 +0000
Files and hashes:         1: PkEPPHi3zvQgcVmBdk5xnuGbZkU.crl (hash: 6fTw9CugHsgbkwWZ4vE1W4fht71aHjldyle9S7JIhCc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178F3F/47C8BE507F4611F19147BB5D95A30FBC/PkEPPHi3zvQgcVmBdk5xnuGbZkU.crl
                          rsync://rpki.apnic.net/member_repository/A9178F3F/47C8BE507F4611F19147BB5D95A30FBC/PkEPPHi3zvQgcVmBdk5xnuGbZkU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PkEPPHi3zvQgcVmBdk5xnuGbZkU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:17:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178F3F, serialNumber=3E410F3C78B7CEF420715981764E719EE19B6645
        Validity
            Not Before: Jul 23 11:17:31 2026 GMT
            Not After : Jul 30 11:17:31 2026 GMT
        Subject: CN=6a61f84c-ba0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:45:65:94:0f:1e:bc:86:63:9c:b7:67:04:2d:
                    57:fd:f3:ff:8a:85:75:92:e2:62:a5:06:8e:1a:09:
                    64:1b:cf:e4:f0:18:98:f6:4c:ee:d7:5a:85:07:f1:
                    93:34:f1:11:ed:cf:6c:7d:a3:37:24:da:05:a0:9c:
                    b9:a9:34:c5:64:1d:4e:82:bf:21:cb:60:ed:43:e0:
                    d8:1d:f2:21:c7:5e:10:f9:ab:69:64:59:3b:25:2f:
                    87:71:82:4c:7d:05:ff:8f:2d:28:3c:5e:9c:a4:ad:
                    88:45:d5:ec:41:98:b6:1a:af:88:b5:4c:95:69:c8:
                    f0:f8:35:72:92:9d:a9:88:72:6c:21:92:c4:9f:d4:
                    35:48:93:a5:6c:b1:80:a8:7d:ed:57:45:9f:d2:be:
                    48:9d:53:14:d9:48:2e:15:e4:40:ff:43:f6:47:bb:
                    fd:93:11:ba:95:3e:15:7c:fd:aa:72:3a:10:16:2b:
                    64:9d:68:0f:11:98:60:c3:0f:ca:0e:7f:6f:36:1f:
                    0f:54:01:5a:4b:88:60:0d:b9:27:f6:6b:5e:34:a5:
                    84:ad:a4:df:6d:c1:a2:e5:9e:67:40:20:c5:ae:0c:
                    41:a6:96:21:56:6a:25:b1:c7:89:64:e9:44:02:57:
                    d9:55:32:23:2c:43:ad:bf:c7:63:69:52:6c:0c:6b:
                    6a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B1:72:75:EE:FE:B5:8A:64:3D:36:D2:AD:6D:25:B7:1A:EE:FF:E8
            X509v3 Authority Key Identifier:
                keyid:3E:41:0F:3C:78:B7:CE:F4:20:71:59:81:76:4E:71:9E:E1:9B:66:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178F3F/47C8BE507F4611F19147BB5D95A30FBC/PkEPPHi3zvQgcVmBdk5xnuGbZkU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PkEPPHi3zvQgcVmBdk5xnuGbZkU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178F3F/47C8BE507F4611F19147BB5D95A30FBC/PkEPPHi3zvQgcVmBdk5xnuGbZkU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:54:68:48:6d:86:6c:b8:0a:2b:32:79:a6:17:30:e7:2f:ff:
         27:01:39:2b:99:2a:c6:ad:f7:91:b0:8b:2b:3f:38:d3:b5:5a:
         9c:a2:12:4e:6d:9f:99:4d:c5:ab:c5:e0:ca:96:33:fc:35:e8:
         6f:f2:0a:b2:b1:90:71:97:06:eb:31:f8:97:62:3c:20:9e:e7:
         8e:da:25:89:d4:68:2d:c2:12:60:49:87:14:f8:43:50:91:93:
         8c:db:a2:ee:00:88:86:19:06:1a:19:cf:83:47:48:63:ba:f2:
         c4:3a:81:af:29:b2:7f:22:78:64:cc:85:a6:36:57:8d:d7:63:
         7a:6d:75:cd:52:30:05:46:ae:08:64:e6:07:0f:ea:dd:c8:16:
         75:b6:75:44:6e:49:68:02:25:56:10:ff:1b:c8:f4:36:7c:9c:
         67:dc:19:c8:db:c4:62:2e:03:00:44:ae:d9:93:36:90:ec:d9:
         33:8a:da:7f:f6:26:a6:d4:3c:0a:96:86:6f:3b:e6:fb:f5:79:
         46:c9:b9:8b:b2:48:0c:a7:a0:7c:08:c1:55:6a:7e:86:8b:14:
         b2:be:3c:f5:b9:12:d3:36:5b:9f:b0:ca:ef:f3:23:95:d7:25:
         de:3c:17:02:13:74:08:eb:1d:c9:96:78:23:92:d0:ae:60:44:
         27:69:7f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:20 2026 by rpki-client