Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
File:                     2Y9v2wB__4PhEwj61Voer6g4dM4.mft (raw, json)
Hash identifier:          SiQUcq1h4B+zU+lpNRmLYX2mowWPvvODLhVHEFOeOvc=
Subject key identifier:   49:29:61:62:45:52:B1:52:9D:96:68:6F:32:D7:27:8D:81:22:AD:22
Authority key identifier: D9:8F:6F:DB:00:7F:FF:83:E1:13:08:FA:D5:5A:1E:AF:A8:38:74:CE
Certificate issuer:       /CN=A91D8601/serialNumber=D98F6FDB007FFF83E11308FAD55A1EAFA83874CE
Certificate serial:       7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Y9v2wB__4PhEwj61Voer6g4dM4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
Manifest number:          7F
Signing time:             Mon 21 Sep 2026 07:43:38 +0000
Manifest this update:     Mon 21 Sep 2026 07:43:38 +0000
Manifest next update:     Mon 28 Sep 2026 07:43:38 +0000
Files and hashes:         1: 2Y9v2wB__4PhEwj61Voer6g4dM4.crl (hash: /AQnZ4Mu8qA+WJFlMrgPzdkXpIELR9gzxBhKRlG4XYo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.crl
                          rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Y9v2wB__4PhEwj61Voer6g4dM4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:43:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8601, serialNumber=D98F6FDB007FFF83E11308FAD55A1EAFA83874CE
        Validity
            Not Before: Sep 21 07:43:38 2026 GMT
            Not After : Sep 28 07:43:38 2026 GMT
        Subject: CN=6ab0e02a-14c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:5e:c8:0b:4d:6b:18:02:5e:e6:81:fa:aa:f0:
                    54:63:0b:23:3d:cc:cb:9a:87:01:a8:71:6b:48:ea:
                    a4:43:ce:01:3f:51:f0:00:63:2f:db:29:60:5f:d8:
                    db:0f:50:8c:52:05:c2:c2:e2:ea:b8:38:82:5c:c8:
                    47:e1:8b:bb:b5:cf:87:f0:b0:08:a8:1b:df:2f:0e:
                    2e:f1:e9:22:88:2a:27:b4:da:33:8d:be:14:3d:f6:
                    f5:9c:78:77:47:8a:82:f9:f1:37:88:ff:4a:c3:cc:
                    f2:73:43:87:7e:39:99:6c:8e:76:56:21:c7:6d:2c:
                    38:4e:3c:ff:df:19:4d:3b:2d:42:e4:68:b0:66:f5:
                    dd:12:a0:b7:0a:78:c9:de:17:b6:1a:c5:74:a4:1f:
                    66:fe:98:38:69:aa:dc:bd:98:87:ab:41:f2:93:19:
                    0e:a6:02:9d:4e:b5:c3:59:f0:a4:b8:8f:fc:5e:4f:
                    33:ec:13:6a:37:99:da:81:0d:1f:61:9b:38:16:d6:
                    9a:20:b8:02:cb:39:18:a9:d7:6b:d3:ad:5c:21:6e:
                    27:2e:a3:68:c3:80:90:b8:17:c2:bc:f6:c1:09:49:
                    62:12:42:fd:0d:e5:8e:2f:08:01:c5:d4:fa:dd:de:
                    83:72:fa:d6:70:d8:c1:c3:00:85:8e:d4:97:76:8b:
                    38:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:29:61:62:45:52:B1:52:9D:96:68:6F:32:D7:27:8D:81:22:AD:22
            X509v3 Authority Key Identifier:
                keyid:D9:8F:6F:DB:00:7F:FF:83:E1:13:08:FA:D5:5A:1E:AF:A8:38:74:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Y9v2wB__4PhEwj61Voer6g4dM4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:3d:46:b6:dd:63:9b:0e:94:dd:b8:16:d1:46:57:ba:37:9e:
         58:2f:3c:99:d3:b3:14:74:29:82:65:73:d5:97:a8:43:92:88:
         dd:82:70:d3:0b:ee:11:12:ea:47:f8:2e:2f:a9:98:a4:5a:12:
         9b:e2:ac:58:f6:b4:94:91:36:fd:ff:b1:31:f2:b7:ac:87:a7:
         ae:08:70:57:7f:23:7d:d9:16:4a:16:75:ee:75:66:87:81:d3:
         2b:2c:ea:64:4c:26:c3:09:eb:c4:8f:a8:ee:43:9b:b5:a4:8c:
         bd:4f:fa:bb:50:b8:19:ba:8f:0b:fa:fb:10:66:ac:0b:31:87:
         a3:f9:30:72:2a:1a:80:29:d8:3e:f2:21:a2:57:88:8e:cc:2c:
         37:09:f0:a4:a0:11:34:5d:18:be:01:31:08:3a:e7:6e:8f:99:
         e8:08:b5:c2:53:76:f1:40:6d:ce:68:86:9f:6c:2f:33:e2:b8:
         9d:54:11:ad:e6:e8:49:89:bd:9a:55:11:f6:7b:60:e5:43:e4:
         7b:e5:8d:57:5a:eb:41:ea:61:70:a0:85:de:1c:46:9d:92:1b:
         4a:07:45:ca:c0:5f:eb:7a:0f:6c:2a:75:f9:3f:2b:56:e3:9e:
         9f:9b:3c:2d:c7:6d:f0:a2:49:c0:4a:1f:89:c0:de:b7:af:4b:
         8b:21:40:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:01:15 2026 by rpki-client