Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125864/100016FAED1811F08E1C0602406F56BC/dzzFL61HXymuNv14yBJ3Et_SFUI.mft
File:                     dzzFL61HXymuNv14yBJ3Et_SFUI.mft (raw, json)
Hash identifier:          BVYt+8/xp09PBP1rN2ownKQErGS/1Ap9kKKNRjapvo0=
Subject key identifier:   49:8F:F2:FF:E1:27:4C:6A:71:3A:DD:10:FA:1B:80:84:A9:BE:34:BB
Authority key identifier: 77:3C:C5:2F:AD:47:5F:29:AE:36:FD:78:C8:12:77:12:DF:D2:15:42
Certificate issuer:       /CN=A9125864/serialNumber=773CC52FAD475F29AE36FD78C8127712DFD21542
Certificate serial:       68
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dzzFL61HXymuNv14yBJ3Et_SFUI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125864/100016FAED1811F08E1C0602406F56BC/dzzFL61HXymuNv14yBJ3Et_SFUI.mft
Manifest number:          68
Signing time:             Mon 27 Jul 2026 10:14:12 +0000
Manifest this update:     Mon 27 Jul 2026 10:14:12 +0000
Manifest next update:     Mon 03 Aug 2026 10:14:12 +0000
Files and hashes:         1: dzzFL61HXymuNv14yBJ3Et_SFUI.crl (hash: ApGxm3iw7zaYguW1jVEUC7LTPUqWTXmPlNWRvj5PMGU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125864/100016FAED1811F08E1C0602406F56BC/dzzFL61HXymuNv14yBJ3Et_SFUI.crl
                          rsync://rpki.apnic.net/member_repository/A9125864/100016FAED1811F08E1C0602406F56BC/dzzFL61HXymuNv14yBJ3Et_SFUI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dzzFL61HXymuNv14yBJ3Et_SFUI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125864, serialNumber=773CC52FAD475F29AE36FD78C8127712DFD21542
        Validity
            Not Before: Jul 27 10:14:12 2026 GMT
            Not After : Aug  3 10:14:12 2026 GMT
        Subject: CN=6a672f74-2c4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:63:67:0c:3b:27:0e:cf:d7:77:ed:de:1b:d3:
                    13:55:25:1e:fb:c4:2f:06:97:8f:f9:55:35:80:53:
                    a0:12:e0:49:80:9a:03:5f:ae:56:fc:db:b9:11:e4:
                    1a:8e:6b:9a:6f:99:53:4a:6f:47:d4:ff:bf:b8:04:
                    3e:a4:54:91:40:b0:39:9f:30:0e:a3:22:ab:58:72:
                    6c:44:8b:cb:04:58:94:89:a8:7f:2f:6a:58:69:79:
                    02:56:42:a9:cf:a7:d5:44:1a:f6:46:5d:75:b4:ca:
                    c2:57:8d:0f:ff:dd:b8:ae:81:33:b1:53:94:61:b1:
                    00:11:5a:34:26:3b:8f:fe:95:f8:be:9e:7f:97:98:
                    1f:ab:85:df:b4:40:34:b1:ee:8a:e0:58:ea:c2:2b:
                    01:1b:ef:e6:60:c3:17:b2:7b:92:78:ce:25:6c:ed:
                    1f:48:fb:b8:26:d7:7b:ec:5a:26:8e:43:15:10:2f:
                    cf:da:98:fe:d3:5d:24:23:af:8d:b1:70:a8:67:e6:
                    fe:76:e9:43:a7:d1:cb:8b:22:80:a2:73:92:bd:b3:
                    30:e6:f8:88:c8:61:30:08:2c:0d:20:57:e2:ba:5e:
                    92:31:48:0f:34:98:7f:0b:47:e3:62:17:10:b0:6e:
                    76:dd:74:64:02:20:0e:44:3c:84:37:f7:c2:c7:bd:
                    f6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:8F:F2:FF:E1:27:4C:6A:71:3A:DD:10:FA:1B:80:84:A9:BE:34:BB
            X509v3 Authority Key Identifier:
                keyid:77:3C:C5:2F:AD:47:5F:29:AE:36:FD:78:C8:12:77:12:DF:D2:15:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125864/100016FAED1811F08E1C0602406F56BC/dzzFL61HXymuNv14yBJ3Et_SFUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dzzFL61HXymuNv14yBJ3Et_SFUI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125864/100016FAED1811F08E1C0602406F56BC/dzzFL61HXymuNv14yBJ3Et_SFUI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:df:30:99:9f:1e:a1:a6:e7:1b:01:de:97:f3:c2:9f:65:bb:
         fc:57:51:81:a6:1e:6a:5f:6e:01:e7:b2:b3:49:7f:85:8d:b5:
         61:ed:38:5a:1b:08:4b:b4:4d:c1:c0:31:50:88:95:1c:e5:f2:
         5f:05:ef:f7:25:88:5d:93:17:e7:f3:7c:9a:be:2c:3f:88:13:
         0f:8b:c7:17:11:f9:9e:4b:9a:5d:df:46:b1:7a:86:3a:f9:2b:
         06:a0:22:d8:11:c4:d9:59:09:d0:13:23:28:cb:a8:a5:ad:69:
         d6:90:fd:ed:95:03:53:01:13:34:65:78:50:0f:1d:18:ad:b4:
         6d:26:44:d7:29:8a:98:21:f5:f9:39:bf:e8:30:87:1c:92:7c:
         95:c0:8b:76:3b:10:4e:fe:f7:6d:42:2a:c9:e5:a2:3d:1b:d4:
         36:14:4f:e4:6d:a3:ce:a7:c5:3b:ec:eb:22:a4:5f:fe:a6:b2:
         77:7d:b1:76:3b:92:ce:18:53:6b:9d:c2:92:b3:ed:88:94:e8:
         08:98:ea:b8:79:ea:3e:a0:67:7d:bd:63:45:e3:4a:fc:89:53:
         8b:70:93:27:d1:85:e9:3b:9e:3a:69:fb:a0:26:01:95:f9:d3:
         0d:fb:62:10:9d:3d:76:bb:6a:ab:04:cd:1e:57:cc:16:cf:20:
         9d:8b:c7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:35:30 2026 by rpki-client