Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9132336/A4C4024C79A411F18D0EC0EF92A30FBC/zHlrmVsFkPGFeCONcFkd1SRJXVA.mft
File:                     zHlrmVsFkPGFeCONcFkd1SRJXVA.mft (raw, json)
Hash identifier:          qE4CMaeJ+s7LdrVBF38rqvvM/sEYtCbOWQUQYIK0o4w=
Subject key identifier:   7F:23:BD:FC:18:C8:D8:BC:38:86:2A:C9:74:C5:58:B5:7A:40:18:32
Authority key identifier: CC:79:6B:99:5B:05:90:F1:85:78:23:8D:70:59:1D:D5:24:49:5D:50
Certificate issuer:       /CN=A9132336/serialNumber=CC796B995B0590F18578238D70591DD524495D50
Certificate serial:       29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHlrmVsFkPGFeCONcFkd1SRJXVA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132336/A4C4024C79A411F18D0EC0EF92A30FBC/zHlrmVsFkPGFeCONcFkd1SRJXVA.mft
Manifest number:          29
Signing time:             Mon 21 Sep 2026 08:44:16 +0000
Manifest this update:     Mon 21 Sep 2026 08:44:16 +0000
Manifest next update:     Mon 28 Sep 2026 08:44:16 +0000
Files and hashes:         1: zHlrmVsFkPGFeCONcFkd1SRJXVA.crl (hash: Pe62mzDNzG/r1p8p55wM0p71ewuA1JJgRCTCVzyeTnM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132336/A4C4024C79A411F18D0EC0EF92A30FBC/zHlrmVsFkPGFeCONcFkd1SRJXVA.crl
                          rsync://rpki.apnic.net/member_repository/A9132336/A4C4024C79A411F18D0EC0EF92A30FBC/zHlrmVsFkPGFeCONcFkd1SRJXVA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHlrmVsFkPGFeCONcFkd1SRJXVA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 08:44:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132336, serialNumber=CC796B995B0590F18578238D70591DD524495D50
        Validity
            Not Before: Sep 21 08:44:16 2026 GMT
            Not After : Sep 28 08:44:16 2026 GMT
        Subject: CN=6ab0ee60-1b34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5b:d7:df:79:d8:23:1a:b8:0b:37:7f:49:7d:
                    56:cb:69:16:09:c7:01:0f:ad:10:ce:c3:f7:35:19:
                    8c:c1:20:37:86:8b:8e:c3:26:03:a3:87:f5:d9:52:
                    dd:d3:82:e2:f7:6b:a4:36:57:c1:18:e8:34:94:7c:
                    55:84:a5:e3:3c:0c:b3:db:d2:51:c5:99:23:28:56:
                    0b:0e:c8:8e:2b:f9:ea:72:6e:dc:a5:58:94:cf:7b:
                    65:9e:93:ce:b7:f0:64:23:6e:0c:0c:21:14:fd:06:
                    93:ad:f6:31:07:60:c3:28:5e:e4:db:1f:f9:a2:10:
                    b3:0d:ae:3b:5a:8a:5e:5a:94:b4:78:0d:0a:42:4b:
                    a6:d4:d3:1b:23:06:42:3b:cd:dd:b6:c9:64:76:09:
                    4b:93:3e:66:e8:32:0f:cc:2a:04:5a:b0:d9:e6:b3:
                    3a:36:4b:86:8d:6d:cf:0c:ad:76:ca:06:d4:dd:46:
                    ea:e9:d8:bb:a0:16:e7:44:ce:06:fa:30:74:7c:14:
                    93:6e:af:00:3b:e3:bf:f9:eb:36:2e:39:31:e3:25:
                    8e:70:7e:ea:3a:24:1d:4e:b4:23:ee:b2:14:16:23:
                    cd:80:a5:55:da:3e:f5:ec:30:12:70:83:76:4f:4c:
                    22:26:8c:03:8e:2f:e5:e1:7b:62:14:99:fd:da:71:
                    d2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:23:BD:FC:18:C8:D8:BC:38:86:2A:C9:74:C5:58:B5:7A:40:18:32
            X509v3 Authority Key Identifier:
                keyid:CC:79:6B:99:5B:05:90:F1:85:78:23:8D:70:59:1D:D5:24:49:5D:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132336/A4C4024C79A411F18D0EC0EF92A30FBC/zHlrmVsFkPGFeCONcFkd1SRJXVA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHlrmVsFkPGFeCONcFkd1SRJXVA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132336/A4C4024C79A411F18D0EC0EF92A30FBC/zHlrmVsFkPGFeCONcFkd1SRJXVA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:50:14:43:6e:62:48:10:d0:2b:33:5c:71:be:3f:0b:a0:b8:
         26:9d:56:c5:4d:05:36:50:44:69:7f:8b:7d:b9:c3:95:fa:01:
         85:df:6b:72:93:5d:65:9c:98:4e:a6:d1:e5:2b:2f:01:87:a6:
         b2:e0:0a:4d:b5:7e:1b:47:eb:95:f2:40:c7:e7:c9:d2:78:7b:
         39:68:3e:d5:3d:c5:1c:8f:f2:32:99:6e:6d:7a:f0:d1:af:a6:
         65:3a:68:2c:29:65:e2:2f:21:f8:b4:06:c6:f1:02:f4:71:42:
         7d:84:e3:9b:d7:c2:04:52:4c:36:5d:c7:81:3f:e1:f2:77:7f:
         bc:36:ab:91:a5:e6:50:20:23:ff:cd:af:20:0a:30:cd:97:52:
         ed:46:b6:d9:0b:29:a4:88:ab:25:f1:2c:44:68:7b:7c:b0:b6:
         3c:0f:aa:10:0f:9a:bf:79:45:17:e7:b9:62:3e:9a:d5:34:f5:
         d0:3b:a5:b4:f3:26:43:96:5d:28:41:e5:f8:a2:a2:cd:e8:64:
         e7:c1:4d:de:e1:6d:7d:43:15:b4:74:7c:96:d6:3a:92:f0:88:
         10:7f:36:a8:cd:99:5a:c0:f6:24:48:10:7a:1d:47:2f:93:ef:
         f2:9a:d9:b0:89:00:27:0a:23:ea:a0:9b:d0:70:10:47:c9:ed:
         2c:72:f3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:31:40 2026 by rpki-client