Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft
File:                     Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft (raw, json)
Hash identifier:          KRXVvzKPuonqhs3zPbkFvdV9lr0jbSZoY1cHhW4q2Lw=
Subject key identifier:   47:33:43:86:CE:91:69:89:6C:36:1B:E6:7A:6F:46:A8:1F:91:29:8B
Authority key identifier: 43:92:9D:91:6D:C9:C9:CE:34:63:FF:91:58:CC:BE:FE:9F:18:2C:3B
Certificate issuer:       /CN=A9132C09/serialNumber=43929D916DC9C9CE3463FF9158CCBEFE9F182C3B
Certificate serial:       0215
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft
Manifest number:          0215
Signing time:             Mon 27 Jul 2026 04:26:21 +0000
Manifest this update:     Mon 27 Jul 2026 04:26:20 +0000
Manifest next update:     Mon 03 Aug 2026 04:26:20 +0000
Files and hashes:         1: Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.crl (hash: F9/K+VwhxeL+Aut8lIf6T4asApSHCoRKqMl1LbkISuw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.crl
                          rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:26:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 533 (0x215)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132C09, serialNumber=43929D916DC9C9CE3463FF9158CCBEFE9F182C3B
        Validity
            Not Before: Jul 27 04:26:20 2026 GMT
            Not After : Aug  3 04:26:20 2026 GMT
        Subject: CN=6a66ddec-0024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:72:8f:c4:94:fd:67:85:14:b7:cf:f6:21:3a:
                    99:00:97:a3:52:82:75:55:1e:4c:ee:89:50:f9:a5:
                    21:60:ad:09:d1:8d:9e:d6:00:a4:4a:a9:a8:e5:51:
                    83:fd:8c:00:c4:f8:91:a9:ca:6b:79:08:2b:30:2d:
                    c9:53:f5:3d:9f:11:d1:6d:7a:a9:a5:3f:60:b5:a2:
                    81:7a:8e:e8:a3:47:9c:ca:7c:8c:2e:b8:fc:67:ac:
                    7f:c3:be:c1:56:c7:0c:8f:2a:dd:8b:41:1b:12:fb:
                    d1:f1:8d:3b:5b:70:aa:0c:16:f1:d5:6f:25:64:45:
                    26:95:ef:b9:43:b6:86:6e:f6:4c:3e:e6:75:b7:d2:
                    d5:e9:3d:19:ff:05:0e:de:4f:69:2a:d4:69:51:4e:
                    06:73:ac:3e:29:e8:b0:b7:38:6d:b9:2d:e8:53:cd:
                    97:19:67:03:d0:89:2f:e7:b2:31:36:18:39:28:f2:
                    e5:ec:1c:ed:7c:20:45:56:65:bc:ef:fc:d8:e0:e7:
                    98:92:36:1f:68:ff:83:17:9c:fd:eb:ed:31:b7:be:
                    84:42:fc:cd:96:c0:bf:18:01:89:1a:40:23:d0:13:
                    71:90:1d:1f:3e:81:e4:2e:4a:63:d2:c5:12:20:4e:
                    60:c9:5e:ab:eb:b3:ae:ad:13:d4:06:a4:32:7c:9e:
                    bf:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:33:43:86:CE:91:69:89:6C:36:1B:E6:7A:6F:46:A8:1F:91:29:8B
            X509v3 Authority Key Identifier:
                keyid:43:92:9D:91:6D:C9:C9:CE:34:63:FF:91:58:CC:BE:FE:9F:18:2C:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:78:2b:39:5e:f1:c0:ea:0f:29:01:f5:94:41:3f:ca:ce:b0:
         3d:c3:53:42:ba:63:42:92:6f:56:64:cc:4b:15:ff:a0:e2:59:
         f9:2c:5d:02:94:90:43:c8:af:98:1c:9a:19:ae:2c:3a:ed:a3:
         58:e8:de:54:bd:25:86:26:9c:94:05:37:c9:f8:8e:82:8d:6b:
         df:46:f2:bb:09:1a:34:d9:e7:21:79:4b:7c:a0:0b:1b:b4:ed:
         de:34:94:7e:77:19:1f:1a:6c:a2:86:d6:9b:a9:4f:34:68:18:
         ed:e9:b9:62:cf:60:4a:0c:f6:e7:a7:e2:af:76:15:02:fd:21:
         96:bf:a3:c3:a2:72:28:0f:ef:26:11:b0:e2:30:ac:f1:73:ca:
         bf:d6:3e:88:22:cb:28:b6:96:53:f5:80:be:bb:25:63:c1:6b:
         ab:5f:bf:1f:ca:cd:af:1d:bc:3c:6f:70:c6:0a:64:d7:0f:58:
         80:e6:b6:14:10:5c:27:64:d6:18:88:e3:f9:34:97:3e:29:e1:
         4c:96:e3:b3:8c:8b:0f:01:95:59:08:2d:8a:bc:77:fa:f5:60:
         1b:2c:a5:16:36:fd:96:32:3c:5a:e8:10:e1:36:e0:f4:0c:df:
         b7:a2:7a:20:c3:48:2f:0a:bc:1e:78:d9:4e:09:72:ca:6a:3d:
         b9:bd:82:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:38:38 2026 by rpki-client