Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft
File:                     Fz6pPabl71KPpzMJc4hIg92lJ-4.mft (raw, json)
Hash identifier:          +fi641PqTKBjlDeRU8UnTG8WrZsCeud73PcGqAiUXTI=
Subject key identifier:   D2:59:05:31:79:29:68:67:AA:E7:81:98:A9:E5:8F:D3:21:E9:1F:51
Authority key identifier: 17:3E:A9:3D:A6:E5:EF:52:8F:A7:33:09:73:88:48:83:DD:A5:27:EE
Certificate issuer:       /CN=A9145E09/serialNumber=173EA93DA6E5EF528FA7330973884883DDA527EE
Certificate serial:       AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fz6pPabl71KPpzMJc4hIg92lJ-4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft
Manifest number:          AF
Signing time:             Sun 01 Mar 2026 08:24:39 +0000
Manifest this update:     Sun 01 Mar 2026 08:24:38 +0000
Manifest next update:     Sun 08 Mar 2026 08:24:38 +0000
Files and hashes:         1: Fz6pPabl71KPpzMJc4hIg92lJ-4.crl (hash: VXjzXfVoLIqIbzyGFqpLOv38JTS27nNpSFhbkuxIei4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.crl
                          rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fz6pPabl71KPpzMJc4hIg92lJ-4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:24:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175 (0xaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145E09, serialNumber=173EA93DA6E5EF528FA7330973884883DDA527EE
        Validity
            Not Before: Mar  1 08:24:38 2026 GMT
            Not After : Mar  8 08:24:38 2026 GMT
        Subject: CN=69a3f7c7-148a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f5:f9:90:24:06:bd:3d:41:7c:fa:15:cd:1b:
                    dd:7b:04:d5:9d:74:66:bb:0a:86:37:d9:2c:8e:78:
                    51:ef:8d:47:df:51:f6:ba:b6:0b:82:9b:0c:bb:26:
                    1f:27:53:47:11:94:ea:5d:7d:37:22:0c:57:46:45:
                    90:72:8a:4a:2c:43:b7:b6:f2:8f:dd:1c:84:63:af:
                    9e:45:10:11:69:f3:34:e7:97:4a:d4:1c:8d:ef:f9:
                    0e:eb:9e:ee:f2:7c:78:da:cd:c7:69:ce:c0:19:69:
                    6f:16:d5:03:83:04:68:c0:72:ab:d5:94:80:93:ab:
                    bc:fb:14:1d:eb:43:44:d8:2a:bc:89:9c:f8:d6:cc:
                    0b:5d:ae:de:33:58:57:c9:70:67:76:03:b6:eb:71:
                    d3:46:9c:5e:b5:2e:a3:c5:81:f0:b4:69:ba:43:f8:
                    f5:1e:33:10:01:5e:9c:ef:b6:0d:5c:9b:0f:56:06:
                    87:62:b9:91:3d:69:58:b3:ea:bf:04:c8:a8:d3:7a:
                    c8:03:fa:db:9b:72:26:31:ef:53:75:ca:bb:8c:07:
                    d5:61:f9:0c:52:4d:e0:09:f6:e9:84:6e:c5:ca:d8:
                    ed:3d:88:09:a6:50:42:05:fd:89:58:13:b6:37:45:
                    2e:74:eb:26:f2:69:bb:8d:4d:b9:6d:99:6a:76:4e:
                    b7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:59:05:31:79:29:68:67:AA:E7:81:98:A9:E5:8F:D3:21:E9:1F:51
            X509v3 Authority Key Identifier:
                keyid:17:3E:A9:3D:A6:E5:EF:52:8F:A7:33:09:73:88:48:83:DD:A5:27:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fz6pPabl71KPpzMJc4hIg92lJ-4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:61:dd:6d:2e:28:60:cb:e8:e8:a4:e7:06:5c:95:25:a7:57:
         cd:f2:93:e5:f0:03:cb:ce:90:0e:a7:2a:ab:cb:d6:46:ab:1c:
         23:27:d9:5b:b0:2f:f3:53:1b:4f:35:a8:d1:36:4e:90:f7:72:
         61:c9:33:20:6e:b9:19:e5:a3:65:a1:ea:6e:dd:92:68:f9:de:
         2a:4a:4f:22:90:ce:69:0d:89:ec:15:7c:cf:a1:39:61:22:e1:
         49:e2:ee:e9:9e:2f:f7:b7:bb:a2:77:3f:b9:76:0f:1e:d6:4c:
         d1:e3:0a:e1:bf:67:b3:e4:4a:4b:f9:17:de:e2:3f:f4:71:cb:
         97:f2:f6:70:14:a0:0b:ea:a2:80:98:cb:b3:ac:2a:93:24:7e:
         a2:3e:80:e6:67:58:c1:6e:32:5e:ec:d9:8e:e3:ad:e9:c1:96:
         9f:a9:44:1d:de:5d:54:df:a2:7a:7d:a7:38:6a:c7:b7:55:83:
         b5:6e:46:f6:1b:04:ac:00:cd:9b:a9:22:bf:43:fc:94:7b:fe:
         b0:b7:a7:d4:ca:e3:b3:7a:cc:45:fb:31:06:e9:27:41:3e:b3:
         7f:53:90:4e:f3:dd:54:c5:3b:bf:5a:c1:cb:65:b2:42:d1:02:
         45:79:d0:58:b4:7e:19:ce:69:5b:b5:2f:3e:f1:ea:89:ef:e3:
         10:5c:8b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:17:27 2026 by rpki-client