Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft
File:                     Fz6pPabl71KPpzMJc4hIg92lJ-4.mft (raw, json)
Hash identifier:          3UqqWZ8aGCcIUYPduI6mA93RhAOYFd1cebN4mJtbJ6o=
Subject key identifier:   23:27:FE:99:87:26:DE:61:37:54:E7:7C:F2:26:6B:22:64:9A:54:79
Authority key identifier: 17:3E:A9:3D:A6:E5:EF:52:8F:A7:33:09:73:88:48:83:DD:A5:27:EE
Certificate issuer:       /CN=A9145E09/serialNumber=173EA93DA6E5EF528FA7330973884883DDA527EE
Certificate serial:       C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fz6pPabl71KPpzMJc4hIg92lJ-4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft
Manifest number:          C8
Signing time:             Fri 17 Apr 2026 06:33:48 +0000
Manifest this update:     Fri 17 Apr 2026 06:33:47 +0000
Manifest next update:     Fri 24 Apr 2026 06:33:47 +0000
Files and hashes:         1: Fz6pPabl71KPpzMJc4hIg92lJ-4.crl (hash: wuDiC2vAm7VjcR+YYSSqeJsPI+1KWpplzJlFb38y6VE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.crl
                          rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fz6pPabl71KPpzMJc4hIg92lJ-4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:33:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200 (0xc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145E09, serialNumber=173EA93DA6E5EF528FA7330973884883DDA527EE
        Validity
            Not Before: Apr 17 06:33:47 2026 GMT
            Not After : Apr 24 06:33:47 2026 GMT
        Subject: CN=69e1d44b-fdfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:32:e9:1f:15:2e:0e:37:d8:27:c0:47:7e:67:
                    ac:ac:ac:40:97:97:fa:9a:ef:3b:cb:ac:9d:cd:fe:
                    4d:06:04:55:a0:75:a5:c9:6e:8b:44:4c:37:a6:8c:
                    49:8b:95:ff:e8:d9:4a:16:62:a4:50:99:f8:f3:e6:
                    a8:d8:2f:2e:58:37:f1:24:63:4e:f6:e3:26:66:6c:
                    3f:24:6a:de:89:51:0f:35:1c:c5:36:e4:84:20:93:
                    27:5f:c9:5c:d7:d5:cb:b9:3b:93:84:7f:d3:b2:ca:
                    0b:92:e3:f1:d8:38:19:75:22:89:0f:e7:01:ee:f1:
                    cc:3f:e4:e5:27:4a:12:c3:47:95:2e:10:0d:55:34:
                    9e:33:c7:65:02:1b:74:ef:43:88:c2:ea:9e:bb:f2:
                    79:07:6e:76:84:3f:c5:e4:85:5e:c2:17:03:82:14:
                    bd:22:32:bf:3a:b4:62:e9:4f:bb:8a:7e:ee:a6:79:
                    5c:0c:07:ba:09:55:b7:11:f5:02:5c:8f:fb:74:8e:
                    c5:61:57:60:55:e5:5d:83:f6:e7:91:e4:09:30:f9:
                    84:8f:32:15:c6:f9:e9:92:f7:a0:fb:ca:86:67:21:
                    ee:20:2f:78:8f:7b:96:ca:d5:12:80:75:c6:12:19:
                    99:bc:40:82:d3:ec:dd:b2:14:d3:70:58:06:f5:87:
                    bd:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:27:FE:99:87:26:DE:61:37:54:E7:7C:F2:26:6B:22:64:9A:54:79
            X509v3 Authority Key Identifier:
                keyid:17:3E:A9:3D:A6:E5:EF:52:8F:A7:33:09:73:88:48:83:DD:A5:27:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fz6pPabl71KPpzMJc4hIg92lJ-4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:3c:66:1b:64:83:91:83:2d:71:22:c9:c8:81:6b:7a:4f:a8:
         ac:1e:3f:8d:63:5f:f7:2f:da:f3:74:75:a1:e8:d9:80:25:f6:
         0e:cd:62:bd:df:cf:51:ac:f5:73:33:94:e7:f1:24:58:c2:5f:
         e0:f7:e3:6e:79:89:46:ca:f8:3e:e8:a5:22:2f:62:86:1b:f5:
         db:c6:44:2a:2c:bf:b0:20:b3:c7:92:66:9e:73:fe:4e:05:34:
         be:1c:9c:f6:05:f9:12:25:fe:48:27:68:32:49:0d:b2:76:25:
         c1:34:da:53:d5:1c:d0:42:bc:20:3e:a5:85:e3:6b:f1:34:59:
         d5:b5:d0:23:47:3a:73:2c:a1:58:4a:48:ef:08:fc:5f:11:b6:
         76:bd:22:e6:9b:27:05:c6:b2:fc:dc:61:6d:0b:f2:9c:4c:7b:
         72:15:5a:08:47:9f:4d:ae:98:49:ec:cb:fd:69:03:18:6f:ed:
         ff:38:51:48:1b:2c:7d:05:24:90:a9:e2:c5:17:da:4e:85:19:
         90:a4:41:ac:b8:99:b8:1d:3d:25:b4:c5:12:af:c2:78:59:c3:
         79:f7:ea:a0:9a:c8:4b:f1:dd:fa:4c:1e:ab:e2:55:db:58:47:
         79:84:1f:28:75:cb:05:eb:4d:9c:d5:fd:88:31:65:c1:fe:ac:
         46:47:d2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:21:02 2026 by rpki-client