Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147150/12049226677811F0B0D0F64FC4F9AE02/4WfcTVfF__boFwUeksBgF1urHR0.mft
File:                     4WfcTVfF__boFwUeksBgF1urHR0.mft (raw, json)
Hash identifier:          EMbepcZA8QmnqW1dWp7u1sd/79EzkvmNeaERuRfKXT4=
Subject key identifier:   ED:E4:AE:9E:4F:17:E9:0F:3C:F5:09:25:71:EF:4A:69:EB:EC:97:A3
Authority key identifier: E1:67:DC:4D:57:C5:FF:F6:E8:17:05:1E:92:C0:60:17:5B:AB:1D:1D
Certificate issuer:       /CN=A9147150/serialNumber=E167DC4D57C5FFF6E817051E92C060175BAB1D1D
Certificate serial:       73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WfcTVfF__boFwUeksBgF1urHR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147150/12049226677811F0B0D0F64FC4F9AE02/4WfcTVfF__boFwUeksBgF1urHR0.mft
Manifest number:          73
Signing time:             Sun 01 Mar 2026 09:12:18 +0000
Manifest this update:     Sun 01 Mar 2026 09:12:18 +0000
Manifest next update:     Sun 08 Mar 2026 09:12:18 +0000
Files and hashes:         1: 4WfcTVfF__boFwUeksBgF1urHR0.crl (hash: P+Noop/B21ayqZuNOdRKDc75fTz5OUuGlu9/LntDRlk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147150/12049226677811F0B0D0F64FC4F9AE02/4WfcTVfF__boFwUeksBgF1urHR0.crl
                          rsync://rpki.apnic.net/member_repository/A9147150/12049226677811F0B0D0F64FC4F9AE02/4WfcTVfF__boFwUeksBgF1urHR0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WfcTVfF__boFwUeksBgF1urHR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:12:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147150, serialNumber=E167DC4D57C5FFF6E817051E92C060175BAB1D1D
        Validity
            Not Before: Mar  1 09:12:18 2026 GMT
            Not After : Mar  8 09:12:18 2026 GMT
        Subject: CN=69a402f2-2d4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:00:da:01:2d:b8:da:8a:6b:0e:c3:7d:bd:df:
                    c5:47:68:0e:43:e2:1b:69:bf:8f:e0:09:b8:df:b7:
                    34:ed:f1:6b:07:30:1e:80:2e:70:d4:3c:58:7f:96:
                    62:f5:f4:ae:d2:b6:d0:02:0e:d4:b4:1e:f4:86:ac:
                    1c:0c:d3:06:f2:dc:1b:a0:27:eb:d0:dd:10:26:07:
                    a7:98:a8:b9:cc:61:a3:f2:4d:6e:14:38:5a:27:b5:
                    43:5b:31:6f:3a:37:93:9e:5d:e5:03:0f:ac:1e:c8:
                    72:27:ef:ee:e2:b3:1b:00:b0:27:22:96:61:b0:5c:
                    06:f5:e8:75:4c:a5:f3:72:fa:4b:02:11:84:b0:c1:
                    3a:ce:81:ca:6f:87:78:03:e1:d1:ad:cd:b7:a7:98:
                    1f:e9:c0:63:b5:c8:e8:6b:39:ef:ea:63:b4:62:31:
                    3b:d4:d2:b5:98:b8:9f:fa:fb:ad:47:be:74:59:1e:
                    92:00:70:42:40:0b:9a:d9:61:f7:1d:23:25:cf:03:
                    18:52:aa:0e:9a:c2:5c:3a:50:0b:1d:7e:3e:b4:14:
                    20:1e:32:fc:39:ea:a6:89:35:71:a6:18:81:c6:d2:
                    56:ac:4e:18:c5:53:ea:2a:24:e3:6c:f3:61:bc:c9:
                    67:a3:4e:39:d4:bd:c6:5b:14:98:eb:15:5c:02:22:
                    db:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E4:AE:9E:4F:17:E9:0F:3C:F5:09:25:71:EF:4A:69:EB:EC:97:A3
            X509v3 Authority Key Identifier:
                keyid:E1:67:DC:4D:57:C5:FF:F6:E8:17:05:1E:92:C0:60:17:5B:AB:1D:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147150/12049226677811F0B0D0F64FC4F9AE02/4WfcTVfF__boFwUeksBgF1urHR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WfcTVfF__boFwUeksBgF1urHR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147150/12049226677811F0B0D0F64FC4F9AE02/4WfcTVfF__boFwUeksBgF1urHR0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:0e:c8:30:c4:ef:c8:09:89:bf:95:0f:92:e8:94:04:1e:63:
         e7:d5:07:49:ca:aa:2c:b4:fd:1c:bf:0b:b2:2b:f9:4a:72:73:
         f7:f5:cd:d9:b4:f8:d9:c4:7b:df:2e:11:2b:c0:1d:fc:7c:00:
         70:b4:8b:4d:08:e2:8b:ab:91:52:15:58:c7:8f:ff:c9:91:c6:
         e9:13:60:e9:0e:2b:db:d6:89:7d:7b:fe:d2:f6:b0:ad:01:2b:
         40:a2:20:12:5a:79:ab:81:76:73:fb:78:25:11:02:54:e7:88:
         8a:80:09:89:19:24:cd:06:e9:8b:b2:7c:25:73:e6:ae:49:35:
         75:01:b4:d2:00:23:c1:63:d4:2a:bb:06:b4:84:78:6d:01:0f:
         d5:2f:56:88:f4:ab:67:49:9c:7a:5a:43:53:0d:00:23:18:a5:
         9d:15:25:ad:1f:f6:8a:7d:55:05:a7:97:58:5f:34:99:e3:f6:
         7f:0c:d5:09:20:44:00:13:4d:19:71:81:20:71:58:80:4b:a0:
         17:a2:11:cd:a2:6a:50:a7:a8:aa:5c:8f:43:df:95:ac:37:b7:
         65:ad:29:74:15:cd:c0:23:5d:89:df:7b:8d:c4:5f:89:de:4f:
         5e:ed:89:e6:58:9a:67:33:58:5e:3d:86:fe:0b:3c:fc:08:5b:
         98:7e:84:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:26:08 2026 by rpki-client