Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft
File:                     8RbpEqlQneSy1rPZPLwY9QA24Wg.mft (raw, json)
Hash identifier:          JkBHQ2ee+7PX6fA5Acs2gLUAM9DY7BP35FzuY970Mh0=
Subject key identifier:   90:F2:24:90:CF:3F:A3:EE:FA:07:84:E7:F1:C6:78:E9:25:58:DE:30
Authority key identifier: F1:16:E9:12:A9:50:9D:E4:B2:D6:B3:D9:3C:BC:18:F5:00:36:E1:68
Certificate issuer:       /CN=A9156D54/serialNumber=F116E912A9509DE4B2D6B3D93CBC18F50036E168
Certificate serial:       036E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft
Manifest number:          036E
Signing time:             Wed 23 Sep 2026 00:25:22 +0000
Manifest this update:     Wed 23 Sep 2026 00:25:21 +0000
Manifest next update:     Wed 30 Sep 2026 00:25:21 +0000
Files and hashes:         1: 8RbpEqlQneSy1rPZPLwY9QA24Wg.crl (hash: 5kFMK1z2BJ2GeSyDjwqHOtZQzEHDD+dch4FZSS4e3XM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.crl
                          rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 00:25:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 878 (0x36e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156D54, serialNumber=F116E912A9509DE4B2D6B3D93CBC18F50036E168
        Validity
            Not Before: Sep 23 00:25:21 2026 GMT
            Not After : Sep 30 00:25:21 2026 GMT
        Subject: CN=6ab31c72-4114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c6:7f:9e:8f:7c:f9:86:6d:f5:35:92:01:1c:
                    84:86:de:75:da:23:a0:61:be:26:7b:84:c2:87:6f:
                    40:4d:cb:58:9e:67:4a:00:ec:b1:b7:d3:62:14:f6:
                    57:b6:63:d5:41:1e:5e:2e:03:eb:a8:ae:94:2c:51:
                    80:3b:16:1f:85:01:a7:35:c0:3c:55:78:c9:4e:41:
                    43:d5:92:af:7e:9f:fa:d4:1a:9c:e5:a9:bb:c9:06:
                    97:82:40:96:44:3a:a7:db:e7:f9:9e:ed:58:e0:55:
                    ae:d3:2b:3a:9b:eb:f8:fd:bc:52:18:dd:d0:7b:80:
                    72:55:6a:a8:25:e5:cb:6a:17:55:61:a4:df:9f:6c:
                    34:69:16:5d:2f:3f:ef:cc:96:55:bb:c1:bd:0c:18:
                    11:96:ec:99:ec:2d:f5:b6:b2:90:18:5a:cc:c2:e2:
                    d3:b5:c2:2c:6c:50:a3:7b:82:8e:4f:5c:5c:5b:5d:
                    7e:59:07:f7:48:b2:3c:09:25:ab:82:31:29:2c:65:
                    2a:da:f0:18:13:6f:43:28:1c:54:3a:c9:a1:f5:55:
                    8c:a2:bc:a5:40:2e:42:86:99:4f:a9:0c:cb:57:db:
                    45:ef:6b:a7:ab:c0:6a:89:af:5b:a8:4e:94:19:35:
                    93:31:b7:95:8f:b7:0d:c7:9c:0f:d5:46:63:06:dc:
                    56:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F2:24:90:CF:3F:A3:EE:FA:07:84:E7:F1:C6:78:E9:25:58:DE:30
            X509v3 Authority Key Identifier:
                keyid:F1:16:E9:12:A9:50:9D:E4:B2:D6:B3:D9:3C:BC:18:F5:00:36:E1:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:64:27:d0:d8:2d:6a:2c:25:dd:0f:1b:a9:b0:cd:c6:16:56:
         fa:71:b9:49:89:bf:b4:ae:06:4f:c8:13:9b:d1:b9:63:89:1a:
         d6:1f:6d:21:52:32:21:97:18:36:71:ae:f0:9c:f0:38:48:bf:
         ca:b1:e2:2a:6e:7b:24:92:b2:d7:40:1e:7c:24:fe:f8:99:12:
         e9:bd:c5:e8:7d:04:7b:dc:2f:49:c4:55:20:32:ff:ec:e0:a1:
         3b:c0:80:0e:4f:8a:91:3b:a3:7c:0d:d9:80:68:7c:66:b3:04:
         ff:48:c2:7c:57:fe:30:45:39:5a:1f:19:f8:41:f4:79:fe:de:
         54:11:ec:69:a0:ec:30:81:a6:0f:b9:b1:da:9d:69:aa:f0:2e:
         75:77:3e:73:45:88:22:1f:74:9f:93:37:c9:db:cc:c1:07:b9:
         dd:e4:20:85:57:72:1e:28:88:ca:45:fe:17:fd:f3:3b:65:48:
         62:b2:70:2d:6f:04:7c:1b:a4:db:4f:af:13:12:46:9e:c4:9a:
         4d:32:b4:d6:86:81:93:73:dc:01:b5:0a:36:dc:31:72:d0:cd:
         3f:0e:ba:7e:68:b7:5f:a8:3e:2e:39:b4:f5:0c:61:2f:74:67:
         6e:47:9e:42:dc:dd:1f:55:38:e8:71:ae:a8:df:4e:03:09:61:
         29:42:2a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:47:09 2026 by rpki-client