Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft
File:                     F4xrtHazfF8V5ulTq-TLzwhhCCs.mft (raw, json)
Hash identifier:          MomachWjbYscj23Oc7o+lOkZPJHvYVtDlnh0JqqQhso=
Subject key identifier:   61:E8:6C:AA:22:5D:9A:52:C3:97:5C:32:3A:A1:49:F3:CD:80:88:0F
Authority key identifier: 17:8C:6B:B4:76:B3:7C:5F:15:E6:E9:53:AB:E4:CB:CF:08:61:08:2B
Certificate issuer:       /CN=A91709F5/serialNumber=178C6BB476B37C5F15E6E953ABE4CBCF0861082B
Certificate serial:       0132
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft
Manifest number:          0132
Signing time:             Mon 21 Sep 2026 05:35:36 +0000
Manifest this update:     Mon 21 Sep 2026 05:35:36 +0000
Manifest next update:     Mon 28 Sep 2026 05:35:36 +0000
Files and hashes:         1: F4xrtHazfF8V5ulTq-TLzwhhCCs.crl (hash: HTjRSBCkN8+08+S61bCeoz5k7kO/5KUlGdDN7tSc3Mc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.crl
                          rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 05:35:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 306 (0x132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91709F5, serialNumber=178C6BB476B37C5F15E6E953ABE4CBCF0861082B
        Validity
            Not Before: Sep 21 05:35:36 2026 GMT
            Not After : Sep 28 05:35:36 2026 GMT
        Subject: CN=6ab0c228-c403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:db:04:ec:d8:d3:17:50:4e:aa:54:35:76:61:
                    58:6a:b4:e5:7b:8d:4b:7a:b7:c1:9c:d3:4e:94:ba:
                    36:bc:43:09:11:d2:35:90:ac:b9:9b:56:55:19:a7:
                    58:a9:0a:69:60:63:e4:e5:4b:50:d9:71:0d:c7:b9:
                    0f:56:3c:11:d2:73:a1:c7:63:87:1b:62:26:13:f2:
                    ed:b2:d6:9d:2a:68:04:db:56:b4:3a:aa:a3:12:0d:
                    c8:a5:81:fc:9b:0a:9d:41:73:01:01:b3:22:cd:31:
                    f4:c9:a9:e8:62:76:ac:91:54:23:80:f0:f1:6e:c8:
                    14:e4:8e:22:ee:01:c8:06:39:10:82:da:6f:85:58:
                    43:94:79:f6:7d:74:be:72:a9:82:32:8b:aa:b8:f9:
                    d0:6d:7c:4a:c4:77:70:e8:5a:af:0f:5b:94:98:c1:
                    3c:af:c0:09:78:bb:3f:d3:e7:3f:3c:b6:f5:d8:8f:
                    2e:eb:17:60:72:e1:5e:cc:9d:a6:34:5c:31:f5:f1:
                    0c:92:76:3e:15:f7:8b:37:12:0f:10:cb:40:ce:53:
                    ed:72:b5:df:83:06:5d:81:53:e7:0b:e2:84:1f:53:
                    e7:51:94:f8:ce:44:b3:13:30:07:b5:41:24:38:3f:
                    66:9f:2b:1a:c6:42:39:4a:51:fc:e2:8a:e4:57:54:
                    03:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E8:6C:AA:22:5D:9A:52:C3:97:5C:32:3A:A1:49:F3:CD:80:88:0F
            X509v3 Authority Key Identifier:
                keyid:17:8C:6B:B4:76:B3:7C:5F:15:E6:E9:53:AB:E4:CB:CF:08:61:08:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:77:78:de:8b:68:89:c2:d7:3e:7d:c9:b8:19:a0:c5:a0:4a:
         ba:96:af:eb:a7:da:05:5a:ef:0f:f4:fb:e1:a5:ad:4a:6a:45:
         e2:60:84:8f:c4:a3:4d:26:4e:df:fa:69:16:1f:91:d4:0f:de:
         da:4a:c2:50:61:6b:1e:d6:df:39:cd:67:71:43:97:5b:a4:cf:
         9d:13:ac:fe:1d:48:db:ee:2a:fd:31:35:4f:06:52:98:ea:9e:
         08:82:17:00:ba:ab:7d:b5:7e:6e:e0:4b:11:83:76:60:27:da:
         d6:b6:17:15:fb:f5:4a:53:21:5e:25:eb:e3:ae:eb:e1:40:15:
         a4:b0:64:ad:9b:4f:8d:de:56:de:a9:2c:be:b3:d6:fa:97:5d:
         57:d6:ad:11:33:a4:52:be:c2:be:1f:74:cd:8b:12:05:84:d7:
         75:81:23:39:8b:7f:41:90:0e:3f:09:cc:f1:50:5b:c1:f2:2f:
         fb:c6:92:fe:5f:ed:23:37:d4:34:76:f1:ba:71:fb:23:95:43:
         4b:11:b2:3e:74:ad:da:6b:ef:78:df:dd:47:23:00:d5:29:da:
         4b:05:60:e9:10:bf:10:90:4d:76:a4:c6:cc:f4:2d:00:0f:89:
         cb:25:9b:35:db:e1:05:c0:22:c4:88:40:28:2e:98:1a:d3:1b:
         85:2a:22:fc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzA5RjUxMTAvBgNVBAUTKDE3OEM2QkI0NzZCMzdDNUYxNUU2RTk1M0FCRTRDQkNG
MDg2MTA4MkIwHhcNMjYwOTIxMDUzNTM2WhcNMjYwOTI4MDUzNTM2WjAYMRYwFAYD
VQQDEw02YWIwYzIyOC1jNDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA69sE7NjTF1BOqlQ1dmFYarTle41LerfBnNNOlLo2vEMJEdI1kKy5m1ZVGadY
qQppYGPk5UtQ2XENx7kPVjwR0nOhx2OHG2ImE/LtstadKmgE21a0OqqjEg3IpYH8
mwqdQXMBAbMizTH0yanoYnaskVQjgPDxbsgU5I4i7gHIBjkQgtpvhVhDlHn2fXS+
cqmCMouquPnQbXxKxHdw6FqvD1uUmME8r8AJeLs/0+c/PLb12I8u6xdgcuFezJ2m
NFwx9fEMknY+FfeLNxIPEMtAzlPtcrXfgwZdgVPnC+KEH1PnUZT4zkSzEzAHtUEk
OD9mnysaxkI5SlH84orkV1QDowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGHobKoi
XZpSw5dcMjqhSfPNgIgPMB8GA1UdIwQYMBaAFBeMa7R2s3xfFebpU6vky88IYQgr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDlGNS8zQTgyOTBFOERG
REExMUVGOEI0Nzg2MjRDNEY5QUUwMi9GNHhydEhhemZGOFY1dWxUcS1UTHp3aGhD
Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Y0eHJ0SGF6ZkY4VjV1bFRxLVRMendoaENDcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MDlGNS8zQTgyOTBFOERGREExMUVGOEI0Nzg2MjRDNEY5QUUwMi9GNHhydEhhemZG
OFY1dWxUcS1UTHp3aGhDQ3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbXd43otoicLXPn3JuBmgxaBKupav66faBVrvD/T74aWtSmpF4mCEj8SjTSZO
3/ppFh+R1A/e2krCUGFrHtbfOc1ncUOXW6TPnROs/h1I2+4q/TE1TwZSmOqeCIIX
ALqrfbV+buBLEYN2YCfa1rYXFfv1SlMhXiXr467r4UAVpLBkrZtPjd5W3qksvrPW
+pddV9atETOkUr7Cvh90zYsSBYTXdYEjOYt/QZAOPwnM8VBbwfIv+8aS/l/tIzfU
NHbxunH7I5VDSxGyPnSt2mvveN/dRyMA1SnaSwVg6RC/EJBNdqTGzPQtAA+JyyWb
NdvhBcAixIhAKC6YGtMbhSoi/A==
-----END CERTIFICATE-----
Generated at Tue Sep 22 06:57:10 2026 by rpki-client