Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.mft
File:                     T9EeLMzVFBlTCsBKFCWPEahXfq0.mft (raw, json)
Hash identifier:          8odfKOUAsOGWUl6F46IDYLt3Sd7C5JPwpH2hQVSpHF4=
Subject key identifier:   F9:FB:E8:43:8C:47:54:F7:C9:E5:59:D6:61:77:85:01:7F:73:42:80
Authority key identifier: 4F:D1:1E:2C:CC:D5:14:19:53:0A:C0:4A:14:25:8F:11:A8:57:7E:AD
Certificate issuer:       /CN=A9172B65/serialNumber=4FD11E2CCCD51419530AC04A14258F11A8577EAD
Certificate serial:       017C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9EeLMzVFBlTCsBKFCWPEahXfq0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.mft
Manifest number:          017C
Signing time:             Mon 27 Jul 2026 06:28:45 +0000
Manifest this update:     Mon 27 Jul 2026 06:28:45 +0000
Manifest next update:     Mon 03 Aug 2026 06:28:45 +0000
Files and hashes:         1: T9EeLMzVFBlTCsBKFCWPEahXfq0.crl (hash: ynGNoWyzKzubdFJMWzhtQa7bbRskrNGeLJMEBbX2Be0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.crl
                          rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9EeLMzVFBlTCsBKFCWPEahXfq0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 380 (0x17c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B65, serialNumber=4FD11E2CCCD51419530AC04A14258F11A8577EAD
        Validity
            Not Before: Jul 27 06:28:45 2026 GMT
            Not After : Aug  3 06:28:45 2026 GMT
        Subject: CN=6a66fa9d-be42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6e:c8:51:43:08:ec:c8:cc:94:06:5d:51:8a:
                    8a:fe:4e:52:80:4a:86:df:f9:53:90:45:24:4f:a2:
                    c6:1d:91:19:e9:7d:9f:e7:5a:bf:07:54:f0:4b:6b:
                    3e:d6:12:7a:a0:4a:81:db:69:78:99:eb:e6:89:aa:
                    c3:76:7f:12:b7:a5:e3:d5:7a:23:f8:94:3a:b8:ec:
                    ab:2e:74:7c:7a:ec:11:a6:c0:c0:8d:67:bc:78:c8:
                    42:05:7f:2a:cf:8d:7e:2d:2a:dc:55:37:10:63:9f:
                    21:ef:4a:09:19:6a:bb:15:32:fd:45:8c:2c:94:69:
                    70:09:27:4d:11:5e:d3:2d:d9:2d:3d:7b:d8:59:fc:
                    a0:9e:53:ad:4a:01:39:8a:b3:5f:63:31:8c:e7:4f:
                    df:a2:a9:2b:a8:ad:01:b7:4c:05:21:59:35:a9:05:
                    41:ad:9f:29:01:1b:e1:2b:3b:85:96:48:16:7a:e4:
                    e5:da:d1:1a:2e:7b:a3:3d:be:75:b7:85:7a:5c:7e:
                    58:4b:68:1d:10:ad:e8:e1:41:e8:95:56:c0:46:a4:
                    b2:93:20:c1:a4:a8:99:e2:54:db:c1:5f:74:f3:b1:
                    9d:65:96:cb:ab:32:f5:8c:38:9e:ea:4c:5a:d1:78:
                    1b:06:6e:7e:bc:90:e6:ce:e1:86:55:fc:fa:e8:ad:
                    34:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:FB:E8:43:8C:47:54:F7:C9:E5:59:D6:61:77:85:01:7F:73:42:80
            X509v3 Authority Key Identifier:
                keyid:4F:D1:1E:2C:CC:D5:14:19:53:0A:C0:4A:14:25:8F:11:A8:57:7E:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9EeLMzVFBlTCsBKFCWPEahXfq0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:c0:fd:db:af:33:d2:cb:de:74:5d:73:6c:d6:a7:15:84:4c:
         24:3b:ed:95:68:e7:71:c1:17:f3:30:70:19:f1:c6:a7:0b:b1:
         46:29:d4:23:8b:cc:24:1e:61:4f:ae:79:d3:26:8c:72:4b:5d:
         4f:84:b6:bc:8f:6f:58:3f:b2:5a:5a:5c:69:0d:03:ec:32:09:
         f5:57:01:9e:fe:08:24:ef:85:52:b6:74:dd:bc:b7:6d:7e:b5:
         cb:5f:9c:92:45:78:29:f4:d3:a4:bb:0d:ce:02:91:e8:34:71:
         68:15:9c:e8:94:7e:6c:66:05:4c:ee:21:4f:a1:28:d0:d9:33:
         2e:11:fa:85:b9:85:e4:0f:4b:8d:67:6f:65:92:9d:42:9c:97:
         cc:71:41:f0:1e:4c:ab:c4:3e:ce:f6:e6:70:df:d4:87:a9:44:
         3c:a5:ca:ee:21:b5:4f:18:39:f2:50:b8:a1:81:bb:9b:c5:2a:
         82:79:87:f4:b7:fa:ba:25:27:09:22:55:8f:5a:05:fb:32:76:
         fd:57:1a:7c:ac:61:0b:45:70:9c:71:61:0d:4b:93:57:49:4b:
         25:d5:0c:76:1e:30:2b:72:b9:b2:fc:74:53:75:ae:f5:8f:bf:
         7f:cd:4a:b5:3b:3e:8a:c1:cf:8f:df:eb:8f:e8:dc:5d:1e:6b:
         eb:3e:c9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:56:42 2026 by rpki-client