Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173204/D23043062B4011F1BAED9A6390833773/4EnEoBiPI8haDO2gxmM6o0uGnBY.mft
File:                     4EnEoBiPI8haDO2gxmM6o0uGnBY.mft (raw, json)
Hash identifier:          wrBypRjZ87b/O+VAdp232B25jRdWgTlM2G8B1rsG1J8=
Subject key identifier:   77:FF:33:A0:52:FB:FE:08:77:E4:AB:C0:31:17:3E:99:7D:50:A9:89
Authority key identifier: E0:49:C4:A0:18:8F:23:C8:5A:0C:ED:A0:C6:63:3A:A3:4B:86:9C:16
Certificate issuer:       /CN=A9173204/serialNumber=E049C4A0188F23C85A0CEDA0C6633AA34B869C16
Certificate serial:       3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4EnEoBiPI8haDO2gxmM6o0uGnBY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173204/D23043062B4011F1BAED9A6390833773/4EnEoBiPI8haDO2gxmM6o0uGnBY.mft
Manifest number:          3E
Signing time:             Mon 27 Jul 2026 10:51:17 +0000
Manifest this update:     Mon 27 Jul 2026 10:51:16 +0000
Manifest next update:     Mon 03 Aug 2026 10:51:16 +0000
Files and hashes:         1: 4EnEoBiPI8haDO2gxmM6o0uGnBY.crl (hash: T8eoEcjkJ3NUL+ifbiHYqAzk8nCJJr0HSnUznH/x5mw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173204/D23043062B4011F1BAED9A6390833773/4EnEoBiPI8haDO2gxmM6o0uGnBY.crl
                          rsync://rpki.apnic.net/member_repository/A9173204/D23043062B4011F1BAED9A6390833773/4EnEoBiPI8haDO2gxmM6o0uGnBY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4EnEoBiPI8haDO2gxmM6o0uGnBY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:51:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173204, serialNumber=E049C4A0188F23C85A0CEDA0C6633AA34B869C16
        Validity
            Not Before: Jul 27 10:51:16 2026 GMT
            Not After : Aug  3 10:51:16 2026 GMT
        Subject: CN=6a673825-11e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:99:e4:10:1b:66:a7:dc:ae:93:5a:bf:bf:94:
                    4b:3c:bb:86:ce:9b:66:25:64:82:b8:5f:39:57:08:
                    5a:33:23:84:cd:c0:b9:96:e6:19:54:09:cf:0c:c2:
                    ec:88:ae:bb:5c:47:aa:0f:9a:16:26:0c:70:6a:0e:
                    e2:e1:c1:d7:1a:c6:46:81:03:0c:09:eb:aa:31:49:
                    a6:db:65:ca:77:9a:6d:9f:43:ec:30:02:5f:67:60:
                    8f:e3:19:0e:c1:f4:60:da:6c:0f:65:88:57:8a:91:
                    59:61:2c:fc:bb:af:2a:b7:d0:d0:13:ec:82:64:ca:
                    ae:94:f9:1c:e0:72:6a:eb:12:ef:c3:fa:1c:20:a0:
                    5a:c0:09:58:d2:61:27:84:28:ed:cc:a9:34:e5:ce:
                    42:d3:b6:d4:46:66:98:8b:3a:6a:e0:5d:7c:00:08:
                    b0:d1:6c:c0:cf:3e:c3:44:b2:ad:56:83:71:c1:06:
                    05:4f:61:08:6f:00:27:19:08:c7:4b:69:92:db:56:
                    f7:5f:e5:ff:48:a6:09:f3:dd:a8:84:ff:f7:b5:5d:
                    f4:7c:76:07:39:74:9c:71:22:7d:40:15:2f:fa:cf:
                    33:9c:44:0d:e9:b9:97:65:f1:3a:98:e3:96:b3:62:
                    84:8a:e3:5f:3d:40:db:8d:9a:46:a8:20:7a:2f:b1:
                    ec:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:FF:33:A0:52:FB:FE:08:77:E4:AB:C0:31:17:3E:99:7D:50:A9:89
            X509v3 Authority Key Identifier:
                keyid:E0:49:C4:A0:18:8F:23:C8:5A:0C:ED:A0:C6:63:3A:A3:4B:86:9C:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173204/D23043062B4011F1BAED9A6390833773/4EnEoBiPI8haDO2gxmM6o0uGnBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4EnEoBiPI8haDO2gxmM6o0uGnBY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173204/D23043062B4011F1BAED9A6390833773/4EnEoBiPI8haDO2gxmM6o0uGnBY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:b7:c4:12:48:02:e3:c8:30:76:98:3b:55:ee:92:29:0c:85:
         65:ce:3a:42:f8:d2:55:11:2b:14:33:a8:c8:b2:bc:a5:9a:af:
         1c:54:4e:38:21:9b:13:a4:26:31:50:7d:15:7d:e2:8c:35:32:
         5f:72:7d:21:9e:ba:02:7f:7a:11:e0:ca:60:aa:e0:bb:e2:0d:
         7d:42:9b:d9:a2:82:16:e5:70:57:69:15:0a:df:2e:7e:3b:d8:
         88:73:67:31:05:29:ee:40:65:6e:30:7b:ad:76:19:20:04:be:
         9d:eb:c3:48:3e:d5:34:a8:19:f1:8d:89:32:07:ce:5b:27:58:
         89:89:13:a8:e8:2c:ea:7b:ea:50:27:1e:ca:81:7a:e7:2d:96:
         e3:35:53:0e:98:1c:8a:d4:36:d5:e3:8a:90:51:59:57:df:86:
         42:c9:eb:56:11:95:ed:92:c3:bc:6f:a6:f7:79:5b:a7:f4:ef:
         5d:45:4c:b8:f6:0c:85:12:0b:1a:68:ce:14:f2:1e:ea:6a:b5:
         51:e5:5f:82:10:d1:3c:35:ad:8b:57:a6:a4:13:d2:c4:4e:0a:
         e8:3f:eb:8b:a2:b6:fb:b4:d9:ed:e1:77:d0:d6:49:bf:ae:92:
         88:98:dc:c9:7f:12:0c:8b:ad:e1:71:41:dd:61:17:cc:00:b3:
         a4:0c:14:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:30:51 2026 by rpki-client