Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft
File:                     4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft (raw, json)
Hash identifier:          EWcOQEDX5uieHYYWmrakNwPcxqJtTwssgOrOU0j3MRM=
Subject key identifier:   62:B1:08:41:FE:BE:AA:42:AB:D2:D6:DE:59:98:77:D8:16:FE:26:17
Authority key identifier: E1:C8:27:C3:48:97:45:E3:56:E9:0E:8B:61:A3:F4:47:D1:D1:53:11
Certificate issuer:       /CN=A9174FD4/serialNumber=E1C827C3489745E356E90E8B61A3F447D1D15311
Certificate serial:       09D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft
Manifest number:          09D0
Signing time:             Thu 16 Apr 2026 19:47:48 +0000
Manifest this update:     Thu 16 Apr 2026 19:47:48 +0000
Manifest next update:     Thu 23 Apr 2026 19:47:48 +0000
Files and hashes:         1: 4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl (hash: 4Rntsn4Q9x8PqxU/xO4LD9eN4yM3u15JZ7BHkbNiaEM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl
                          rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:47:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2512 (0x9d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174FD4, serialNumber=E1C827C3489745E356E90E8B61A3F447D1D15311
        Validity
            Not Before: Apr 16 19:47:48 2026 GMT
            Not After : Apr 23 19:47:48 2026 GMT
        Subject: CN=69e13ce4-6adf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c4:c3:8c:19:53:b1:31:2e:9b:9a:26:8f:69:
                    a0:06:4e:21:47:8f:57:0f:7e:65:c3:cb:92:ae:d7:
                    c7:f3:cb:ee:5f:e9:b4:f6:25:d1:5f:55:db:81:c5:
                    a5:5a:e1:ee:d0:ec:05:d6:81:41:75:5c:23:b1:35:
                    00:d3:74:4d:87:ea:dd:50:96:fd:72:60:c7:23:9e:
                    83:6c:44:18:01:bf:da:e3:1d:ba:a0:80:69:d3:1f:
                    14:71:9c:af:ca:b7:b1:59:c8:51:8d:a3:4b:c3:a0:
                    74:b3:17:7f:9d:6f:bb:03:f7:1b:36:fe:43:b3:b5:
                    70:60:a3:87:99:8f:cb:8e:1a:c8:86:ff:06:de:15:
                    aa:47:f0:01:21:fc:a6:f3:b6:20:28:a2:58:7e:d5:
                    c4:e0:3d:8f:43:9d:de:ff:6d:ce:79:9a:4a:0d:3f:
                    ed:13:b4:91:1a:8d:73:c2:69:2d:fa:98:f6:a5:21:
                    9a:f7:c8:69:42:80:85:57:90:0f:30:76:02:be:1d:
                    48:83:91:25:14:37:08:74:45:90:cc:14:46:11:64:
                    0f:ac:2a:d0:0f:d9:58:da:3a:78:11:4c:d9:85:f7:
                    a0:e1:ae:0e:5e:36:4e:53:dc:f4:9b:99:56:2f:92:
                    c7:9c:99:9e:2f:8d:fd:44:2c:45:8f:49:f7:f6:e4:
                    38:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B1:08:41:FE:BE:AA:42:AB:D2:D6:DE:59:98:77:D8:16:FE:26:17
            X509v3 Authority Key Identifier:
                keyid:E1:C8:27:C3:48:97:45:E3:56:E9:0E:8B:61:A3:F4:47:D1:D1:53:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:e3:f7:ed:3a:13:65:93:3f:6b:dd:d2:88:41:91:de:82:bc:
         fd:08:4b:9f:39:9d:bc:1f:03:9b:d5:77:3e:c9:20:f4:0b:58:
         22:13:58:4f:5c:c0:64:a1:0c:64:aa:ed:25:16:5c:fb:58:55:
         d2:e1:f1:f3:f5:02:2b:fc:aa:08:38:21:d6:32:16:eb:4a:d0:
         90:11:87:65:ac:8f:0c:3f:ed:bb:30:59:41:9f:61:59:83:84:
         d9:4d:4c:b4:e5:b5:17:52:11:9b:ce:a8:9a:9a:e2:a4:c6:b4:
         e0:d5:74:fb:79:d1:56:5f:cb:c7:00:03:0e:13:6e:2f:1a:7f:
         6a:b3:b3:89:1d:0a:e9:7e:c2:fb:ad:8a:78:9a:a6:b5:f6:2a:
         bb:17:4a:a2:0e:29:37:9c:66:32:ef:34:26:b3:9a:07:9f:8b:
         0d:af:34:55:b6:67:65:43:02:67:68:ea:3a:1a:e0:c4:32:0d:
         2e:fd:97:85:4d:af:29:12:0c:f8:5b:2a:f2:b4:19:62:02:7d:
         5f:40:e7:f0:f7:92:91:2c:ff:7f:44:04:98:1a:76:4c:14:ee:
         af:1c:a7:83:32:03:40:4f:81:f0:2f:ae:ec:29:ac:83:bf:74:
         a9:13:27:3d:0a:74:4b:cc:cb:00:ac:dd:68:b2:34:e0:8c:50:
         a2:ee:29:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:51:37 2026 by rpki-client