Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft
File:                     SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft (raw, json)
Hash identifier:          SSLiBbCdycFGWo09k3g457F8VHI4e6xr6zFzJ4yAcyg=
Subject key identifier:   7B:9F:47:4A:F6:EE:B8:2B:5E:B2:D4:A0:B7:5B:78:4A:ED:57:82:32
Authority key identifier: 48:0B:CD:9E:EA:88:F0:A6:DA:17:DF:98:43:B9:BA:6F:59:C2:7E:9E
Certificate issuer:       /CN=A918387F/serialNumber=480BCD9EEA88F0A6DA17DF9843B9BA6F59C27E9E
Certificate serial:       0729
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft
Manifest number:          0729
Signing time:             Sun 20 Sep 2026 21:52:06 +0000
Manifest this update:     Sun 20 Sep 2026 21:52:06 +0000
Manifest next update:     Sun 27 Sep 2026 21:52:06 +0000
Files and hashes:         1: SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl (hash: cf7k/X1hvn09R44d1fHURWyN+gWmp1SVudorzxOAxoY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl
                          rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 21:52:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1833 (0x729)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918387F, serialNumber=480BCD9EEA88F0A6DA17DF9843B9BA6F59C27E9E
        Validity
            Not Before: Sep 20 21:52:06 2026 GMT
            Not After : Sep 27 21:52:06 2026 GMT
        Subject: CN=6ab05586-2136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9a:c2:c0:c2:a3:a6:17:8e:0d:06:ae:47:61:
                    31:e7:37:97:40:e8:b4:54:50:70:33:86:dc:e2:b3:
                    dd:3c:95:db:34:a7:ea:e6:05:b1:4e:e5:12:a1:91:
                    35:b1:5f:a4:de:4c:ed:ec:80:6c:51:ae:9f:bf:2b:
                    97:a5:21:a7:d8:db:36:61:b9:ed:2a:d1:d8:b9:53:
                    0c:28:06:2e:cb:27:f5:59:69:7f:7e:e9:cc:96:b5:
                    c6:55:d7:54:b6:98:bc:27:1f:63:52:17:cc:ea:f5:
                    ca:a0:ce:6d:d4:09:dc:ea:c4:12:ca:17:a2:da:83:
                    51:d4:d3:96:70:00:27:f7:36:b6:e5:6c:3b:20:04:
                    17:95:df:fc:10:14:ad:e6:78:f4:af:19:b1:a1:b0:
                    09:2c:72:31:ca:99:b1:84:6e:7f:d9:42:6e:af:e8:
                    59:4e:aa:b2:b7:dc:07:ef:5f:88:19:68:b0:96:58:
                    90:5a:38:e0:e1:28:96:5b:94:00:76:6c:ef:48:06:
                    aa:38:06:ec:4b:92:7f:d2:5d:08:7a:03:e4:91:15:
                    78:33:02:e2:33:71:01:51:22:cd:f1:47:11:a0:03:
                    a3:f0:94:7b:d3:9d:8e:f7:14:44:b7:10:c2:e0:bb:
                    f4:c5:7a:0e:23:1d:85:fa:47:6c:55:2a:52:46:05:
                    14:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:9F:47:4A:F6:EE:B8:2B:5E:B2:D4:A0:B7:5B:78:4A:ED:57:82:32
            X509v3 Authority Key Identifier:
                keyid:48:0B:CD:9E:EA:88:F0:A6:DA:17:DF:98:43:B9:BA:6F:59:C2:7E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:ff:e9:6d:68:88:86:cc:48:22:f1:2e:a3:83:17:d7:aa:d9:
         30:2f:df:54:c5:12:12:b1:c1:d7:09:f9:3c:32:74:9e:86:50:
         26:3a:88:0f:4d:48:35:3f:80:85:47:1f:bc:42:fa:cf:d6:f8:
         31:35:1f:fd:69:7f:c3:44:d2:92:52:5a:16:a9:0d:c5:bc:39:
         6f:b0:35:59:5f:a3:53:7a:7a:7a:09:4d:77:e6:fe:7e:0c:65:
         3c:fb:95:b6:a1:de:ba:05:4c:48:b5:da:6d:4b:37:bd:77:94:
         ca:45:94:4b:98:11:38:d2:ef:50:a9:0b:00:2a:b7:fe:2a:56:
         c0:3d:98:9b:12:31:e2:8b:ec:70:f1:97:c2:21:e5:e7:76:ac:
         39:67:12:99:99:4e:63:e4:5e:38:4e:20:bd:b0:a8:ac:45:2c:
         bc:04:5b:25:38:b6:9f:0c:d1:31:1e:2c:d3:79:d4:78:49:28:
         07:90:0e:95:d0:37:57:d2:6c:4d:0a:9a:d5:60:66:ed:73:47:
         ba:60:51:cd:00:8a:8b:97:2e:d3:03:3d:b1:10:77:b9:ec:72:
         58:c1:ad:d4:52:ca:e0:e3:dd:b7:3b:78:0c:d3:9c:29:ac:d1:
         83:0c:1b:7b:c5:9d:58:dd:cb:a4:8b:cb:87:46:23:fe:16:7e:
         1c:9f:db:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:29:55 2026 by rpki-client