Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/0D9CE5F244AA11F1AA4D012E99EE528E/_KtbpyYSYFeOSNmqwBIRqzpaIwk.mft
File:                     _KtbpyYSYFeOSNmqwBIRqzpaIwk.mft (raw, json)
Hash identifier:          Gexf2Iwa1g2gtrQyTOjve9Q4G/mN/o1V2C4HCY55VVM=
Subject key identifier:   4B:AC:05:35:0F:D0:CB:2D:28:8B:38:86:99:A0:BC:8E:58:49:D0:EA
Authority key identifier: FC:AB:5B:A7:26:12:60:57:8E:48:D9:AA:C0:12:11:AB:3A:5A:23:09
Certificate issuer:       /CN=A9186214/serialNumber=FCAB5BA7261260578E48D9AAC01211AB3A5A2309
Certificate serial:       37
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/_KtbpyYSYFeOSNmqwBIRqzpaIwk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/0D9CE5F244AA11F1AA4D012E99EE528E/_KtbpyYSYFeOSNmqwBIRqzpaIwk.mft
Manifest number:          37
Signing time:             Tue 28 Jul 2026 15:39:24 +0000
Manifest this update:     Tue 28 Jul 2026 15:39:23 +0000
Manifest next update:     Tue 04 Aug 2026 15:39:23 +0000
Files and hashes:         1: _KtbpyYSYFeOSNmqwBIRqzpaIwk.crl (hash: YixlWHGlX1m9D3nGEw3l/iv/RjeGBCr9TOvFSW8f/Mw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/0D9CE5F244AA11F1AA4D012E99EE528E/_KtbpyYSYFeOSNmqwBIRqzpaIwk.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/0D9CE5F244AA11F1AA4D012E99EE528E/_KtbpyYSYFeOSNmqwBIRqzpaIwk.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/_KtbpyYSYFeOSNmqwBIRqzpaIwk.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:39:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=FCAB5BA7261260578E48D9AAC01211AB3A5A2309
        Validity
            Not Before: Jul 28 15:39:23 2026 GMT
            Not After : Aug  4 15:39:23 2026 GMT
        Subject: CN=6a68cd2c-a9b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ed:4a:04:4e:df:d9:d9:eb:71:37:33:c1:96:
                    96:9b:3b:2e:43:3c:62:24:97:46:57:fb:76:b9:75:
                    92:20:03:3d:97:2f:cd:8f:c4:7a:95:be:69:03:01:
                    a8:3e:7e:2b:53:ba:7f:f2:fd:e9:d7:61:5f:9a:62:
                    c0:c7:2c:96:df:b7:ff:dd:cc:b7:31:b5:44:d3:b8:
                    da:62:22:be:2f:f0:17:09:b9:ac:bf:a6:14:49:7b:
                    00:c2:b7:6b:36:74:b1:a8:f2:87:ff:11:be:36:b9:
                    ab:55:72:bb:6b:f7:6f:d8:4f:b7:2d:c0:99:0d:c8:
                    60:b1:5a:9b:9f:10:3b:ca:86:e2:3f:7e:4b:0e:79:
                    ec:13:a4:e2:3e:8f:9c:f8:d1:ff:19:66:db:f8:13:
                    e4:17:cc:91:b4:0b:23:93:3d:d1:ce:42:c4:82:9e:
                    7b:8f:dd:41:a1:96:6e:b6:ac:f5:f6:e1:02:d7:e2:
                    90:f3:c4:f2:12:49:c7:76:88:68:0b:b0:65:ae:cb:
                    7b:41:1b:74:4b:b6:87:97:20:c4:ef:38:cc:6e:1b:
                    18:45:96:48:ac:1b:9f:35:7a:19:7b:c7:8b:4b:ca:
                    06:6f:42:01:3a:3d:38:f2:3e:27:5e:b1:9d:f4:f6:
                    36:c9:bb:cf:a4:ab:c5:ab:1c:7f:ef:cd:c1:f9:23:
                    cf:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:AC:05:35:0F:D0:CB:2D:28:8B:38:86:99:A0:BC:8E:58:49:D0:EA
            X509v3 Authority Key Identifier:
                keyid:FC:AB:5B:A7:26:12:60:57:8E:48:D9:AA:C0:12:11:AB:3A:5A:23:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/0D9CE5F244AA11F1AA4D012E99EE528E/_KtbpyYSYFeOSNmqwBIRqzpaIwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/_KtbpyYSYFeOSNmqwBIRqzpaIwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/0D9CE5F244AA11F1AA4D012E99EE528E/_KtbpyYSYFeOSNmqwBIRqzpaIwk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:b7:51:f8:19:07:18:39:71:a8:8d:43:2b:fc:fa:4f:a1:d9:
         36:46:8e:64:f3:b8:35:7f:89:66:25:08:d8:2b:31:0e:e8:29:
         a2:37:06:7b:e0:43:10:9c:2d:6d:26:56:37:e1:71:e6:fc:1d:
         fe:ee:88:d4:fd:75:08:32:e4:ef:8a:53:9b:4e:17:e0:1a:23:
         d0:b6:ad:ca:b5:b7:4f:16:bb:19:43:85:9d:a1:c9:08:ab:af:
         28:b0:25:72:7a:85:84:4b:28:46:77:16:8b:ac:26:ea:63:2e:
         33:ed:62:31:ab:e8:9a:f9:c8:83:30:cd:ef:14:5c:16:10:0a:
         55:7c:21:e3:b3:04:2f:23:8c:63:46:12:29:77:3d:54:ea:29:
         4f:cc:a2:8b:94:7b:40:29:c3:64:e7:58:d9:f1:46:cd:2d:fa:
         89:8e:b3:97:b9:e9:65:e0:ff:23:79:90:e7:f2:ba:0f:29:13:
         c3:8f:e2:78:9e:f6:31:4e:d2:36:ac:46:96:48:76:cb:99:84:
         70:f3:52:26:45:04:40:c8:9d:0d:df:45:40:1f:27:18:b8:82:
         80:8f:0b:0c:84:69:6e:ad:d0:2f:f5:1c:c7:e8:5c:8e:10:10:
         7f:9d:84:0a:56:f4:3f:2b:43:68:25:78:2d:e3:4f:ce:2d:ad:
         84:54:52:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:40:38 2026 by rpki-client