Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9189337/4998BE9AA81611F08498AE70C4F9AE02/_WrtCj06ctaut_1HjqdiMTiBlKA.mft
File:                     _WrtCj06ctaut_1HjqdiMTiBlKA.mft (raw, json)
Hash identifier:          ABcX3XtdP5jeAe1ZARcLg+o2fTF/a28xAsozYCEOVog=
Subject key identifier:   1A:5C:38:58:5E:9C:7F:CD:73:38:A1:BB:32:05:39:46:B1:4B:B3:54
Authority key identifier: FD:6A:ED:0A:3D:3A:72:D6:AE:B7:FD:47:8E:A7:62:31:38:81:94:A0
Certificate issuer:       /CN=A9189337/serialNumber=FD6AED0A3D3A72D6AEB7FD478EA76231388194A0
Certificate serial:       B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_WrtCj06ctaut_1HjqdiMTiBlKA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189337/4998BE9AA81611F08498AE70C4F9AE02/_WrtCj06ctaut_1HjqdiMTiBlKA.mft
Manifest number:          B4
Signing time:             Sun 27 Sep 2026 07:32:41 +0000
Manifest this update:     Sun 27 Sep 2026 07:32:40 +0000
Manifest next update:     Sun 04 Oct 2026 07:32:40 +0000
Files and hashes:         1: _WrtCj06ctaut_1HjqdiMTiBlKA.crl (hash: LLB21X7Nny6Unk0MQC3zSaJpHEMSkAEkMlUrJmdyaf4=)
                          2: B4506158A8FB11F09EF52F87C4F9AE02.roa (hash: DdLLYx2lL6G3M6CO9K5PbK2Qo9NH6F9taSWfJMl1grE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189337/4998BE9AA81611F08498AE70C4F9AE02/_WrtCj06ctaut_1HjqdiMTiBlKA.crl
                          rsync://rpki.apnic.net/member_repository/A9189337/4998BE9AA81611F08498AE70C4F9AE02/_WrtCj06ctaut_1HjqdiMTiBlKA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_WrtCj06ctaut_1HjqdiMTiBlKA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 07:32:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182 (0xb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189337, serialNumber=FD6AED0A3D3A72D6AEB7FD478EA76231388194A0
        Validity
            Not Before: Sep 27 07:32:40 2026 GMT
            Not After : Oct  4 07:32:40 2026 GMT
        Subject: CN=6ab8c699-24d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a9:4f:ea:7f:4a:6e:78:96:06:cb:81:c8:9b:
                    02:f5:68:67:42:f2:f2:d6:ca:fc:e1:47:15:0d:77:
                    b7:cb:db:4e:f9:87:99:b3:ec:47:ca:a2:02:a5:49:
                    65:49:8a:e8:17:18:38:5d:f2:e6:7b:a8:6a:50:94:
                    b7:50:ff:cb:b1:68:fe:65:cf:85:f8:22:1d:e4:df:
                    dc:46:df:3c:cf:87:8b:fb:dc:30:5d:a4:4c:3e:28:
                    f3:20:c7:39:51:28:52:b4:f0:5c:73:fd:7f:40:5c:
                    ab:6e:aa:f4:91:f8:14:81:98:13:c9:cb:f1:ec:9f:
                    06:53:80:ba:4d:de:73:5b:ae:4c:31:84:f8:f8:ec:
                    3f:10:88:95:2d:90:a2:96:72:1c:9a:44:60:0a:1c:
                    a0:e4:9b:0a:d6:92:91:6e:64:a0:a5:62:5e:57:be:
                    39:92:45:f0:2c:ab:91:18:1f:55:e9:88:c5:bf:51:
                    45:82:f0:71:90:32:52:45:18:ff:c9:a8:d9:77:49:
                    a5:43:e1:25:f3:33:48:ab:41:06:d5:e5:b3:44:2c:
                    91:bc:ff:64:2f:e7:45:41:c3:78:c7:86:bf:56:a8:
                    3b:bf:77:4f:18:8c:6e:cf:97:fd:c0:67:db:a5:f2:
                    56:46:9b:e2:fe:ab:85:bb:9d:e9:98:e6:c3:89:38:
                    9b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:5C:38:58:5E:9C:7F:CD:73:38:A1:BB:32:05:39:46:B1:4B:B3:54
            X509v3 Authority Key Identifier:
                keyid:FD:6A:ED:0A:3D:3A:72:D6:AE:B7:FD:47:8E:A7:62:31:38:81:94:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189337/4998BE9AA81611F08498AE70C4F9AE02/_WrtCj06ctaut_1HjqdiMTiBlKA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_WrtCj06ctaut_1HjqdiMTiBlKA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189337/4998BE9AA81611F08498AE70C4F9AE02/_WrtCj06ctaut_1HjqdiMTiBlKA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:d8:fe:bd:98:0c:8c:01:ba:bb:5d:95:2a:83:94:61:d6:72:
         b9:7a:7c:03:80:9d:b0:f9:0d:6f:f4:0d:c1:0c:55:d9:77:00:
         67:60:0c:a9:96:53:5f:df:f4:99:f8:de:fe:23:5c:03:e6:9e:
         5d:63:1f:e3:5d:9c:76:14:29:9d:01:21:89:09:12:c5:7c:b9:
         89:32:49:16:3a:e6:f1:93:88:d5:b9:31:83:d1:d7:d8:98:9d:
         6a:2f:e5:9b:8f:8c:4e:d5:c0:ea:d1:2c:27:c3:32:8a:0d:8f:
         36:35:b7:6d:60:f1:a5:af:48:47:7a:32:71:88:5e:41:d8:b8:
         0d:c5:9d:1f:15:1c:41:62:51:ca:7e:99:80:cc:16:ba:a3:09:
         df:88:e7:39:26:e2:85:6d:65:ca:33:f8:69:33:a0:6e:eb:d1:
         9e:3f:8f:fd:77:da:00:72:9c:fc:79:4d:b0:1c:08:3c:28:e9:
         fe:69:81:f2:f7:c5:5e:f0:12:9a:e6:5e:d7:ea:a1:e6:28:8c:
         ce:58:e7:20:4d:0d:90:1a:ad:7d:3e:74:39:fc:9d:bf:85:cc:
         fa:8f:68:8a:a3:85:35:ef:b4:9f:f3:a5:14:62:85:4e:34:35:
         43:70:05:02:0b:37:48:00:4e:2a:ea:6d:24:3c:19:ae:b7:09:
         b0:ed:87:8a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODkzMzcxMTAvBgNVBAUTKEZENkFFRDBBM0QzQTcyRDZBRUI3RkQ0NzhFQTc2MjMx
Mzg4MTk0QTAwHhcNMjYwOTI3MDczMjQwWhcNMjYxMDA0MDczMjQwWjAYMRYwFAYD
VQQDEw02YWI4YzY5OS0yNGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA76lP6n9KbniWBsuByJsC9WhnQvLy1sr84UcVDXe3y9tO+YeZs+xHyqICpUll
SYroFxg4XfLme6hqUJS3UP/LsWj+Zc+F+CId5N/cRt88z4eL+9wwXaRMPijzIMc5
UShStPBcc/1/QFyrbqr0kfgUgZgTycvx7J8GU4C6Td5zW65MMYT4+Ow/EIiVLZCi
lnIcmkRgChyg5JsK1pKRbmSgpWJeV745kkXwLKuRGB9V6YjFv1FFgvBxkDJSRRj/
yajZd0mlQ+El8zNIq0EG1eWzRCyRvP9kL+dFQcN4x4a/Vqg7v3dPGIxuz5f9wGfb
pfJWRpvi/quFu53pmObDiTibsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBpcOFhe
nH/NczihuzIFOUaxS7NUMB8GA1UdIwQYMBaAFP1q7Qo9OnLWrrf9R46nYjE4gZSg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTMzNy80OTk4QkU5QUE4
MTYxMUYwODQ5OEFFNzBDNEY5QUUwMi9fV3J0Q2owNmN0YXV0XzFIanFkaU1UaUJs
S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19XcnRDajA2Y3RhdXRfMUhqcWRpTVRpQmxLQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OTMzNy80OTk4QkU5QUE4MTYxMUYwODQ5OEFFNzBDNEY5QUUwMi9fV3J0Q2owNmN0
YXV0XzFIanFkaU1UaUJsS0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmtj+vZgMjAG6u12VKoOUYdZyuXp8A4CdsPkNb/QNwQxV2XcAZ2AMqZZTX9/0
mfje/iNcA+aeXWMf412cdhQpnQEhiQkSxXy5iTJJFjrm8ZOI1bkxg9HX2Jidai/l
m4+MTtXA6tEsJ8Myig2PNjW3bWDxpa9IR3oycYheQdi4DcWdHxUcQWJRyn6ZgMwW
uqMJ34jnOSbihW1lyjP4aTOgbuvRnj+P/XfaAHKc/HlNsBwIPCjp/mmB8vfFXvAS
muZe1+qh5iiMzljnIE0NkBqtfT50Ofydv4XM+o9oiqOFNe+0n/OlFGKFTjQ1Q3AF
Ags3SABOKuptJDwZrrcJsO2Hig==
-----END CERTIFICATE-----
Generated at Tue Sep 29 02:49:52 2026 by rpki-client