Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A547E/BCBE4E2241DA11F19DDC8902B5833773/1OdEGcvjVoAT4bz3doRyhsGYhFo.mft
File:                     1OdEGcvjVoAT4bz3doRyhsGYhFo.mft (raw, json)
Hash identifier:          ZrLRp9qEK3hRdXT2PLCODr/rFJ3OeUtEVVdDmZASNA4=
Subject key identifier:   F8:DA:62:7C:BE:C1:FF:AA:EB:9E:50:BE:52:3E:81:92:83:92:2C:00
Authority key identifier: D4:E7:44:19:CB:E3:56:80:13:E1:BC:F7:76:84:72:86:C1:98:84:5A
Certificate issuer:       /CN=A91A547E/serialNumber=D4E74419CBE3568013E1BCF776847286C198845A
Certificate serial:       4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OdEGcvjVoAT4bz3doRyhsGYhFo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A547E/BCBE4E2241DA11F19DDC8902B5833773/1OdEGcvjVoAT4bz3doRyhsGYhFo.mft
Manifest number:          4B
Signing time:             Mon 21 Sep 2026 08:19:03 +0000
Manifest this update:     Mon 21 Sep 2026 08:19:03 +0000
Manifest next update:     Mon 28 Sep 2026 08:19:03 +0000
Files and hashes:         1: 1OdEGcvjVoAT4bz3doRyhsGYhFo.crl (hash: Dl5BkrMfe5C8sOEIyW5ktYzWqTzmVut5iTqh6A+jNrw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A547E/BCBE4E2241DA11F19DDC8902B5833773/1OdEGcvjVoAT4bz3doRyhsGYhFo.crl
                          rsync://rpki.apnic.net/member_repository/A91A547E/BCBE4E2241DA11F19DDC8902B5833773/1OdEGcvjVoAT4bz3doRyhsGYhFo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OdEGcvjVoAT4bz3doRyhsGYhFo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 08:19:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A547E, serialNumber=D4E74419CBE3568013E1BCF776847286C198845A
        Validity
            Not Before: Sep 21 08:19:03 2026 GMT
            Not After : Sep 28 08:19:03 2026 GMT
        Subject: CN=6ab0e877-4206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:45:df:57:fa:8e:5e:9b:28:fb:a2:dd:aa:c4:
                    1c:0b:c8:5f:9e:0e:ea:72:fd:fa:d4:0c:57:2f:d2:
                    a2:2d:d7:5b:d3:6d:5a:d8:c6:90:af:10:c5:86:bb:
                    43:33:a9:81:3f:54:9d:54:36:0c:9b:66:be:0a:9d:
                    0f:cd:35:f0:0c:e5:1f:59:12:c5:0b:ab:6d:90:a2:
                    13:42:ec:b6:0d:cb:e5:6c:3c:2e:9b:40:cf:45:12:
                    79:a5:23:48:58:cc:c0:41:57:b5:6f:9c:4d:23:53:
                    cd:6e:0f:9f:31:96:99:f1:dd:53:b4:fb:ca:e4:a5:
                    f9:2c:c8:dc:6a:c4:8d:87:2a:ab:a6:9d:13:97:92:
                    8b:27:b8:17:13:b1:d5:13:1e:6e:4e:1e:d0:03:65:
                    13:49:20:e0:ab:92:ce:36:e0:f6:88:16:a7:ec:12:
                    46:49:7b:5b:82:49:20:50:40:77:9e:66:bf:6b:08:
                    4c:21:6c:9c:53:08:e6:fb:b1:c6:50:e4:66:11:1d:
                    78:85:85:c5:61:5b:7e:7b:0e:fb:1e:88:b0:3f:87:
                    07:5f:3f:e4:0e:fc:9e:4c:f6:af:8a:f2:2b:e5:50:
                    51:28:b5:05:45:c9:b8:7e:25:47:0b:f3:98:fc:c7:
                    6e:72:b4:7c:15:f2:77:4a:e0:10:10:f2:6a:ba:51:
                    44:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:DA:62:7C:BE:C1:FF:AA:EB:9E:50:BE:52:3E:81:92:83:92:2C:00
            X509v3 Authority Key Identifier:
                keyid:D4:E7:44:19:CB:E3:56:80:13:E1:BC:F7:76:84:72:86:C1:98:84:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A547E/BCBE4E2241DA11F19DDC8902B5833773/1OdEGcvjVoAT4bz3doRyhsGYhFo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OdEGcvjVoAT4bz3doRyhsGYhFo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A547E/BCBE4E2241DA11F19DDC8902B5833773/1OdEGcvjVoAT4bz3doRyhsGYhFo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:bd:1f:b4:ce:38:42:51:46:1c:0c:d3:e9:81:f3:e1:23:a1:
         e0:47:d1:4b:05:f0:ef:a3:36:d1:ee:79:c3:30:37:4a:25:15:
         40:69:1d:89:97:ad:b5:6f:87:1b:5c:15:98:bb:0e:e6:8e:eb:
         84:f6:20:06:a0:36:f4:51:e3:52:2e:f4:8b:da:c9:f4:ee:d2:
         9d:54:f4:db:ec:86:d9:ff:94:03:5e:a4:32:6a:43:3d:84:9e:
         9f:75:a2:3b:4a:bf:68:02:6e:07:c9:59:7e:7f:6d:45:9d:4b:
         95:af:48:d6:7d:44:56:46:8a:ca:67:8c:7d:27:0a:6c:36:95:
         c8:69:77:d6:dc:9f:73:91:51:bc:37:73:61:17:4d:8f:94:f3:
         4f:6e:b3:ba:e2:ea:8c:84:61:2f:33:7c:bc:be:96:04:a6:6d:
         f3:cd:e5:f7:3b:23:e1:64:90:6a:07:39:d1:24:a2:1e:8f:e8:
         a4:47:8b:ca:d5:d7:fd:22:f2:3b:74:9d:65:60:51:85:15:0d:
         03:9e:81:0f:38:dd:51:a5:e2:b6:d3:3e:df:9c:d5:dc:ec:31:
         36:2c:7d:d1:80:4c:97:89:53:c0:f9:14:bd:86:13:e6:0a:74:
         51:5d:a6:e9:01:fd:6a:eb:32:8f:03:f1:dd:59:14:69:0c:c0:
         f2:e3:ef:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:07:07 2026 by rpki-client