Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft
File:                     S7U1I5SOxqyZE7LVCcHXspRtnpI.mft (raw, json)
Hash identifier:          M5H/aP/+fj/gCUHGeqInF5YtVsJQchYXfZTBbTlFc0g=
Subject key identifier:   C8:9C:90:BE:51:6C:3A:6A:30:C0:59:92:8C:8D:77:34:FD:E8:2C:20
Authority key identifier: 4B:B5:35:23:94:8E:C6:AC:99:13:B2:D5:09:C1:D7:B2:94:6D:9E:92
Certificate issuer:       /CN=A91AF431/serialNumber=4BB53523948EC6AC9913B2D509C1D7B2946D9E92
Certificate serial:       BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7U1I5SOxqyZE7LVCcHXspRtnpI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft
Manifest number:          BD
Signing time:             Mon 21 Sep 2026 06:54:30 +0000
Manifest this update:     Mon 21 Sep 2026 06:54:30 +0000
Manifest next update:     Mon 28 Sep 2026 06:54:30 +0000
Files and hashes:         1: S7U1I5SOxqyZE7LVCcHXspRtnpI.crl (hash: fnwUL+AOjti9KaYDwaL4bIW62aWwJGtv/Sqd1rITBIw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.crl
                          rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7U1I5SOxqyZE7LVCcHXspRtnpI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 06:54:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 189 (0xbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF431, serialNumber=4BB53523948EC6AC9913B2D509C1D7B2946D9E92
        Validity
            Not Before: Sep 21 06:54:30 2026 GMT
            Not After : Sep 28 06:54:30 2026 GMT
        Subject: CN=6ab0d4a6-bf9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:96:be:03:fe:44:f3:76:f6:6a:18:69:2b:f9:
                    35:b3:a0:fa:ab:ad:dd:a7:17:7b:83:97:61:09:e3:
                    bc:92:dc:58:dc:9e:06:ef:ae:fe:9f:0a:97:2a:0e:
                    3e:dd:d6:21:e0:93:52:4d:8d:05:f3:05:99:5c:fc:
                    92:4b:8d:a7:c0:b6:36:02:01:4c:96:90:c7:4b:a5:
                    4f:e3:02:76:5b:b1:c0:4d:24:3a:0f:9d:7f:02:e6:
                    21:3e:39:bd:82:8f:7c:60:bb:e3:32:a4:9a:03:f7:
                    f4:8b:3f:b7:4a:ee:11:48:51:18:a4:65:b8:51:f7:
                    e1:b8:b3:20:ff:c5:57:6b:49:88:17:a8:24:cd:c9:
                    4e:cc:03:40:5c:16:8f:64:45:a1:66:03:f7:68:7f:
                    c6:7c:e7:e6:71:58:55:53:0d:0c:70:ef:f6:ff:7f:
                    06:8e:32:81:e9:b0:62:1c:05:6e:e8:fa:ff:56:ed:
                    9f:94:a1:22:58:99:ef:a8:9d:f4:3d:75:b0:6d:61:
                    7d:a3:16:ca:6c:de:61:97:4f:0e:c7:cf:c4:80:c7:
                    4c:ea:94:e7:ff:01:44:46:65:19:f9:a3:cc:84:8e:
                    b9:da:c7:9b:cd:61:fa:11:3a:ee:f9:7e:81:07:d5:
                    e6:5b:26:27:a8:5e:1b:0a:d8:b4:52:de:a1:c3:78:
                    d3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:9C:90:BE:51:6C:3A:6A:30:C0:59:92:8C:8D:77:34:FD:E8:2C:20
            X509v3 Authority Key Identifier:
                keyid:4B:B5:35:23:94:8E:C6:AC:99:13:B2:D5:09:C1:D7:B2:94:6D:9E:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7U1I5SOxqyZE7LVCcHXspRtnpI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:40:1a:df:94:d6:e7:b5:b3:d6:56:b2:a1:1c:c7:d6:fd:ec:
         90:41:f7:48:d6:48:50:99:67:66:d0:02:bd:f3:ff:1f:b3:49:
         eb:48:3c:35:1a:5f:f6:b8:22:a8:a6:4a:5b:b7:81:62:5d:82:
         61:61:ba:73:31:f3:8c:8f:08:23:21:07:99:46:10:51:42:a0:
         79:39:7e:7c:d2:a1:cc:70:5e:a6:62:4f:24:0b:e3:84:c4:88:
         b1:12:f5:71:f3:f8:55:5b:8e:9d:e2:f3:86:3a:93:1f:f9:f4:
         59:e3:6c:a5:75:a5:c4:aa:f8:c7:96:c1:a5:3f:4d:1f:ee:ac:
         f8:6c:55:6c:e1:b7:61:52:ba:1f:e2:88:95:66:76:db:eb:e1:
         3a:ff:26:e8:a1:48:b5:d4:3b:51:a3:01:8e:3b:c1:b6:3e:e4:
         e7:f1:55:32:60:f4:ed:c5:88:dd:71:78:7d:83:1a:13:31:a7:
         75:44:a5:47:8a:1c:5d:09:81:80:88:78:e1:a2:ec:de:d7:94:
         b0:2a:e8:ad:a7:f2:40:38:f2:72:02:b4:0c:3b:84:84:9f:bb:
         cf:47:93:dd:c7:06:ec:ef:b7:f4:e9:85:00:a3:b6:ed:99:13:
         27:ec:9e:c5:1f:f3:b3:63:b5:af:bf:45:e6:0a:8c:d4:02:70:
         5a:22:51:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:52:58 2026 by rpki-client