Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft
File:                     mFpmWpz7T1ygDsqL_rgGML9PSBY.mft (raw, json)
Hash identifier:          kdJx8P8G1l+rfaIU0yUhC6VUZolaAKdk38HyGHYxBi0=
Subject key identifier:   E9:BC:8A:A0:45:FD:50:23:7C:59:A7:6D:C4:21:C9:0B:EF:65:DC:B6
Authority key identifier: 98:5A:66:5A:9C:FB:4F:5C:A0:0E:CA:8B:FE:B8:06:30:BF:4F:48:16
Certificate issuer:       /CN=A91E6D5D/serialNumber=985A665A9CFB4F5CA00ECA8BFEB80630BF4F4816
Certificate serial:       2630
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft
Manifest number:          A321
Signing time:             Sun 20 Sep 2026 14:29:50 +0000
Manifest this update:     Sun 20 Sep 2026 14:29:50 +0000
Manifest next update:     Sun 27 Sep 2026 14:29:50 +0000
Files and hashes:         1: mFpmWpz7T1ygDsqL_rgGML9PSBY.crl (hash: hmb+IpA8H2l8C8P2AIYECNq1/gPhB0x5O2Yw1kQ/x/E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.crl
                          rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 14:29:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9776 (0x2630)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6D5D, serialNumber=985A665A9CFB4F5CA00ECA8BFEB80630BF4F4816
        Validity
            Not Before: Sep 20 14:29:50 2026 GMT
            Not After : Sep 27 14:29:50 2026 GMT
        Subject: CN=6aafedde-cc1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:79:4a:f2:f9:cd:eb:b0:51:a2:a1:3f:c9:3a:
                    e9:5c:f9:de:4f:b8:79:00:a6:11:84:9d:73:f8:68:
                    da:10:53:2d:16:bb:11:9d:58:e5:a5:35:17:42:4c:
                    52:1b:7c:2f:46:1e:70:e5:e2:7c:21:87:4c:15:03:
                    ef:c5:32:4f:c9:a9:42:b2:20:cd:70:51:d1:a8:ec:
                    7f:08:30:4f:5d:b7:fa:7d:64:81:30:fa:fa:88:cb:
                    da:2c:05:e6:b1:01:f1:b7:ba:72:ac:a6:fe:91:50:
                    e5:81:36:ed:eb:16:32:e9:b0:2e:b8:cb:da:b2:84:
                    2a:cb:66:1e:b1:f5:fb:f6:54:1e:d7:75:84:79:ab:
                    04:94:d5:a1:c1:28:2d:65:98:e8:d4:7a:75:3f:1c:
                    6e:7d:15:e1:ec:af:95:79:dc:97:f7:c7:7d:de:54:
                    52:ee:94:22:4f:fc:5d:95:5c:65:65:d5:b9:c5:a0:
                    38:64:cf:37:7a:74:11:79:a8:36:7b:fb:da:3e:a3:
                    8e:5f:d1:24:62:0a:07:58:e5:15:07:7b:40:11:17:
                    8b:b9:ec:66:b4:0b:79:c4:db:a0:a2:d0:db:52:46:
                    dc:f9:9d:92:c5:d7:8a:c5:47:20:73:d6:72:c9:d7:
                    eb:4a:78:0d:d2:24:4e:00:c5:bd:01:fd:a2:96:7b:
                    60:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BC:8A:A0:45:FD:50:23:7C:59:A7:6D:C4:21:C9:0B:EF:65:DC:B6
            X509v3 Authority Key Identifier:
                keyid:98:5A:66:5A:9C:FB:4F:5C:A0:0E:CA:8B:FE:B8:06:30:BF:4F:48:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         f5:85:8b:61:cd:40:b4:04:c3:46:ce:76:6b:bb:4b:82:69:fd:
         43:32:39:6f:8b:0b:ec:4c:be:87:dc:2a:0a:9e:c2:e9:4d:c6:
         0b:06:c2:99:e0:0a:6c:8f:2d:1c:39:d3:99:2e:0b:18:22:3d:
         cd:20:98:47:b7:99:d8:e6:82:49:47:cc:0c:9c:cb:61:ef:e8:
         c1:d4:b8:10:6d:a0:4b:90:43:d5:a4:cd:f6:4e:0d:2f:00:e3:
         70:c6:3a:1d:72:cc:be:e6:94:38:f5:e5:a0:1a:01:47:ba:1f:
         5d:08:3d:77:37:ee:f6:c9:02:7c:7f:ec:9f:3a:19:e2:c6:33:
         49:07:1c:1a:aa:e0:c7:cc:91:71:17:6b:b2:67:a6:f0:fc:c7:
         19:7f:68:ff:52:57:07:18:4e:cd:15:0b:62:b5:72:24:df:a9:
         14:61:7f:02:b7:16:23:8c:67:75:13:94:01:65:f1:9d:92:9b:
         01:d2:46:a7:3b:d8:bd:87:8a:7c:02:51:1f:01:08:23:c3:43:
         8b:46:04:bb:71:75:bc:25:22:cc:b7:cf:4e:33:b6:62:10:60:
         8a:22:60:a5:21:39:0c:d4:cb:41:90:9d:97:6a:41:62:89:50:
         89:a8:6c:b8:92:96:96:53:c2:05:37:d3:26:bb:79:da:44:fd:
         8a:c3:3a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:58:16 2026 by rpki-client