Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173204/D23043062B4011F1BAED9A6390833773/4EnEoBiPI8haDO2gxmM6o0uGnBY.mft
File:                     4EnEoBiPI8haDO2gxmM6o0uGnBY.mft (raw, json)
Hash identifier:          RnKT4nENTaRKWFijWnPjMPCM35FJnTZo/tuHogI+YCc=
Subject key identifier:   36:04:6D:A1:0F:FC:DB:2E:C2:81:52:1B:DC:B0:23:92:5C:81:88:4C
Authority key identifier: E0:49:C4:A0:18:8F:23:C8:5A:0C:ED:A0:C6:63:3A:A3:4B:86:9C:16
Certificate issuer:       /CN=A9173204/serialNumber=E049C4A0188F23C85A0CEDA0C6633AA34B869C16
Certificate serial:       06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4EnEoBiPI8haDO2gxmM6o0uGnBY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173204/D23043062B4011F1BAED9A6390833773/4EnEoBiPI8haDO2gxmM6o0uGnBY.mft
Manifest number:          06
Signing time:             Sun 05 Apr 2026 08:31:43 +0000
Manifest this update:     Sun 05 Apr 2026 08:31:43 +0000
Manifest next update:     Sun 12 Apr 2026 08:31:43 +0000
Files and hashes:         1: 4EnEoBiPI8haDO2gxmM6o0uGnBY.crl (hash: TDtBNvhoYJ1aMRL9BPaBx0vZTym9+H5HUFXX6e6ihnQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173204/D23043062B4011F1BAED9A6390833773/4EnEoBiPI8haDO2gxmM6o0uGnBY.crl
                          rsync://rpki.apnic.net/member_repository/A9173204/D23043062B4011F1BAED9A6390833773/4EnEoBiPI8haDO2gxmM6o0uGnBY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4EnEoBiPI8haDO2gxmM6o0uGnBY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 08:31:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173204, serialNumber=E049C4A0188F23C85A0CEDA0C6633AA34B869C16
        Validity
            Not Before: Apr  5 08:31:43 2026 GMT
            Not After : Apr 12 08:31:43 2026 GMT
        Subject: CN=69d21def-19cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:81:b5:eb:18:cb:7d:78:40:cc:34:c5:3a:c1:
                    b0:0d:07:ac:eb:75:5c:8a:00:7f:b9:8b:db:4e:ac:
                    f8:9f:51:37:77:3a:40:b2:7c:ac:bf:b7:f7:ad:7f:
                    5b:53:7d:76:13:9d:fd:23:18:0d:42:10:52:73:60:
                    c6:0c:4d:09:44:6c:5e:0d:56:3f:d9:64:1b:e1:e6:
                    36:2e:4a:91:28:c3:90:cf:b2:c5:6a:a7:12:73:66:
                    79:ed:f8:a0:48:ad:da:5b:7d:a5:f8:0a:cf:85:96:
                    0f:37:5b:b6:92:82:24:c9:30:f2:5d:37:33:fb:9e:
                    f3:76:68:1f:72:0a:eb:97:5c:64:51:78:a6:cd:21:
                    c7:14:1f:6a:fb:2b:03:4c:bd:bc:e4:f5:65:ab:34:
                    5f:11:ae:a4:34:38:85:57:3f:c4:ab:cd:c5:a7:43:
                    da:c7:e4:04:1d:e9:d2:10:5b:31:76:d6:99:31:36:
                    4e:60:8b:9d:a8:b7:3c:25:69:32:85:dd:b5:a5:f5:
                    d6:2f:71:fb:65:ca:1f:e0:ca:c7:5c:18:e0:cc:72:
                    46:93:55:f8:0d:a2:46:d9:91:66:04:b9:ae:31:38:
                    6c:01:bc:1d:2c:4d:29:ed:91:4b:6b:76:f0:4c:21:
                    76:8b:96:5b:24:8b:9a:96:2f:50:fd:0e:9c:d2:60:
                    46:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:04:6D:A1:0F:FC:DB:2E:C2:81:52:1B:DC:B0:23:92:5C:81:88:4C
            X509v3 Authority Key Identifier:
                keyid:E0:49:C4:A0:18:8F:23:C8:5A:0C:ED:A0:C6:63:3A:A3:4B:86:9C:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173204/D23043062B4011F1BAED9A6390833773/4EnEoBiPI8haDO2gxmM6o0uGnBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4EnEoBiPI8haDO2gxmM6o0uGnBY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173204/D23043062B4011F1BAED9A6390833773/4EnEoBiPI8haDO2gxmM6o0uGnBY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:26:a3:88:b9:bc:9b:85:ba:14:cf:a3:53:77:4d:4a:a7:7b:
         e5:19:fc:10:65:0c:27:69:e5:c3:0c:4b:e1:b9:b1:d4:d9:c9:
         ee:d4:19:a6:49:b2:dd:d6:db:8d:55:20:bc:6a:7a:95:0e:d6:
         f2:10:9c:fc:90:75:53:23:65:7a:a0:05:c1:0f:bf:cf:c2:ea:
         4e:7e:48:dd:55:2d:c7:20:40:30:89:c4:e5:5e:4c:2a:9d:da:
         99:aa:55:5a:a7:93:5a:5e:23:44:4b:ed:84:5c:3c:2c:36:46:
         27:65:9d:2d:74:2d:10:3f:20:86:b3:fd:fa:b5:df:69:76:dd:
         e5:9e:0c:19:6c:31:1d:16:c1:c9:cc:bd:ad:9c:fa:0a:26:c8:
         27:1d:00:51:a7:88:b2:5b:35:e3:d0:c6:65:3c:27:15:6e:77:
         24:db:f3:b1:8a:5d:69:e8:a4:aa:e2:15:74:49:7c:c9:f7:be:
         df:d3:58:d7:db:01:6f:5a:31:00:a8:23:d9:e0:7f:6d:e8:37:
         a1:21:df:c5:3e:b2:c4:32:e9:96:79:1c:08:f9:fc:60:ca:35:
         1d:6b:95:ab:7f:6c:a6:79:64:cc:a8:63:d4:68:23:36:80:94:
         d4:35:88:33:7b:d7:c7:5a:d9:ff:d8:16:52:75:21:0e:0c:8e:
         73:ec:64:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:38:16 2026 by rpki-client