Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176DA8/9006CC30271611F1A41F8856A3833773/60Y5e044RmfgPE26UHVUDwA30bg.mft
File:                     60Y5e044RmfgPE26UHVUDwA30bg.mft (raw, json)
Hash identifier:          4erPzh0tgwcIG+T9/CtPivkqFcYCCXboQ6No+U7//LQ=
Subject key identifier:   E0:46:70:B8:95:75:41:9C:A5:38:E5:99:6A:E2:31:62:D5:BF:A7:3D
Authority key identifier: EB:46:39:7B:4E:38:46:67:E0:3C:4D:BA:50:75:54:0F:00:37:D1:B8
Certificate issuer:       /CN=A9176DA8/serialNumber=EB46397B4E384667E03C4DBA5075540F0037D1B8
Certificate serial:       0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60Y5e044RmfgPE26UHVUDwA30bg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176DA8/9006CC30271611F1A41F8856A3833773/60Y5e044RmfgPE26UHVUDwA30bg.mft
Manifest number:          0A
Signing time:             Sun 05 Apr 2026 08:30:17 +0000
Manifest this update:     Sun 05 Apr 2026 08:30:17 +0000
Manifest next update:     Sun 12 Apr 2026 08:30:17 +0000
Files and hashes:         1: 60Y5e044RmfgPE26UHVUDwA30bg.crl (hash: gldZTf6Th+utf2P1wxia+WLWXUL1G4wTUCuJOk421Qw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176DA8/9006CC30271611F1A41F8856A3833773/60Y5e044RmfgPE26UHVUDwA30bg.crl
                          rsync://rpki.apnic.net/member_repository/A9176DA8/9006CC30271611F1A41F8856A3833773/60Y5e044RmfgPE26UHVUDwA30bg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60Y5e044RmfgPE26UHVUDwA30bg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 08:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176DA8, serialNumber=EB46397B4E384667E03C4DBA5075540F0037D1B8
        Validity
            Not Before: Apr  5 08:30:17 2026 GMT
            Not After : Apr 12 08:30:17 2026 GMT
        Subject: CN=69d21d99-8dc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9a:9a:f1:1f:cf:f8:03:ce:c6:d8:9a:96:e7:
                    46:f7:c9:04:84:6c:cd:a3:64:06:79:50:39:7d:fb:
                    e5:46:f4:7c:e3:ec:7d:95:08:a3:20:a7:9f:89:46:
                    53:db:5f:98:4c:64:be:96:b5:3d:11:57:8d:72:dc:
                    eb:3f:cf:1b:26:ef:6c:b4:43:ad:54:6b:c1:73:bc:
                    ad:48:a8:e5:f3:f2:c3:83:d1:9f:9b:79:3e:ae:89:
                    93:ed:a8:5f:12:1f:ca:84:1d:c4:1f:74:f7:96:77:
                    57:42:b8:75:86:a0:52:7a:f4:9b:d9:a5:44:c2:26:
                    c7:69:ee:7e:f8:fb:8e:ad:a4:77:2c:1d:1e:e0:f8:
                    16:87:c4:49:e7:bc:1d:92:35:fe:4b:34:48:22:ea:
                    36:9f:40:69:1d:27:4e:99:e4:6a:f6:29:77:da:ca:
                    a6:96:a5:56:b0:41:ba:46:cb:3e:a0:b3:3b:87:4a:
                    a9:df:69:0f:bd:7e:cc:d0:18:c7:ae:0d:ab:9a:aa:
                    85:04:67:fd:09:e0:b4:71:1b:80:64:d9:38:16:df:
                    44:b7:4f:e4:ec:b4:0a:b9:ba:45:1c:31:5d:3d:8f:
                    55:71:07:04:ca:13:36:a2:8f:dd:4f:52:61:1f:5c:
                    21:88:5f:a6:7e:44:55:ad:66:92:fb:74:ac:50:39:
                    bb:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:46:70:B8:95:75:41:9C:A5:38:E5:99:6A:E2:31:62:D5:BF:A7:3D
            X509v3 Authority Key Identifier:
                keyid:EB:46:39:7B:4E:38:46:67:E0:3C:4D:BA:50:75:54:0F:00:37:D1:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176DA8/9006CC30271611F1A41F8856A3833773/60Y5e044RmfgPE26UHVUDwA30bg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60Y5e044RmfgPE26UHVUDwA30bg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176DA8/9006CC30271611F1A41F8856A3833773/60Y5e044RmfgPE26UHVUDwA30bg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:2d:dc:51:be:4d:4d:14:a9:8f:18:43:fd:c5:86:ea:c9:ff:
         fd:d5:06:8e:30:12:ec:23:ec:66:cf:81:8a:dd:e8:2a:e0:81:
         6b:82:b0:c7:51:38:23:df:7e:2d:91:ba:51:2d:04:13:67:04:
         fe:57:74:c5:45:0e:a9:98:fc:f0:61:4e:ea:65:b5:c4:3e:6a:
         68:1b:5f:f0:27:1b:e9:e3:b1:c4:7d:7b:1d:f5:6c:29:88:15:
         23:be:41:7c:95:d8:2f:2f:38:d5:6b:5a:24:df:68:94:99:0d:
         92:2c:81:0e:ce:99:e2:63:7b:70:87:3d:96:ff:65:0d:a3:85:
         3c:04:51:fe:9b:4b:24:06:0d:66:80:c4:61:92:fe:93:9c:bf:
         f3:7c:b7:fc:5b:b3:a8:75:98:d0:83:04:6e:c5:f3:aa:a8:d6:
         47:78:0a:42:63:ff:0f:e0:3c:79:c0:34:7b:96:92:c5:eb:e5:
         61:d7:6d:3c:91:75:0b:20:92:9c:b5:b6:29:c9:67:9a:51:93:
         a7:ef:7b:13:14:0e:4f:bf:1a:58:88:36:fc:54:33:f3:ef:37:
         6a:2a:f0:ba:88:ef:7b:a4:5d:cd:7f:0b:27:3b:f9:36:1c:31:
         db:c5:49:5b:c0:5a:3c:78:34:3a:78:0c:2c:a1:04:8b:1c:22:
         0f:7d:af:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:57:41 2026 by rpki-client