Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125864/100016FAED1811F08E1C0602406F56BC/dzzFL61HXymuNv14yBJ3Et_SFUI.mft
File:                     dzzFL61HXymuNv14yBJ3Et_SFUI.mft (raw, json)
Hash identifier:          1OJzLmoVKwFXL7cUt8ftVWwqlUK7fee7BGgAdYozmA0=
Subject key identifier:   04:6A:B3:B4:29:18:F2:67:71:C8:EB:E2:8A:B7:90:18:AC:2D:84:45
Authority key identifier: 77:3C:C5:2F:AD:47:5F:29:AE:36:FD:78:C8:12:77:12:DF:D2:15:42
Certificate issuer:       /CN=A9125864/serialNumber=773CC52FAD475F29AE36FD78C8127712DFD21542
Certificate serial:       1F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dzzFL61HXymuNv14yBJ3Et_SFUI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125864/100016FAED1811F08E1C0602406F56BC/dzzFL61HXymuNv14yBJ3Et_SFUI.mft
Manifest number:          1F
Signing time:             Tue 03 Mar 2026 08:31:41 +0000
Manifest this update:     Tue 03 Mar 2026 08:31:40 +0000
Manifest next update:     Tue 10 Mar 2026 08:31:40 +0000
Files and hashes:         1: dzzFL61HXymuNv14yBJ3Et_SFUI.crl (hash: 8zj57vicOkbxXlsTAfNGE3Sy+R5JXL10t2VePBYpHvs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125864/100016FAED1811F08E1C0602406F56BC/dzzFL61HXymuNv14yBJ3Et_SFUI.crl
                          rsync://rpki.apnic.net/member_repository/A9125864/100016FAED1811F08E1C0602406F56BC/dzzFL61HXymuNv14yBJ3Et_SFUI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dzzFL61HXymuNv14yBJ3Et_SFUI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 08:31:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125864, serialNumber=773CC52FAD475F29AE36FD78C8127712DFD21542
        Validity
            Not Before: Mar  3 08:31:40 2026 GMT
            Not After : Mar 10 08:31:40 2026 GMT
        Subject: CN=69a69c6d-83a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:01:88:a2:a8:9d:3c:9c:6b:7f:1c:50:76:e5:
                    ca:8f:24:db:28:2e:53:a9:68:1c:e8:0e:40:e5:42:
                    3e:6f:3e:25:c6:5a:97:4b:88:d3:5e:8c:bc:f1:8d:
                    26:46:4f:30:a0:6f:50:d0:52:e4:13:86:61:ae:db:
                    72:f7:4e:74:30:eb:1e:c3:90:82:ab:7d:0c:25:b2:
                    4f:ed:86:a8:44:af:1f:a5:ca:92:af:b5:2c:7d:19:
                    dd:ec:cc:bf:ae:c1:60:17:64:05:33:32:a7:90:36:
                    dc:71:37:97:b6:da:58:28:5f:e8:f7:0c:c9:05:f9:
                    5a:b8:3d:44:35:5f:92:65:ab:a4:16:9a:03:58:2e:
                    cb:24:56:73:6b:0e:16:bb:e9:e7:01:be:06:07:8b:
                    dd:6a:d0:8b:a3:36:29:c9:a8:52:c3:72:84:8f:82:
                    8c:bd:22:8e:3f:bf:49:73:6d:e2:d6:de:56:83:a5:
                    03:cb:75:76:b2:c9:ec:17:21:ea:1c:36:49:85:49:
                    8e:71:1c:48:77:b1:db:c1:dd:78:c2:e8:ba:c7:0b:
                    5f:f1:2d:ae:96:9e:d2:0e:cc:0b:5f:0b:9c:c7:04:
                    f3:82:77:41:a0:39:83:bf:4d:e2:00:a1:5b:30:54:
                    97:ee:f4:67:23:d0:a4:94:7a:c8:58:58:a9:f9:55:
                    88:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:6A:B3:B4:29:18:F2:67:71:C8:EB:E2:8A:B7:90:18:AC:2D:84:45
            X509v3 Authority Key Identifier:
                keyid:77:3C:C5:2F:AD:47:5F:29:AE:36:FD:78:C8:12:77:12:DF:D2:15:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125864/100016FAED1811F08E1C0602406F56BC/dzzFL61HXymuNv14yBJ3Et_SFUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dzzFL61HXymuNv14yBJ3Et_SFUI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125864/100016FAED1811F08E1C0602406F56BC/dzzFL61HXymuNv14yBJ3Et_SFUI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:79:5b:b4:18:ac:ff:ce:b5:b4:8a:e0:22:d4:9e:a1:89:cf:
         8e:48:4e:da:19:1a:ca:37:ea:bf:50:bd:9e:3b:13:b9:95:79:
         0c:f4:08:b6:d9:53:24:b1:0b:53:a8:e5:5e:6b:66:81:40:e9:
         7f:59:40:7f:2f:81:6b:11:a8:af:77:a6:7d:bc:ad:ca:34:c4:
         b2:a2:2b:9f:ed:04:4e:61:28:fa:22:66:d8:50:ec:92:02:ec:
         a8:12:8a:c5:36:38:c9:5b:53:d6:da:cd:54:5a:b1:6a:af:5b:
         9e:31:89:30:14:2a:7e:0f:50:96:4a:d3:3c:77:6b:c3:4e:2e:
         83:6c:86:d5:b9:c0:a2:36:40:64:56:12:c3:2b:11:01:e4:89:
         9c:ea:5c:74:1f:e9:02:7a:f4:67:01:65:f4:61:74:49:1c:22:
         15:6e:d1:96:47:67:f0:d9:2f:4b:d2:ed:ac:3c:ad:e4:ca:45:
         db:59:2e:f6:5a:74:02:95:0b:b8:0e:f3:19:7c:35:9e:23:3d:
         73:e9:59:5b:ed:58:c5:da:12:13:ba:53:a8:55:83:e1:15:86:
         8c:dc:2d:cb:48:23:f1:10:01:a4:6d:41:d6:b8:84:aa:4c:a5:
         52:9f:3d:85:48:93:4f:c2:4b:f0:df:a2:08:60:93:ae:05:ec:
         be:f8:c7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:38:32 2026 by rpki-client