Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129FB7/5EAD56F469FB11F1813F12BD6747A888/_F10279-ZfDQvUClnA1EbIHFB0k.mft
File:                     _F10279-ZfDQvUClnA1EbIHFB0k.mft (raw, json)
Hash identifier:          oTC+ZlVoe09HIh8b5MYotPcKfB6XHgu/AN36Qv7jO34=
Subject key identifier:   F8:E6:3C:69:DA:9D:58:A1:6B:58:8C:31:37:BF:DF:C7:E9:3A:A3:1A
Authority key identifier: FC:5D:74:DB:BF:7E:65:F0:D0:BD:40:A5:9C:0D:44:6C:81:C5:07:49
Certificate issuer:       /CN=A9129FB7/serialNumber=FC5D74DBBF7E65F0D0BD40A59C0D446C81C50749
Certificate serial:       21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_F10279-ZfDQvUClnA1EbIHFB0k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129FB7/5EAD56F469FB11F1813F12BD6747A888/_F10279-ZfDQvUClnA1EbIHFB0k.mft
Manifest number:          21
Signing time:             Wed 19 Aug 2026 09:37:03 +0000
Manifest this update:     Wed 19 Aug 2026 09:37:03 +0000
Manifest next update:     Wed 26 Aug 2026 09:37:03 +0000
Files and hashes:         1: _F10279-ZfDQvUClnA1EbIHFB0k.crl (hash: anjQouC949NG9UiLmFljrm85go+gP8NG0BIPTEuLZnM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129FB7/5EAD56F469FB11F1813F12BD6747A888/_F10279-ZfDQvUClnA1EbIHFB0k.crl
                          rsync://rpki.apnic.net/member_repository/A9129FB7/5EAD56F469FB11F1813F12BD6747A888/_F10279-ZfDQvUClnA1EbIHFB0k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_F10279-ZfDQvUClnA1EbIHFB0k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129FB7, serialNumber=FC5D74DBBF7E65F0D0BD40A59C0D446C81C50749
        Validity
            Not Before: Aug 19 09:37:03 2026 GMT
            Not After : Aug 26 09:37:03 2026 GMT
        Subject: CN=6a85793f-19da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d2:5e:50:db:cd:71:d5:95:17:fb:15:f8:c1:
                    ad:a6:c9:ce:76:ed:8d:e0:ce:c7:51:cd:14:4d:91:
                    df:c3:08:b2:b3:c4:a6:f9:9f:28:46:50:7e:63:62:
                    bd:cf:5e:f1:ae:57:c4:27:03:7c:01:e9:5b:6a:65:
                    b6:63:57:bc:b9:a9:f9:96:b6:fb:ec:4a:60:82:58:
                    37:06:d6:9b:79:75:9a:20:12:48:8e:79:40:26:84:
                    f1:28:dd:a6:69:c3:5f:51:38:de:38:b3:53:ed:d4:
                    cc:2e:fb:81:ec:23:34:88:59:95:d7:c8:90:e2:72:
                    c3:cc:21:41:77:6b:e3:df:b1:90:aa:d3:01:56:c5:
                    a0:63:84:e8:b9:a9:4c:bd:f5:87:6b:7c:39:4a:99:
                    08:01:96:f5:40:b0:d6:01:8b:84:d9:69:19:ac:da:
                    8b:38:0b:62:c5:9e:97:cd:22:9f:c1:ae:23:d4:57:
                    ac:51:f2:b7:80:2e:1e:05:77:a4:ec:40:4b:11:89:
                    86:b2:f5:28:11:3c:df:c8:ea:48:47:50:ca:bb:3d:
                    c0:17:9b:ba:09:de:46:ce:35:ae:29:19:6e:8a:6a:
                    56:c8:f9:30:41:31:06:a9:32:91:1a:15:ea:e7:f6:
                    f2:d6:47:14:be:76:8b:41:5c:cd:02:ee:55:de:42:
                    97:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E6:3C:69:DA:9D:58:A1:6B:58:8C:31:37:BF:DF:C7:E9:3A:A3:1A
            X509v3 Authority Key Identifier:
                keyid:FC:5D:74:DB:BF:7E:65:F0:D0:BD:40:A5:9C:0D:44:6C:81:C5:07:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129FB7/5EAD56F469FB11F1813F12BD6747A888/_F10279-ZfDQvUClnA1EbIHFB0k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_F10279-ZfDQvUClnA1EbIHFB0k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129FB7/5EAD56F469FB11F1813F12BD6747A888/_F10279-ZfDQvUClnA1EbIHFB0k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:ec:96:e0:02:e2:79:3e:40:6a:6a:85:3c:94:ff:16:fc:a1:
         c1:9d:53:84:65:87:c5:2c:45:d3:3b:eb:0e:3a:94:2f:a2:76:
         06:c8:bc:6b:6a:8b:a4:b4:35:50:11:aa:0b:5c:83:c6:20:69:
         3b:23:cf:12:4d:f0:76:54:05:ee:d9:e9:fd:f9:01:5a:1f:e8:
         45:4c:a7:db:f8:39:af:53:33:7c:55:8c:1e:63:06:f4:92:26:
         e5:61:ae:cd:0d:ba:b6:ce:f0:af:1e:09:d1:eb:f1:a0:09:bc:
         14:35:ae:12:56:79:69:18:94:54:ad:7d:b0:0d:09:1f:0c:e2:
         06:09:4d:74:0b:99:29:a2:84:b6:5e:97:83:cf:12:8d:bd:f3:
         ab:a7:71:c2:01:d7:ec:33:f7:67:8a:af:5c:48:b3:b6:42:c5:
         ae:c1:5f:8d:8c:b6:bf:9a:df:ea:34:0f:9b:1a:80:64:6a:ac:
         24:6f:65:3f:43:d1:5a:79:df:a7:a9:48:91:47:5e:05:92:bf:
         1f:0e:78:48:db:d7:c8:cb:12:8c:a1:4d:12:c7:0e:c8:66:e5:
         91:29:b7:6c:a7:ea:1b:95:87:99:09:09:61:35:ad:30:18:e6:
         c6:bc:92:f4:d7:1c:01:36:b2:d5:11:a8:12:82:29:27:24:db:
         ae:92:9a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:41:21 2026 by rpki-client