Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
File:                     G5AiZjIh2M567rA_P1eZ8NV-phY.mft (raw, json)
Hash identifier:          zIzvIXTooZ5u1kDgyirTbfbMn82bgiVub6i+dkBhXPM=
Subject key identifier:   AF:69:1E:A5:66:26:1D:0E:67:D2:D1:30:78:B6:7D:91:C0:21:26:A6
Authority key identifier: 1B:90:22:66:32:21:D8:CE:7A:EE:B0:3F:3F:57:99:F0:D5:7E:A6:16
Certificate issuer:       /CN=A9133E16/serialNumber=1B9022663221D8CE7AEEB03F3F5799F0D57EA616
Certificate serial:       09D7
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
Manifest number:          09D7
Signing time:             Fri 04 Sep 2026 19:45:43 +0000
Manifest this update:     Fri 04 Sep 2026 19:45:43 +0000
Manifest next update:     Fri 11 Sep 2026 19:45:43 +0000
Files and hashes:         1: G5AiZjIh2M567rA_P1eZ8NV-phY.crl (hash: cty/SqnQIdiSWQHLkVfRKUUomf/6XQLKf3SQ+1wpw/s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.crl
                          rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 14:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2519 (0x9d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133E16, serialNumber=1B9022663221D8CE7AEEB03F3F5799F0D57EA616
        Validity
            Not Before: Sep  4 19:45:43 2026 GMT
            Not After : Sep 11 19:45:43 2026 GMT
        Subject: CN=6a9b1fe7-42a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5b:41:29:82:05:52:0d:a5:18:6b:f8:07:3e:
                    db:cc:a7:97:c0:0f:59:65:56:27:e6:67:f3:3c:ff:
                    20:3f:d1:29:72:3a:07:d5:e6:09:77:26:8b:50:de:
                    4d:fc:08:bc:49:5b:d5:f4:41:d1:5a:19:23:0d:08:
                    a4:22:b8:cf:b9:73:85:85:a0:9b:75:49:ae:61:ac:
                    cc:5a:6d:e4:01:b5:9d:06:3f:b3:03:8d:b4:f1:75:
                    a2:6e:1d:c7:5d:ec:55:bc:31:0e:58:c4:66:42:59:
                    f1:94:d7:fd:02:62:4e:bd:29:46:ab:45:f4:f8:5e:
                    c9:b2:26:79:87:da:3a:34:bb:5e:76:57:19:55:ba:
                    57:31:85:35:ac:ae:44:6f:e1:d0:b9:be:7e:28:74:
                    01:19:26:f6:d4:f9:09:cc:25:8f:49:72:aa:e2:f5:
                    f0:25:45:38:5a:dc:d5:27:8b:dd:90:99:56:96:6d:
                    86:8f:b5:1f:18:54:91:da:ea:2d:9f:4e:91:b3:50:
                    34:36:31:2d:0e:4a:21:ac:42:ac:d9:7f:6d:7e:f4:
                    b1:69:f0:9d:6e:6e:a1:31:0e:d6:4e:06:94:78:a7:
                    73:9a:f9:ce:e5:c9:9c:41:cc:a1:02:f7:33:a1:ad:
                    59:09:42:7e:0f:71:44:c0:5b:c9:90:66:e6:5c:2f:
                    ae:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:69:1E:A5:66:26:1D:0E:67:D2:D1:30:78:B6:7D:91:C0:21:26:A6
            X509v3 Authority Key Identifier:
                keyid:1B:90:22:66:32:21:D8:CE:7A:EE:B0:3F:3F:57:99:F0:D5:7E:A6:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:53:fd:1f:de:28:31:2e:f4:36:98:17:6f:a7:c2:6a:38:d9:
         d9:65:5b:39:2c:77:a9:7c:4f:2c:d7:e8:0f:4e:72:05:a5:6d:
         e8:3d:75:68:55:7a:81:1f:86:9b:18:1f:db:45:2c:4d:e1:cf:
         82:ce:37:66:92:49:ec:63:12:71:ca:df:f1:0a:10:96:d5:bc:
         1b:98:e9:bc:d2:ea:ab:d8:15:35:39:22:a8:e0:d2:82:7a:0f:
         c8:cc:1e:cf:55:bc:36:8b:81:8e:ab:48:73:89:63:c1:0c:e3:
         6a:0d:4d:bc:64:66:51:06:59:82:c6:b8:46:ee:a5:64:52:f9:
         52:8b:75:8a:40:b2:0b:8f:0b:2a:31:cd:26:cc:a1:c3:cd:19:
         9c:ee:41:88:4a:39:62:d4:91:8f:19:74:25:c4:7e:c7:6e:d3:
         31:dc:00:a8:4e:51:c1:b2:81:26:4d:00:a0:0f:17:b2:46:56:
         47:2a:80:99:b3:33:43:fc:b7:8a:4d:89:40:2f:b2:0d:a1:4e:
         8a:23:ae:56:6b:94:51:3e:93:f1:49:34:44:f5:f3:d9:18:f3:
         1f:41:80:6a:54:08:73:4e:7f:1f:c7:cc:27:4c:1a:1c:cf:85:
         4f:70:22:f0:ee:e2:25:d1:2e:a4:de:ac:ad:41:8e:97:64:39:
         63:ed:dc:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:07:28 2026 by rpki-client