Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.mft
File:                     STXJCZ1YAoESreyiiRQ1_MWPuiw.mft (raw, json)
Hash identifier:          sHu0TqaXKfTOsOdDD7j2ziopp24CifSZLJdb6iFoDUA=
Subject key identifier:   4D:1D:54:A1:26:57:4C:10:E7:76:18:A0:A4:E1:77:89:9A:49:F3:01
Authority key identifier: 49:35:C9:09:9D:58:02:81:12:AD:EC:A2:89:14:35:FC:C5:8F:BA:2C
Certificate issuer:       /CN=A9142E1E/serialNumber=4935C9099D58028112ADECA2891435FCC58FBA2C
Certificate serial:       0160
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/STXJCZ1YAoESreyiiRQ1_MWPuiw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.mft
Manifest number:          0160
Signing time:             Wed 19 Aug 2026 05:36:41 +0000
Manifest this update:     Wed 19 Aug 2026 05:36:40 +0000
Manifest next update:     Wed 26 Aug 2026 05:36:40 +0000
Files and hashes:         1: STXJCZ1YAoESreyiiRQ1_MWPuiw.crl (hash: w60W2zuV1mNvFwp7qcxr3g5qSOAUn7D9VFRtxx95CJg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.crl
                          rsync://rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/STXJCZ1YAoESreyiiRQ1_MWPuiw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 05:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 352 (0x160)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142E1E, serialNumber=4935C9099D58028112ADECA2891435FCC58FBA2C
        Validity
            Not Before: Aug 19 05:36:40 2026 GMT
            Not After : Aug 26 05:36:40 2026 GMT
        Subject: CN=6a8540e9-2a5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d3:08:cc:1a:e0:46:bd:e5:95:14:9b:5b:97:
                    0e:70:2a:77:27:f7:80:79:5b:bf:c0:b1:d8:86:6b:
                    15:9b:50:5d:d6:15:24:22:6f:33:51:08:ba:93:e3:
                    38:19:81:b5:22:dc:41:33:76:e4:d5:32:bf:24:bf:
                    f6:f2:e4:27:7a:cf:dd:57:65:fd:12:ab:37:ee:da:
                    39:c2:f5:bd:10:90:ba:7c:4f:7e:02:ba:4e:99:fe:
                    5c:af:c3:4b:4e:64:ba:4c:42:7b:d7:1a:3e:06:01:
                    4d:da:d7:df:be:8d:d7:4c:30:45:36:e0:6e:b7:f2:
                    19:a8:bd:99:30:3f:c2:c9:91:a3:33:05:76:6a:9a:
                    64:30:ec:b7:d5:cc:45:b7:1d:b8:16:02:b1:a1:8b:
                    3e:54:30:e5:05:9b:45:f0:6f:11:9e:94:0f:d4:b6:
                    5a:ee:2e:0e:81:8e:5b:08:01:6f:7b:4c:cf:11:fe:
                    2e:8c:88:86:c2:d6:18:69:10:f2:6a:9c:f0:de:14:
                    12:32:24:de:ba:6f:e0:21:39:7c:f2:d2:c7:36:ec:
                    66:d0:4d:6e:f0:55:5e:50:0b:8e:3e:2d:72:d3:4d:
                    ce:d7:73:94:40:e1:90:6a:49:9e:41:69:fb:b2:59:
                    82:35:df:7b:42:52:a4:30:3c:6e:a4:a1:fc:30:80:
                    b8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:1D:54:A1:26:57:4C:10:E7:76:18:A0:A4:E1:77:89:9A:49:F3:01
            X509v3 Authority Key Identifier:
                keyid:49:35:C9:09:9D:58:02:81:12:AD:EC:A2:89:14:35:FC:C5:8F:BA:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/STXJCZ1YAoESreyiiRQ1_MWPuiw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:13:cc:94:64:be:9e:cd:1c:a4:8f:e2:34:1b:9e:43:34:eb:
         41:12:f6:13:8b:70:e5:ee:be:b2:e6:9a:7b:a3:82:01:03:5a:
         72:95:30:31:9b:3c:16:a3:47:bd:82:2a:b2:b1:db:7e:63:3e:
         e7:4d:93:20:dd:1f:79:91:e2:24:66:af:e6:58:0a:fb:96:a8:
         01:96:d4:3f:b0:b6:df:75:5b:4e:57:ae:3c:48:3d:0b:ec:94:
         bb:8b:d2:26:d1:f5:db:f9:e5:f0:f2:8b:cb:79:ad:a5:eb:ab:
         af:50:4d:69:2b:21:43:6b:ea:97:fb:da:fb:e6:fd:de:68:21:
         9c:72:58:8b:16:ef:94:d3:50:e0:ee:7e:7a:8c:59:0e:a2:53:
         cf:31:f5:47:a6:b7:f9:94:37:01:f1:c7:5a:62:56:ad:e7:ee:
         16:68:9c:bd:cb:59:88:4b:41:34:62:cc:07:73:e8:c6:a6:94:
         5a:7b:6b:e2:bf:32:00:77:44:23:0a:03:0b:82:21:5c:ca:b1:
         71:82:26:79:4a:b1:1b:90:c1:ea:8f:cb:33:31:75:23:5b:40:
         6c:d9:d7:fb:11:17:2f:9a:5c:ac:0c:04:f6:d2:09:6e:21:15:
         58:16:17:f2:34:18:90:f3:28:ae:16:06:4c:8b:0b:16:f8:52:
         34:f5:e9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:48:21 2026 by rpki-client