Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft
File:                     Fz6pPabl71KPpzMJc4hIg92lJ-4.mft (raw, json)
Hash identifier:          O+TiXAG3wqAqb84PQ2wTH+3/K6xwNWAPUyHFXM2z2zA=
Subject key identifier:   3B:E7:82:B7:F9:CA:28:12:3C:56:26:78:E8:FB:2F:7B:EA:12:E6:78
Authority key identifier: 17:3E:A9:3D:A6:E5:EF:52:8F:A7:33:09:73:88:48:83:DD:A5:27:EE
Certificate issuer:       /CN=A9145E09/serialNumber=173EA93DA6E5EF528FA7330973884883DDA527EE
Certificate serial:       D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fz6pPabl71KPpzMJc4hIg92lJ-4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft
Manifest number:          D9
Signing time:             Thu 21 May 2026 06:44:21 +0000
Manifest this update:     Thu 21 May 2026 06:44:21 +0000
Manifest next update:     Thu 28 May 2026 06:44:21 +0000
Files and hashes:         1: Fz6pPabl71KPpzMJc4hIg92lJ-4.crl (hash: vRqmSKA0luhXNM7fpCEt3UqKrZnD09TPqRA1g690fMA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.crl
                          rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fz6pPabl71KPpzMJc4hIg92lJ-4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 06:44:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 217 (0xd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145E09, serialNumber=173EA93DA6E5EF528FA7330973884883DDA527EE
        Validity
            Not Before: May 21 06:44:21 2026 GMT
            Not After : May 28 06:44:21 2026 GMT
        Subject: CN=6a0ea9c5-b472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8c:62:0e:47:b9:38:20:cb:6a:4f:73:aa:d5:
                    09:75:6f:54:40:96:a7:f8:dc:83:52:f2:d0:f9:be:
                    0b:50:72:63:c7:64:f8:7b:f6:c3:8b:6c:75:07:ca:
                    10:fe:7d:13:ee:72:3f:13:49:5a:43:3b:f7:8c:e0:
                    b6:7c:28:27:02:b3:ed:ed:92:e6:48:c2:9e:2d:b1:
                    0f:9d:19:15:41:34:f0:47:6b:7c:88:d6:79:04:8e:
                    49:38:29:11:cd:59:91:fc:53:ad:2a:69:90:23:0f:
                    67:49:ff:de:4e:59:fa:63:1f:83:7e:ae:fb:12:d8:
                    85:c0:74:a1:a4:50:fa:84:8a:89:b8:88:44:22:b1:
                    70:7f:75:06:15:4f:24:0d:bc:e5:b3:f1:a6:0c:6b:
                    94:f9:cd:af:c3:4b:8c:8b:e9:f0:c5:34:4a:45:dc:
                    6b:c6:a6:e3:f2:1b:b9:2a:95:15:00:0f:96:4d:b5:
                    fc:66:96:cf:d0:6c:00:1a:ba:5f:e3:d4:9a:5e:bf:
                    67:0d:05:21:60:7d:da:b5:57:80:22:06:78:d9:ef:
                    cd:75:b1:da:53:92:63:7a:81:ab:e7:d3:f4:ae:f9:
                    b8:69:23:ec:41:f5:9a:a2:02:e4:62:bd:da:c4:66:
                    7b:38:f1:41:10:83:5c:a9:6e:62:59:e5:58:c3:08:
                    e6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E7:82:B7:F9:CA:28:12:3C:56:26:78:E8:FB:2F:7B:EA:12:E6:78
            X509v3 Authority Key Identifier:
                keyid:17:3E:A9:3D:A6:E5:EF:52:8F:A7:33:09:73:88:48:83:DD:A5:27:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fz6pPabl71KPpzMJc4hIg92lJ-4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E09/8F625C4E08C811F0A0D34E56C4F9AE02/Fz6pPabl71KPpzMJc4hIg92lJ-4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:c5:1e:e4:d6:f7:f5:cf:7a:af:cf:9b:fd:f1:ca:7c:f8:9a:
         db:23:6a:dc:51:f2:1a:71:39:63:33:62:f1:23:b5:fb:75:35:
         de:df:c5:4f:ed:ed:e2:11:4f:88:29:36:20:04:fb:c8:db:0c:
         e1:9b:30:3b:3e:79:42:18:0f:b6:52:70:b7:64:72:51:f8:79:
         f7:3c:77:2f:cf:23:5f:14:12:37:cb:b4:8b:8e:69:ab:de:a7:
         ab:d9:7f:a3:d3:8e:13:26:40:30:65:27:6c:c7:c3:44:1e:f6:
         38:d1:6d:cb:28:2d:c1:7d:35:49:9d:00:f5:3a:99:b3:89:7e:
         11:ca:ca:ce:22:bb:a3:69:21:ab:77:25:e6:e1:0d:0a:43:d9:
         e4:56:a6:51:54:0f:83:b8:76:55:35:d7:88:41:f0:ae:c1:fb:
         fa:d4:f8:f5:64:5f:f5:66:cc:30:39:0b:47:7a:40:7a:b3:b5:
         bd:3e:c6:1f:c4:a4:8e:95:f1:f8:05:ce:17:b6:b7:99:35:4c:
         69:62:0b:ac:53:63:40:5a:7f:61:91:04:c4:fb:95:b4:2e:e6:
         8b:64:47:19:4a:9d:db:9d:65:de:36:c4:78:42:0f:a7:bd:44:
         5c:76:76:d2:38:17:79:6f:dd:9d:52:a5:0c:b1:41:50:37:4c:
         c3:72:be:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:20:52 2026 by rpki-client