Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167352/8EB0C1EC704A11F1B350ABC268A30FBC/Z3baH1fz652mWcNicdGV5tPOXEU.mft
File:                     Z3baH1fz652mWcNicdGV5tPOXEU.mft (raw, json)
Hash identifier:          BOrjABuemp7ywBH9mg447uOBvetYzr8prNyve7Jbca8=
Subject key identifier:   ED:80:07:47:ED:3C:25:08:88:D2:4E:50:CE:D0:47:83:31:22:1E:8C
Authority key identifier: 67:76:DA:1F:57:F3:EB:9D:A6:59:C3:62:71:D1:95:E6:D3:CE:5C:45
Certificate issuer:       /CN=A9167352/serialNumber=6776DA1F57F3EB9DA659C36271D195E6D3CE5C45
Certificate serial:       1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z3baH1fz652mWcNicdGV5tPOXEU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167352/8EB0C1EC704A11F1B350ABC268A30FBC/Z3baH1fz652mWcNicdGV5tPOXEU.mft
Manifest number:          1D
Signing time:             Wed 19 Aug 2026 09:39:08 +0000
Manifest this update:     Wed 19 Aug 2026 09:39:07 +0000
Manifest next update:     Wed 26 Aug 2026 09:39:07 +0000
Files and hashes:         1: Z3baH1fz652mWcNicdGV5tPOXEU.crl (hash: ++fB3lbq8GlYdgrsZ9mPlaadd3pmuIOcbsV5UE/CQl8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167352/8EB0C1EC704A11F1B350ABC268A30FBC/Z3baH1fz652mWcNicdGV5tPOXEU.crl
                          rsync://rpki.apnic.net/member_repository/A9167352/8EB0C1EC704A11F1B350ABC268A30FBC/Z3baH1fz652mWcNicdGV5tPOXEU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z3baH1fz652mWcNicdGV5tPOXEU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:39:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167352, serialNumber=6776DA1F57F3EB9DA659C36271D195E6D3CE5C45
        Validity
            Not Before: Aug 19 09:39:07 2026 GMT
            Not After : Aug 26 09:39:07 2026 GMT
        Subject: CN=6a8579bc-fd3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0f:fc:25:26:d6:d6:71:9a:44:d2:61:af:ee:
                    51:9b:e6:18:ae:11:d1:d6:3a:07:e6:e9:b5:14:46:
                    72:8c:6b:3b:60:a1:d9:4d:1b:61:31:c5:c7:83:51:
                    43:f5:3e:90:48:a9:0c:4a:de:38:b1:77:0d:24:b9:
                    b6:d8:4b:4b:ff:7c:24:cf:8b:90:00:5d:00:51:3e:
                    75:53:d7:ae:2c:d7:0e:44:d6:0d:20:f9:d8:76:5b:
                    67:a6:f9:fb:18:b4:33:cf:ed:d0:8b:cd:05:00:61:
                    93:76:54:92:fc:78:ba:12:78:67:d5:69:17:93:96:
                    a9:72:39:4d:5d:38:d3:81:24:13:4b:a0:cf:c9:b7:
                    da:19:05:9a:a8:a4:37:2b:4c:3c:28:96:e7:a2:0f:
                    96:4a:36:50:91:37:95:3f:b9:a7:ea:05:e4:60:d9:
                    71:71:b1:49:dd:de:1e:15:8a:a1:25:52:d0:a6:85:
                    fc:89:dc:ab:06:1e:ea:fd:bc:bd:69:01:fb:11:12:
                    75:ac:80:25:db:8b:c7:c0:e9:46:f5:5f:20:d5:a5:
                    ab:a4:30:e3:91:b3:06:56:83:db:64:cf:07:73:5a:
                    0d:0a:63:61:6d:06:13:64:93:59:68:a1:fd:ed:2c:
                    ab:8f:fa:d1:92:cb:ee:f8:54:2c:28:4e:86:af:40:
                    21:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:80:07:47:ED:3C:25:08:88:D2:4E:50:CE:D0:47:83:31:22:1E:8C
            X509v3 Authority Key Identifier:
                keyid:67:76:DA:1F:57:F3:EB:9D:A6:59:C3:62:71:D1:95:E6:D3:CE:5C:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167352/8EB0C1EC704A11F1B350ABC268A30FBC/Z3baH1fz652mWcNicdGV5tPOXEU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z3baH1fz652mWcNicdGV5tPOXEU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167352/8EB0C1EC704A11F1B350ABC268A30FBC/Z3baH1fz652mWcNicdGV5tPOXEU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:3b:04:69:68:80:b8:b4:21:1e:7f:ef:83:56:dd:e3:b9:0d:
         a3:f5:28:79:25:d9:6c:75:c4:00:2a:cf:69:53:08:a2:df:10:
         21:53:f0:81:50:28:3c:6b:83:e8:47:11:ff:86:47:8f:01:25:
         52:9a:b6:a4:ed:30:26:33:ad:43:06:37:e5:93:55:14:5d:77:
         34:27:7e:27:13:6b:29:27:e6:6f:cb:2c:00:ac:c2:b4:58:a7:
         3a:85:af:88:25:87:81:f6:6c:45:f5:c3:73:a7:3c:e3:80:2c:
         2a:47:8b:b0:48:b2:3d:ba:f0:81:97:92:2b:57:48:02:ae:b6:
         d3:be:ca:60:97:fc:93:31:db:38:66:60:e0:c1:60:15:3a:7e:
         11:de:66:9f:2f:a3:dd:4f:e9:3c:5b:f7:d8:c7:99:d1:8c:50:
         1e:61:16:e8:19:f3:a7:e3:ce:f2:29:1d:1a:9c:12:f9:ee:28:
         42:8d:bc:62:ce:93:57:62:d7:d9:53:a4:68:98:ae:a9:fe:5b:
         15:26:7f:3f:29:71:91:c5:54:82:66:aa:e1:f5:0d:6d:b8:a4:
         7f:d3:0a:df:a3:7a:d9:78:34:11:0d:a4:aa:19:f1:d1:09:90:
         b6:44:22:04:df:a0:17:31:99:51:ed:ac:76:70:f0:cf:c8:09:
         19:dd:15:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:02 2026 by rpki-client