Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.mft
File:                     sc2DuJnOYCmsikIu278VgzU5HQg.mft (raw, json)
Hash identifier:          uHCisqcfQXvjas1BmXTNoZPwdowZfoPTQoB7CEeNKy8=
Subject key identifier:   E9:1D:83:57:72:12:6D:AB:38:92:6F:BE:CF:10:CA:A9:61:B3:D4:A3
Authority key identifier: B1:CD:83:B8:99:CE:60:29:AC:8A:42:2E:DB:BF:15:83:35:39:1D:08
Certificate issuer:       /CN=A9168497/serialNumber=B1CD83B899CE6029AC8A422EDBBF158335391D08
Certificate serial:       63
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/sc2DuJnOYCmsikIu278VgzU5HQg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.mft
Manifest number:          63
Signing time:             Tue 21 Jul 2026 09:53:13 +0000
Manifest this update:     Tue 21 Jul 2026 09:53:12 +0000
Manifest next update:     Tue 28 Jul 2026 09:53:12 +0000
Files and hashes:         1: sc2DuJnOYCmsikIu278VgzU5HQg.crl (hash: Sd7dyzwMkgIAxJxSmy5UdFayi57Z8ILSOqVzsqljYVg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.crl
                          rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/sc2DuJnOYCmsikIu278VgzU5HQg.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 09:53:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168497, serialNumber=B1CD83B899CE6029AC8A422EDBBF158335391D08
        Validity
            Not Before: Jul 21 09:53:12 2026 GMT
            Not After : Jul 28 09:53:12 2026 GMT
        Subject: CN=6a5f4188-f1d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d4:61:3d:88:1f:80:83:e6:0b:08:49:91:7c:
                    78:85:8c:a2:bb:b2:1d:96:44:0e:e8:41:0d:26:4e:
                    f0:f0:7f:28:2d:bd:8a:a5:8c:d8:ee:79:b7:df:ed:
                    84:b2:36:d5:11:d1:1e:6e:42:9a:3a:f7:22:7b:1d:
                    cf:d7:1e:8f:5d:29:75:a4:5e:56:4c:0a:9e:d2:2c:
                    11:c1:cf:11:32:f8:34:f8:36:ee:02:f4:5d:98:8b:
                    c4:93:a0:1e:cd:27:09:b0:81:55:da:b8:d0:c7:09:
                    18:7c:b6:1a:d7:67:94:ea:55:20:6e:1b:ab:f1:5c:
                    a5:0d:a0:95:0d:ed:03:6e:93:30:f9:79:51:5a:b1:
                    31:0b:a1:7d:83:a9:f0:dc:8c:f9:fd:2e:38:f1:31:
                    5f:da:81:87:e3:78:6a:6e:a0:bb:e1:74:f6:90:84:
                    d5:54:3e:8e:e7:af:3d:99:49:f1:3c:19:98:f1:84:
                    75:e7:78:1d:a5:19:85:1b:48:fa:d9:3b:48:db:4e:
                    7f:36:94:0d:cd:04:08:0e:25:a1:98:61:33:e9:af:
                    1c:5e:fb:0e:c7:48:d5:31:07:66:79:ab:0a:3c:18:
                    98:3d:16:02:4f:ee:ff:d8:71:30:aa:f9:53:b4:14:
                    48:24:6e:e2:dd:23:b6:31:38:7f:06:63:75:c1:b7:
                    ad:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:1D:83:57:72:12:6D:AB:38:92:6F:BE:CF:10:CA:A9:61:B3:D4:A3
            X509v3 Authority Key Identifier:
                keyid:B1:CD:83:B8:99:CE:60:29:AC:8A:42:2E:DB:BF:15:83:35:39:1D:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/sc2DuJnOYCmsikIu278VgzU5HQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168497/0332BC64F13411F0BED1F870536F56BC/sc2DuJnOYCmsikIu278VgzU5HQg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:ac:7f:4d:ae:8b:97:10:ff:8f:58:90:31:21:9b:2f:7e:03:
         59:c4:c6:20:f1:54:3a:8d:ef:16:eb:90:a0:be:68:bb:7b:38:
         72:96:af:1d:37:0e:8d:5c:58:73:b9:7f:90:47:69:68:3e:58:
         ac:a6:b0:ad:f8:38:57:02:4f:af:2e:dd:d2:20:03:f6:d7:27:
         ac:cc:42:7f:ac:4c:51:c3:df:7b:4f:e8:17:ab:49:79:de:25:
         d2:43:59:45:4f:45:93:20:2b:7d:69:74:37:7d:92:f7:88:cd:
         2c:8b:f0:ef:79:0e:61:d2:87:15:b0:9a:d0:ab:9a:10:18:5e:
         5c:42:a8:20:8b:99:fe:f0:4c:7b:e3:ad:d8:17:f4:68:f7:34:
         5d:65:4a:46:46:d7:66:87:9d:1c:f7:c9:4a:ce:31:b5:6a:60:
         eb:2a:c9:cd:a5:d2:2d:c7:d3:04:b3:01:5e:19:dd:84:82:43:
         a3:34:74:27:9a:31:59:d2:cb:a1:8f:7a:9c:58:bf:4d:c5:db:
         bb:30:28:0f:ac:23:c1:44:be:56:37:94:c8:11:1d:cd:41:a2:
         5e:f5:87:5f:a6:1b:f0:e7:00:df:f1:70:42:83:94:8d:8d:97:
         5b:46:5f:63:68:b2:2b:b7:48:10:cd:14:16:81:b1:7f:70:ca:
         93:75:55:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:37:56 2026 by rpki-client