Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft
File:                     F4xrtHazfF8V5ulTq-TLzwhhCCs.mft (raw, json)
Hash identifier:          SbWrBwnk2Tn+6NpNhjVpgxCqYizFi14o1/NpnP/AhZw=
Subject key identifier:   39:17:2D:9E:C0:E7:02:AE:67:8A:12:42:D7:E5:D9:C9:EF:7E:FC:44
Authority key identifier: 17:8C:6B:B4:76:B3:7C:5F:15:E6:E9:53:AB:E4:CB:CF:08:61:08:2B
Certificate issuer:       /CN=A91709F5/serialNumber=178C6BB476B37C5F15E6E953ABE4CBCF0861082B
Certificate serial:       0138
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft
Manifest number:          0138
Signing time:             Sat 03 Oct 2026 06:12:06 +0000
Manifest this update:     Sat 03 Oct 2026 06:12:05 +0000
Manifest next update:     Sat 10 Oct 2026 06:12:05 +0000
Files and hashes:         1: F4xrtHazfF8V5ulTq-TLzwhhCCs.crl (hash: BTTxW3K/n15FtV44TU/k1adidrNaDzbu4YCQasqnsp8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.crl
                          rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 06:12:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312 (0x138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91709F5, serialNumber=178C6BB476B37C5F15E6E953ABE4CBCF0861082B
        Validity
            Not Before: Oct  3 06:12:05 2026 GMT
            Not After : Oct 10 06:12:05 2026 GMT
        Subject: CN=6ac09cb6-7e4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:32:ad:b6:a4:b3:50:01:94:64:a8:e0:ee:3c:
                    cc:70:25:f8:c4:23:30:1f:9c:1d:23:34:58:e5:25:
                    92:70:22:fd:c2:4c:fd:31:18:26:9f:1d:64:90:48:
                    4c:43:bf:74:f3:2b:a5:91:9a:f6:61:b3:9f:bc:81:
                    b3:41:84:17:35:84:c0:b0:6a:1f:41:61:b2:44:28:
                    b5:1f:c5:1b:81:00:c1:36:be:a8:6c:87:8c:43:4f:
                    99:d8:a5:df:48:42:32:89:0e:2e:14:8f:7b:9e:cf:
                    bf:10:f9:28:bf:62:42:6f:79:36:fa:6b:ad:c6:70:
                    87:12:f2:83:6f:82:78:b9:61:f5:5b:d4:92:15:e5:
                    0b:78:b7:ee:3c:b4:8a:e5:20:61:37:53:ee:f8:0e:
                    64:16:05:c6:ff:77:a3:a3:cc:65:d3:c7:d0:36:68:
                    76:10:d7:9d:23:c0:45:43:58:bd:59:30:f8:60:fd:
                    60:27:f0:b2:d9:46:d0:a3:4e:1d:89:ff:52:38:66:
                    f4:2d:92:14:cf:35:ce:1e:19:8c:4e:bb:b0:43:75:
                    19:0f:2b:4e:03:a2:6a:2c:db:e9:b5:9d:49:3e:03:
                    b4:80:19:1d:c5:7f:0f:7a:13:7a:5e:e9:5e:29:7f:
                    9b:c4:04:59:a6:fc:ed:28:5b:da:94:ef:02:8d:7a:
                    9e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:17:2D:9E:C0:E7:02:AE:67:8A:12:42:D7:E5:D9:C9:EF:7E:FC:44
            X509v3 Authority Key Identifier:
                keyid:17:8C:6B:B4:76:B3:7C:5F:15:E6:E9:53:AB:E4:CB:CF:08:61:08:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:b1:03:1f:6d:4f:04:dd:60:12:72:fb:90:e3:4e:5f:05:e7:
         c2:80:45:ae:73:98:ae:ce:66:0c:95:b0:cc:31:c0:18:b6:43:
         cf:c2:13:38:b4:1d:54:4b:a5:07:ae:31:db:09:40:06:8d:8b:
         2c:09:60:ec:35:7b:65:f6:a6:c1:82:1c:ed:d7:b2:66:76:69:
         24:a6:6f:d4:b9:5f:6b:35:01:d6:ab:3d:02:de:d5:e4:0a:78:
         d3:f3:22:10:a6:36:53:27:3f:60:d0:92:58:ab:67:f2:10:7f:
         62:93:b9:b0:4c:1c:3d:2a:97:d0:a0:6f:98:59:59:91:57:9a:
         02:ed:00:b2:98:64:25:b8:01:08:ee:4a:17:73:f0:bb:39:57:
         c6:19:ec:60:d6:76:b5:47:1b:fb:98:86:ed:59:42:17:02:f5:
         3a:cf:8c:db:ca:5f:38:70:93:c5:02:cb:87:62:f7:b2:f8:e0:
         2b:ff:48:78:f3:90:1f:17:c1:ab:eb:9e:0e:1e:6c:3d:0d:bc:
         e1:a7:f9:3e:6a:69:45:b3:f6:d6:2d:e8:ca:d1:c3:4e:75:06:
         31:c5:9a:66:cb:3d:da:68:24:b8:24:a5:33:3f:37:63:0d:a9:
         68:48:df:a6:6f:b8:3a:be:20:72:29:a2:c0:55:48:5d:ae:7f:
         11:ca:79:7f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzA5RjUxMTAvBgNVBAUTKDE3OEM2QkI0NzZCMzdDNUYxNUU2RTk1M0FCRTRDQkNG
MDg2MTA4MkIwHhcNMjYxMDAzMDYxMjA1WhcNMjYxMDEwMDYxMjA1WjAYMRYwFAYD
VQQDEw02YWMwOWNiNi03ZTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnTKttqSzUAGUZKjg7jzMcCX4xCMwH5wdIzRY5SWScCL9wkz9MRgmnx1kkEhM
Q7908yulkZr2YbOfvIGzQYQXNYTAsGofQWGyRCi1H8UbgQDBNr6obIeMQ0+Z2KXf
SEIyiQ4uFI97ns+/EPkov2JCb3k2+mutxnCHEvKDb4J4uWH1W9SSFeULeLfuPLSK
5SBhN1Pu+A5kFgXG/3ejo8xl08fQNmh2ENedI8BFQ1i9WTD4YP1gJ/Cy2UbQo04d
if9SOGb0LZIUzzXOHhmMTruwQ3UZDytOA6JqLNvptZ1JPgO0gBkdxX8PehN6Xule
KX+bxARZpvztKFvalO8CjXqe5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDkXLZ7A
5wKuZ4oSQtfl2cnvfvxEMB8GA1UdIwQYMBaAFBeMa7R2s3xfFebpU6vky88IYQgr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDlGNS8zQTgyOTBFOERG
REExMUVGOEI0Nzg2MjRDNEY5QUUwMi9GNHhydEhhemZGOFY1dWxUcS1UTHp3aGhD
Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Y0eHJ0SGF6ZkY4VjV1bFRxLVRMendoaENDcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MDlGNS8zQTgyOTBFOERGREExMUVGOEI0Nzg2MjRDNEY5QUUwMi9GNHhydEhhemZG
OFY1dWxUcS1UTHp3aGhDQ3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsrEDH21PBN1gEnL7kONOXwXnwoBFrnOYrs5mDJWwzDHAGLZDz8ITOLQdVEul
B64x2wlABo2LLAlg7DV7ZfamwYIc7deyZnZpJKZv1LlfazUB1qs9At7V5Ap40/Mi
EKY2Uyc/YNCSWKtn8hB/YpO5sEwcPSqX0KBvmFlZkVeaAu0AsphkJbgBCO5KF3Pw
uzlXxhnsYNZ2tUcb+5iG7VlCFwL1Os+M28pfOHCTxQLLh2L3svjgK/9IePOQHxfB
q+ueDh5sPQ284af5PmppRbP21i3oytHDTnUGMcWaZss92mgkuCSlMz83Yw2paEjf
pm+4Or4gcimiwFVIXa5/Ecp5fw==
-----END CERTIFICATE-----
Generated at Sun Oct 4 19:51:34 2026 by rpki-client