Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft
File:                     Wr4zfmXAC-qEfODSWciH5P2zuSE.mft (raw, json)
Hash identifier:          yTR0o5JSC+ug4bhimVdvqThud20FCqnIn4Fu7VAmP7M=
Subject key identifier:   BE:5C:F2:4B:66:DF:72:CD:85:C7:FE:2F:5F:94:22:D6:AF:66:92:7F
Authority key identifier: 5A:BE:33:7E:65:C0:0B:EA:84:7C:E0:D2:59:C8:87:E4:FD:B3:B9:21
Certificate issuer:       /CN=A9173CDD/serialNumber=5ABE337E65C00BEA847CE0D259C887E4FDB3B921
Certificate serial:       E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr4zfmXAC-qEfODSWciH5P2zuSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft
Manifest number:          E3
Signing time:             Thu 21 May 2026 06:38:50 +0000
Manifest this update:     Thu 21 May 2026 06:38:49 +0000
Manifest next update:     Thu 28 May 2026 06:38:49 +0000
Files and hashes:         1: Wr4zfmXAC-qEfODSWciH5P2zuSE.crl (hash: Gq6uRXD2Dun05wdb+EMUyrLK6C/UrNtS7V9Oyyw8CZM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.crl
                          rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr4zfmXAC-qEfODSWciH5P2zuSE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 06:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227 (0xe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173CDD, serialNumber=5ABE337E65C00BEA847CE0D259C887E4FDB3B921
        Validity
            Not Before: May 21 06:38:49 2026 GMT
            Not After : May 28 06:38:49 2026 GMT
        Subject: CN=6a0ea879-3e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ee:45:a5:75:53:a6:3d:6b:91:a9:70:74:ee:
                    67:95:91:aa:ad:7a:77:44:75:6a:f1:4e:75:dd:99:
                    11:e3:72:09:b6:36:15:d2:4d:94:ba:4f:16:cd:88:
                    4c:85:3b:b5:d0:ab:45:cf:6c:b3:70:f3:b6:6f:da:
                    ed:13:6a:74:99:47:5b:15:3b:49:42:71:bf:ed:41:
                    5d:9b:db:df:81:c1:23:eb:e1:42:9b:b2:31:89:b5:
                    ca:25:80:fc:d9:35:18:a4:09:45:b3:dc:20:af:82:
                    b1:61:8e:22:26:01:80:ec:e5:80:d1:1e:d3:59:6e:
                    31:3b:25:6c:56:7d:b5:03:56:48:eb:54:dd:bb:73:
                    6a:8a:f7:b4:01:77:01:ef:c4:14:1a:f0:ec:fb:da:
                    fa:0b:14:d0:b3:44:11:b3:58:5d:e0:d7:80:fe:89:
                    a7:57:4c:d7:b0:41:2b:bd:82:a7:75:be:6e:63:94:
                    9a:51:fb:1f:9f:01:b5:97:49:c2:66:be:2c:50:eb:
                    6a:67:fb:60:15:1b:39:aa:b2:5c:bd:71:40:84:65:
                    1f:c2:5a:24:e6:df:ea:bc:f4:b5:35:a3:f1:fc:66:
                    dc:4e:68:09:ba:b6:0b:7a:6c:bc:5c:63:ee:9a:8d:
                    e3:c4:09:63:ad:47:c7:99:31:49:62:e0:1f:52:3a:
                    a4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:5C:F2:4B:66:DF:72:CD:85:C7:FE:2F:5F:94:22:D6:AF:66:92:7F
            X509v3 Authority Key Identifier:
                keyid:5A:BE:33:7E:65:C0:0B:EA:84:7C:E0:D2:59:C8:87:E4:FD:B3:B9:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr4zfmXAC-qEfODSWciH5P2zuSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:bc:53:02:d8:83:66:66:b1:65:f7:8f:27:10:92:54:c8:12:
         ea:b6:64:27:d5:7b:b2:e4:9e:b8:43:ce:03:26:c0:33:a7:ca:
         e8:29:61:f9:d3:38:e6:e8:4a:52:00:66:de:0f:14:31:92:f4:
         d0:1b:fd:d9:57:55:76:2b:52:a4:26:e4:d8:20:b3:f6:3e:8d:
         66:65:44:25:ec:4b:19:05:49:bb:03:49:b7:a1:c0:92:f2:0d:
         be:4c:dc:b5:c0:d1:47:4f:27:ad:f3:32:27:09:63:68:c6:97:
         3c:b7:61:53:f5:c0:07:1c:aa:ea:d2:e4:12:d8:0f:46:81:4a:
         f9:3e:08:f6:d8:81:91:aa:2a:e5:e3:06:aa:88:56:84:8b:72:
         d3:d3:d0:1a:58:77:f0:51:4a:54:fb:62:60:62:06:11:18:2c:
         4f:bf:b7:dd:fe:75:b0:bf:47:14:a8:0e:fe:bf:1c:c9:88:3f:
         dc:a3:95:ba:f6:2c:30:82:de:b0:96:47:79:73:3c:cb:ed:6d:
         dd:12:c0:3d:0f:be:24:af:c1:13:5b:ea:8b:48:d3:d3:6e:32:
         79:5c:73:7d:a3:21:d9:8d:af:4a:40:6e:aa:64:0c:6d:1d:f2:
         c1:5e:03:bb:d3:df:4a:79:2d:54:d7:99:04:df:59:cf:9a:58:
         f2:51:83:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:15:15 2026 by rpki-client