Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174A0F/5617C9586F5911F192237A477AEE528E/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.mft
File:                     Pe9sKBE-9o5iWPASLX2RJXr4Bsk.mft (raw, json)
Hash identifier:          wQvflg+HmQ33RHhZQU1OPCGHtUZSbV1xQpdZ57ZSYy4=
Subject key identifier:   14:43:76:6E:E7:65:3E:25:21:89:21:D5:5D:94:31:9E:DF:7D:E9:FE
Authority key identifier: 3D:EF:6C:28:11:3E:F6:8E:62:58:F0:12:2D:7D:91:25:7A:F8:06:C9
Certificate issuer:       /CN=A9174A0F/serialNumber=3DEF6C28113EF68E6258F0122D7D91257AF806C9
Certificate serial:       25
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174A0F/5617C9586F5911F192237A477AEE528E/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.mft
Manifest number:          25
Signing time:             Thu 03 Sep 2026 08:42:50 +0000
Manifest this update:     Thu 03 Sep 2026 08:42:50 +0000
Manifest next update:     Thu 10 Sep 2026 08:42:50 +0000
Files and hashes:         1: Pe9sKBE-9o5iWPASLX2RJXr4Bsk.crl (hash: MyNZFaXuQnYdcS+2EhTiJv8gciuFYiCym/w0fL4kNNI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174A0F/5617C9586F5911F192237A477AEE528E/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.crl
                          rsync://rpki.apnic.net/member_repository/A9174A0F/5617C9586F5911F192237A477AEE528E/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 08:42:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174A0F, serialNumber=3DEF6C28113EF68E6258F0122D7D91257AF806C9
        Validity
            Not Before: Sep  3 08:42:50 2026 GMT
            Not After : Sep 10 08:42:50 2026 GMT
        Subject: CN=6a99330a-5c88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a1:1d:7d:76:a6:ab:60:a3:7f:5b:09:92:a0:
                    c3:dc:34:28:08:2a:77:0f:1d:cc:33:be:c5:e5:be:
                    5e:c7:12:75:8f:86:97:d7:9a:e1:88:3f:c4:e3:20:
                    54:d0:56:55:c3:6a:c3:19:91:46:c3:19:7b:75:35:
                    04:d9:aa:96:c9:0c:ff:c8:d4:08:b4:a3:84:9d:f5:
                    98:f2:59:92:2f:45:6b:ef:3b:51:90:76:2b:dd:9b:
                    e1:7a:9a:3a:6b:d2:cb:ed:e7:0d:8f:fd:d2:f1:44:
                    14:88:93:44:11:6a:83:de:03:0b:f9:2a:a4:e9:bd:
                    f0:16:51:b4:83:8a:d3:44:f7:4a:fa:21:b3:57:64:
                    f1:71:23:4c:a8:d1:bb:a8:08:ff:cb:ca:67:3b:13:
                    08:a3:81:ad:d8:6a:26:dd:ba:51:c1:43:15:78:d2:
                    f6:3e:58:cb:6c:5a:3a:c1:a9:4d:ed:4a:96:8e:da:
                    18:30:98:48:ea:5a:72:e8:cc:d6:68:3b:e8:0d:13:
                    d8:c0:d0:cd:74:4f:94:a2:37:b5:d0:b1:d7:16:b9:
                    d5:4d:dd:10:a2:d9:ef:91:45:a4:83:3a:6a:42:01:
                    15:05:2d:b8:c4:45:67:c5:90:b4:42:e6:3b:f7:d8:
                    52:4d:e2:00:f1:1d:a0:47:44:2b:4c:88:74:10:1f:
                    11:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:43:76:6E:E7:65:3E:25:21:89:21:D5:5D:94:31:9E:DF:7D:E9:FE
            X509v3 Authority Key Identifier:
                keyid:3D:EF:6C:28:11:3E:F6:8E:62:58:F0:12:2D:7D:91:25:7A:F8:06:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174A0F/5617C9586F5911F192237A477AEE528E/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A0F/5617C9586F5911F192237A477AEE528E/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:11:da:7f:d3:28:fb:24:57:69:51:19:5f:5c:22:4c:69:11:
         1a:40:e0:af:df:c6:f2:36:e2:47:63:2f:15:6b:a1:98:1a:50:
         35:93:92:e0:63:5d:73:a5:24:f7:23:ca:ba:d4:8a:d5:a8:80:
         7c:37:34:1f:51:18:1a:5d:ae:82:2a:5e:8d:4b:eb:fd:9e:1a:
         af:3d:95:9e:a4:05:9c:54:5d:b8:32:72:42:32:f4:92:a6:f8:
         66:53:32:94:82:07:07:a3:95:f5:d9:dd:38:69:bd:a8:af:7f:
         53:8e:48:64:4e:a4:04:fe:01:be:e2:48:95:8d:59:32:82:55:
         c1:5d:96:13:82:e4:eb:04:f2:bc:65:85:45:23:89:ba:04:1b:
         72:b2:f4:88:89:e1:4d:17:bc:21:97:9f:79:db:27:19:96:90:
         e6:27:b5:b8:1a:26:85:f4:84:01:53:1b:81:e3:58:2c:ca:aa:
         72:c5:ec:94:09:e0:34:15:82:0f:8e:b5:9b:4f:0e:de:2a:30:
         eb:0e:61:fb:f7:ab:40:f8:a7:d6:9e:59:b9:54:93:b5:49:a6:
         11:a0:58:f8:12:b1:9a:50:0f:1b:93:60:6f:3e:9c:cf:09:2d:
         0f:c9:e4:4b:58:3b:98:28:92:a0:e1:9f:38:d2:43:37:91:a2:
         a1:6f:f3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:28:30 2026 by rpki-client