Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft
File:                     4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft (raw, json)
Hash identifier:          YeA/A1MXuQCYNzIzVMxSCt3QwWk/myQ9QCe/1jpPrdw=
Subject key identifier:   C7:DA:7F:8B:7B:B2:D6:EE:62:F8:C5:32:DF:E5:F4:0A:92:C8:1C:8C
Authority key identifier: E1:C8:27:C3:48:97:45:E3:56:E9:0E:8B:61:A3:F4:47:D1:D1:53:11
Certificate issuer:       /CN=A9174FD4/serialNumber=E1C827C3489745E356E90E8B61A3F447D1D15311
Certificate serial:       0A10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft
Manifest number:          0A10
Signing time:             Tue 18 Aug 2026 20:03:29 +0000
Manifest this update:     Tue 18 Aug 2026 20:03:29 +0000
Manifest next update:     Tue 25 Aug 2026 20:03:29 +0000
Files and hashes:         1: 4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl (hash: f32/Hjb5W23w/DTC0h2VHXJ0043es211ZcCVrg8z2+A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl
                          rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 20:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2576 (0xa10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174FD4, serialNumber=E1C827C3489745E356E90E8B61A3F447D1D15311
        Validity
            Not Before: Aug 18 20:03:29 2026 GMT
            Not After : Aug 25 20:03:29 2026 GMT
        Subject: CN=6a84ba91-2e54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d3:9c:05:e8:dc:6f:4d:f8:6e:db:1a:70:a4:
                    fb:01:2b:0a:2c:de:ea:74:c9:d8:05:27:7e:7a:13:
                    2c:8f:04:94:ca:d6:94:f4:fb:b3:69:27:25:67:8a:
                    89:f1:d1:77:27:fd:63:41:33:b8:28:5c:ef:25:69:
                    7f:84:c0:8e:9c:da:e4:f3:f1:ca:28:a5:13:06:99:
                    85:26:02:df:8e:65:10:d0:02:18:53:bf:fd:34:89:
                    af:f2:70:88:ba:b5:46:ff:7d:73:13:0f:af:e1:fc:
                    ca:80:ef:19:b4:02:b7:c5:d1:41:cc:5b:ed:e6:a0:
                    f0:ee:4a:5b:09:41:1e:46:5c:35:53:75:00:74:b3:
                    0c:64:2c:cc:07:96:38:a4:f3:25:3b:2a:1b:2b:e2:
                    9e:77:7b:62:c4:51:6b:1c:d1:08:11:bf:d5:eb:87:
                    df:51:db:43:45:b7:cd:dc:7a:00:23:44:96:6d:08:
                    f9:c8:b3:07:73:c2:eb:a4:b3:5d:50:94:80:85:fa:
                    83:22:49:59:07:46:b9:7b:b7:50:53:73:1b:e5:c3:
                    72:8a:22:40:98:8e:35:19:7a:98:af:8b:58:11:04:
                    95:20:c8:88:c9:ee:3f:fa:e6:e0:f3:39:7e:f7:17:
                    c5:f4:c6:de:60:02:07:89:0c:e1:43:35:17:4c:6c:
                    a3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:DA:7F:8B:7B:B2:D6:EE:62:F8:C5:32:DF:E5:F4:0A:92:C8:1C:8C
            X509v3 Authority Key Identifier:
                keyid:E1:C8:27:C3:48:97:45:E3:56:E9:0E:8B:61:A3:F4:47:D1:D1:53:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:7d:98:78:66:e5:a9:ea:03:aa:74:01:c5:98:35:71:b7:49:
         69:f1:68:74:a1:b2:4b:da:6b:fa:ab:c1:8c:8c:4a:d9:5f:9a:
         4d:fa:1e:22:54:1d:83:bf:6f:d3:9b:d5:28:c1:6c:b2:71:6e:
         f9:2e:63:02:b4:1b:76:a0:a3:dd:57:15:71:86:08:fc:d7:32:
         b6:32:f2:e1:2f:3c:ff:54:18:e0:2d:07:9b:98:07:0f:1d:cc:
         51:92:94:7d:c5:34:ec:b5:72:e3:1c:0e:f3:06:a6:ab:75:97:
         91:69:47:4c:9b:05:9c:50:8f:00:49:4b:7f:c4:7a:3f:1d:b9:
         26:50:30:a2:1a:d1:2a:7a:21:03:85:b0:37:17:31:94:24:26:
         50:11:dd:e7:4a:75:b7:ef:94:38:6e:e2:ce:ae:dc:34:3e:8f:
         f1:b2:a7:93:7f:60:e1:b6:96:3e:9a:4d:ba:20:ae:00:c1:dc:
         0c:2f:8d:58:81:c7:25:98:36:2a:3b:0b:63:af:f5:d7:4a:f5:
         b5:7a:c0:1f:1e:e9:38:7a:a8:e2:c3:e3:b7:4f:17:82:ea:bf:
         d0:0e:9a:ff:01:0f:a3:61:bd:8b:15:cd:80:51:a0:74:cf:70:
         af:b8:70:f4:21:70:b6:2a:74:0c:ab:5d:f9:81:96:7e:2b:11:
         fb:a2:48:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:43 2026 by rpki-client