Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft
File:                     5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft (raw, json)
Hash identifier:          yMnzpT25qDVFkf52vqbxLxauN4eGDbyALCqAYaUz/oU=
Subject key identifier:   7E:4A:4B:94:AF:A4:76:5E:C3:08:3D:56:DD:C1:DA:56:07:3B:9A:AD
Authority key identifier: E6:0E:21:41:D7:1D:B9:FC:89:FA:BF:B5:FD:AD:03:72:DF:A3:37:D0
Certificate issuer:       /CN=A917B633/serialNumber=E60E2141D71DB9FC89FABFB5FDAD0372DFA337D0
Certificate serial:       0173
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5g4hQdcdufyJ-r-1_a0Dct-jN9A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft
Manifest number:          0173
Signing time:             Sat 03 Oct 2026 05:26:34 +0000
Manifest this update:     Sat 03 Oct 2026 05:26:34 +0000
Manifest next update:     Sat 10 Oct 2026 05:26:34 +0000
Files and hashes:         1: 5g4hQdcdufyJ-r-1_a0Dct-jN9A.crl (hash: saxyU3cktDFm0UJRHtUWe/42/vrOI8C5FyYpyNOCxww=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.crl
                          rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5g4hQdcdufyJ-r-1_a0Dct-jN9A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 05:26:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 371 (0x173)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B633, serialNumber=E60E2141D71DB9FC89FABFB5FDAD0372DFA337D0
        Validity
            Not Before: Oct  3 05:26:34 2026 GMT
            Not After : Oct 10 05:26:34 2026 GMT
        Subject: CN=6ac0920a-05cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a8:bc:bb:3f:07:ac:e9:cc:ed:54:f8:1c:23:
                    68:41:18:84:5c:27:80:48:d8:2d:71:f3:ee:40:82:
                    e4:22:d7:9d:13:9c:57:5c:c2:7d:fb:2d:78:f0:ec:
                    62:12:46:5f:b4:2b:30:0e:ff:63:49:6e:d1:97:72:
                    f7:cb:af:c9:11:6f:98:31:22:7d:d4:c9:9e:4c:30:
                    e0:76:5d:c6:e8:df:e7:0e:53:e8:8d:53:14:7c:7c:
                    5d:1b:d1:1b:f2:db:9c:36:e9:78:2f:c0:31:a9:dc:
                    23:60:d3:cc:19:7f:ac:6f:9a:53:8d:1e:91:b9:7f:
                    3f:5e:fb:6e:9c:8b:60:7f:de:62:11:34:7d:f6:48:
                    aa:90:6b:d5:c1:cb:94:b6:1c:a2:99:f5:f7:f7:2e:
                    14:8d:62:89:96:ee:f0:be:c5:36:5c:89:a4:68:41:
                    e1:a3:92:c4:da:50:2e:59:52:17:02:93:d8:dd:7a:
                    fb:bb:93:da:08:fd:b7:38:c2:82:e9:06:c3:f3:ec:
                    95:d0:33:b3:98:57:cc:01:9d:60:4d:8a:db:a6:4e:
                    b7:e2:a0:61:7a:61:09:1b:ee:99:ff:97:88:0d:60:
                    7b:0e:90:38:fc:cf:fc:9f:93:9a:d5:de:d3:12:78:
                    0a:ba:9c:54:fe:54:4f:31:2e:b2:bb:aa:86:8f:87:
                    0d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:4A:4B:94:AF:A4:76:5E:C3:08:3D:56:DD:C1:DA:56:07:3B:9A:AD
            X509v3 Authority Key Identifier:
                keyid:E6:0E:21:41:D7:1D:B9:FC:89:FA:BF:B5:FD:AD:03:72:DF:A3:37:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5g4hQdcdufyJ-r-1_a0Dct-jN9A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:27:f9:50:e6:2f:16:e3:64:a3:ae:c1:20:f6:71:d6:6d:5d:
         a9:b0:32:a3:94:03:90:8b:6c:48:5f:d2:22:d1:c3:c7:b1:a2:
         b2:6f:22:d7:cf:d0:c3:72:f8:0a:f7:c0:cb:9a:67:9f:b4:c5:
         0c:ea:23:f7:3d:5d:0e:81:4b:d3:db:18:3b:e1:e5:1b:8b:3e:
         6e:5a:9e:5b:fe:b2:4f:7b:e6:19:26:33:f5:42:90:19:e3:b5:
         56:e3:b9:40:dc:de:cc:7d:6e:35:9d:da:fd:bb:87:ce:ac:c2:
         3b:a4:d1:f9:a5:d7:de:83:53:2e:55:00:8f:cb:72:a1:b7:f5:
         5a:77:88:81:b9:29:11:24:0c:e6:26:bd:ea:4f:2e:57:1a:23:
         c2:88:2c:cd:09:81:86:9e:43:9c:a5:8d:00:21:0a:97:72:a0:
         b6:67:d2:98:35:45:25:d9:46:77:7b:4b:7c:a4:51:bd:5e:5a:
         31:8c:eb:6b:e9:e3:9b:90:e4:79:9c:bb:58:b9:f8:f2:dd:8e:
         ac:e8:1e:f0:16:d9:af:c2:92:21:3c:23:ee:c1:6b:ae:69:4c:
         0b:98:8a:65:1c:a5:4f:c5:b5:de:4b:89:fd:7a:4a:61:1e:ec:
         1e:5f:41:73:0f:f7:b8:63:20:d9:cd:39:7d:f2:03:cd:2c:2f:
         97:b5:a9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:20:50 2026 by rpki-client