Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft
File:                     yuLPsaeXStawJFrjTksNztggmGc.mft (raw, json)
Hash identifier:          jaYK5Qo+wUG20Ipmux9g5EVHVcl6A+qA/DlibDmXKIA=
Subject key identifier:   01:A0:ED:15:19:90:D2:21:98:07:82:B9:96:8B:C5:E4:EC:2E:63:99
Authority key identifier: CA:E2:CF:B1:A7:97:4A:D6:B0:24:5A:E3:4E:4B:0D:CE:D8:20:98:67
Certificate issuer:       /CN=A9120968/serialNumber=CAE2CFB1A7974AD6B0245AE34E4B0DCED8209867
Certificate serial:       3516
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft
Manifest number:          3516
Signing time:             Sat 28 Feb 2026 14:57:19 +0000
Manifest this update:     Sat 28 Feb 2026 14:57:19 +0000
Manifest next update:     Sat 07 Mar 2026 14:57:19 +0000
Files and hashes:         1: yuLPsaeXStawJFrjTksNztggmGc.crl (hash: SIPk0wPuEH/tjFtyPDQ6bDS0+4OLdZb7BDDgX8xNCSI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.crl
                          rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 14:57:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13590 (0x3516)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120968, serialNumber=CAE2CFB1A7974AD6B0245AE34E4B0DCED8209867
        Validity
            Not Before: Feb 28 14:57:19 2026 GMT
            Not After : Mar  7 14:57:19 2026 GMT
        Subject: CN=69a3024f-9ec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b9:92:67:ba:3c:f0:d8:58:be:6d:2d:d6:5b:
                    53:ce:20:ef:c8:4b:e1:9f:16:07:e4:42:70:86:3a:
                    c8:7a:38:0d:c4:be:65:0e:69:dc:9a:af:49:5a:84:
                    13:89:10:c1:e4:b6:1d:52:57:6c:7f:17:a2:6b:57:
                    3d:03:83:40:7b:c1:41:3f:22:e6:e4:f0:3e:d6:70:
                    d4:53:60:cf:15:b0:9c:4e:b0:fb:63:1c:e4:b3:0c:
                    c7:3e:3d:db:dc:89:6c:62:2b:c7:11:73:a0:2c:56:
                    78:91:d9:ae:45:fe:1f:79:3f:47:c7:09:96:7a:51:
                    30:97:db:a5:6b:4d:69:81:e9:ff:de:e1:b8:37:ca:
                    1e:ba:bf:df:da:80:88:df:de:a0:36:71:6c:57:70:
                    0e:b8:20:07:2c:9b:f2:c2:0e:34:9b:32:b4:20:0b:
                    63:1b:21:45:12:e7:3e:5d:57:24:a8:96:37:b9:cc:
                    14:07:07:bb:9b:a4:76:ce:55:77:75:93:e5:85:cc:
                    7b:fd:7c:d3:6e:2a:cc:ff:0a:5f:91:f9:b9:8c:a1:
                    f9:5f:b9:3f:27:ec:7c:f1:d8:ed:b2:69:68:d2:84:
                    6f:37:48:fb:92:6d:8c:d8:0b:a2:5e:01:14:a3:f7:
                    b2:11:b5:05:7a:da:58:2c:b1:b0:11:36:2c:a2:27:
                    9c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A0:ED:15:19:90:D2:21:98:07:82:B9:96:8B:C5:E4:EC:2E:63:99
            X509v3 Authority Key Identifier:
                keyid:CA:E2:CF:B1:A7:97:4A:D6:B0:24:5A:E3:4E:4B:0D:CE:D8:20:98:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:b7:11:db:5b:ac:28:2d:f4:b2:ad:16:64:84:75:01:56:e0:
         72:b8:dd:78:4e:0f:c7:09:f4:df:d1:b1:4e:13:0e:0c:a9:8b:
         5e:62:ab:af:a2:24:5a:21:a7:e0:3b:3b:68:97:d0:c9:5d:6c:
         48:3c:6e:b0:be:cb:7f:96:d3:64:fc:21:c3:bb:95:85:84:38:
         72:52:4d:a9:3a:0f:9f:79:20:46:c7:da:18:19:fc:fe:81:bb:
         10:aa:1e:96:a0:da:90:d5:22:43:bd:e8:86:59:ae:18:8c:2d:
         f6:bc:46:5a:80:6b:44:f7:dd:25:68:8b:25:77:05:17:21:ed:
         e1:b7:da:4b:bc:26:db:40:0c:da:78:72:e5:17:f2:4b:a1:9b:
         cb:6a:82:70:f2:3e:12:95:b7:13:85:c5:88:a5:89:0b:cc:88:
         a7:5e:6d:53:35:8b:ea:17:1e:d5:70:e8:4a:23:c7:a7:bc:e6:
         83:2b:05:ee:6e:f5:21:0f:b0:83:a7:2c:d8:d0:4c:e5:4f:3d:
         6e:0b:f2:bd:a2:80:8f:fb:a0:f8:dd:bd:97:5a:e4:73:a7:c0:
         fe:ed:ba:6c:15:d9:0d:fb:1a:af:44:07:ac:14:ba:ca:18:74:
         a3:e2:74:5b:bc:d5:15:a5:4d:a4:b2:b3:0d:e9:e8:af:84:6e:
         5a:da:78:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:39:19 2026 by rpki-client