Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121335/93F37CD018BB11F1857DA4650B3D8C67/3RLtc6ywUU4D8meITUNc-8iJXkw.mft
File:                     3RLtc6ywUU4D8meITUNc-8iJXkw.mft (raw, json)
Hash identifier:          qHLXuF4bRF0aG6fbya2u5IhwqhsoXy/twBSEZEw1L3U=
Subject key identifier:   2F:0A:B3:84:39:78:33:70:29:BB:B4:A5:19:55:49:1F:F3:8A:CA:91
Authority key identifier: DD:12:ED:73:AC:B0:51:4E:03:F2:67:88:4D:43:5C:FB:C8:89:5E:4C
Certificate issuer:       /CN=A9121335/serialNumber=DD12ED73ACB0514E03F267884D435CFBC8895E4C
Certificate serial:       4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RLtc6ywUU4D8meITUNc-8iJXkw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121335/93F37CD018BB11F1857DA4650B3D8C67/3RLtc6ywUU4D8meITUNc-8iJXkw.mft
Manifest number:          4A
Signing time:             Mon 27 Jul 2026 10:40:42 +0000
Manifest this update:     Mon 27 Jul 2026 10:40:42 +0000
Manifest next update:     Mon 03 Aug 2026 10:40:42 +0000
Files and hashes:         1: 3RLtc6ywUU4D8meITUNc-8iJXkw.crl (hash: 4BBdrbBfWTzcq8LeUm9a6a9j7BrsUhTJmod2TzdTc8U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121335/93F37CD018BB11F1857DA4650B3D8C67/3RLtc6ywUU4D8meITUNc-8iJXkw.crl
                          rsync://rpki.apnic.net/member_repository/A9121335/93F37CD018BB11F1857DA4650B3D8C67/3RLtc6ywUU4D8meITUNc-8iJXkw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RLtc6ywUU4D8meITUNc-8iJXkw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:40:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121335, serialNumber=DD12ED73ACB0514E03F267884D435CFBC8895E4C
        Validity
            Not Before: Jul 27 10:40:42 2026 GMT
            Not After : Aug  3 10:40:42 2026 GMT
        Subject: CN=6a6735aa-5915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4c:ea:f4:3a:37:56:62:85:26:c1:01:5d:83:
                    b6:e7:ee:c9:b9:19:a8:c5:b9:d8:d2:e7:92:75:65:
                    43:d9:ed:4f:26:a7:d2:cc:6d:c9:d0:bb:a3:d4:5c:
                    c9:2d:e9:f8:58:7b:dc:84:0e:4b:8a:2d:e5:e7:b0:
                    f9:a4:97:30:8e:ea:0c:f4:93:df:e2:1d:68:8c:82:
                    86:14:8f:8f:05:b6:76:78:37:b4:6a:cc:41:b0:d4:
                    af:d7:30:41:76:75:1a:48:be:a7:26:fa:93:5f:75:
                    b4:8a:e1:f4:91:5d:2c:99:91:31:de:00:ad:e9:ed:
                    08:97:51:14:b1:16:c3:b8:de:80:db:0d:81:ae:91:
                    d6:aa:dd:5b:3f:72:9d:58:c2:b6:b2:98:a1:e2:b5:
                    f1:c4:d9:ba:e9:fb:dc:ee:9f:c8:b5:95:87:d2:b8:
                    fc:20:72:86:55:79:09:f6:6a:bc:11:4f:de:ed:74:
                    44:b2:be:0f:26:b3:28:41:9c:ae:86:48:f8:0d:2a:
                    f0:56:4f:4a:29:83:22:da:8f:e4:16:f4:88:ce:8d:
                    ff:98:42:77:80:79:48:6d:95:6a:7b:ee:32:e1:7c:
                    12:60:28:eb:30:ee:b4:7f:e4:ab:0c:81:cb:84:2f:
                    f8:d0:5d:d0:4b:6c:2d:79:6f:67:12:4d:ad:e5:30:
                    53:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:0A:B3:84:39:78:33:70:29:BB:B4:A5:19:55:49:1F:F3:8A:CA:91
            X509v3 Authority Key Identifier:
                keyid:DD:12:ED:73:AC:B0:51:4E:03:F2:67:88:4D:43:5C:FB:C8:89:5E:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121335/93F37CD018BB11F1857DA4650B3D8C67/3RLtc6ywUU4D8meITUNc-8iJXkw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RLtc6ywUU4D8meITUNc-8iJXkw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121335/93F37CD018BB11F1857DA4650B3D8C67/3RLtc6ywUU4D8meITUNc-8iJXkw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:32:17:54:61:a0:73:16:df:77:7f:b8:93:06:99:d5:31:9d:
         5f:8b:38:86:c0:af:b9:9f:c7:2e:9b:28:2c:cc:b5:69:ef:88:
         68:a7:9a:51:fe:96:9f:fe:fd:79:d6:61:81:12:be:30:fe:00:
         02:a3:7a:52:3a:2a:58:e6:d3:be:30:23:32:07:98:b3:14:12:
         a1:6f:98:f7:f0:65:37:ef:49:3c:81:14:9d:31:04:0d:d9:a0:
         69:3c:8d:84:e4:15:d7:01:26:be:5a:09:82:f3:25:38:e7:b5:
         e6:65:83:99:d2:e0:53:8b:88:2e:9b:08:3d:93:21:1e:2d:1d:
         d4:30:df:b8:a7:bc:0e:e0:a9:06:36:b0:58:68:cf:fb:a6:b2:
         64:4f:0b:af:d8:69:df:a5:5e:36:b6:63:ce:e5:bc:64:e2:77:
         a3:14:02:77:e6:98:b8:07:0c:9e:18:28:2a:c0:65:d8:24:d2:
         f6:ec:50:7c:56:79:53:af:59:4e:1f:e8:d2:52:34:cc:08:5d:
         67:94:88:a4:bd:ff:40:29:d8:e8:8f:89:ab:90:b6:8d:9a:06:
         3b:2f:6c:45:0d:5b:4d:56:8f:6a:1f:71:1f:9b:8c:ea:1b:4c:
         de:ad:0f:d9:2c:15:08:d1:3b:44:a5:bd:17:b1:2b:4f:b5:ab:
         d5:f1:dd:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:31:29 2026 by rpki-client