Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft
File:                     9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft (raw, json)
Hash identifier:          jbHVqgQzkSY5H2tq19b8udxQfWVrd/q9/vOlz5NKLEg=
Subject key identifier:   84:A8:87:FC:7E:AF:68:31:EB:CF:F6:9F:EE:FD:BA:9A:42:64:6F:43
Authority key identifier: F4:B0:38:5A:5D:CD:EF:E6:D4:EC:6C:6C:BC:EA:21:55:FD:60:57:17
Certificate issuer:       /CN=A913CE18/serialNumber=F4B0385A5DCDEFE6D4EC6C6CBCEA2155FD605717
Certificate serial:       35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LA4Wl3N7-bU7GxsvOohVf1gVxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft
Manifest number:          35
Signing time:             Sun 01 Mar 2026 09:59:23 +0000
Manifest this update:     Sun 01 Mar 2026 09:59:22 +0000
Manifest next update:     Sun 08 Mar 2026 09:59:22 +0000
Files and hashes:         1: 9LA4Wl3N7-bU7GxsvOohVf1gVxc.crl (hash: ecsGDJLOtdx12VSq9Y1KSs166v+R96OJ+1mwEVP6ZOE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.crl
                          rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LA4Wl3N7-bU7GxsvOohVf1gVxc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:59:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CE18, serialNumber=F4B0385A5DCDEFE6D4EC6C6CBCEA2155FD605717
        Validity
            Not Before: Mar  1 09:59:22 2026 GMT
            Not After : Mar  8 09:59:22 2026 GMT
        Subject: CN=69a40dfa-4de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:28:fe:a8:6f:5e:41:25:0c:10:66:9e:3e:36:
                    1a:eb:5e:4a:d0:07:07:c2:90:67:dd:7e:9a:77:12:
                    b7:95:5d:f0:6e:20:1b:2f:bc:e7:bb:2d:95:25:3e:
                    e5:ab:d0:8c:ce:ff:53:e5:cd:cb:bc:41:51:e7:30:
                    b0:74:df:a0:ee:e6:c6:6f:a6:29:38:d9:fc:bf:0c:
                    18:9c:73:80:61:12:59:9f:ab:c2:04:19:96:75:9d:
                    9f:35:1e:1d:d0:c8:db:74:da:fb:28:6a:0d:b9:c5:
                    e9:b7:6a:0d:d7:73:4e:72:df:ac:6b:1f:3a:27:38:
                    64:c6:f8:9b:61:06:4c:19:2f:b7:a5:44:09:bd:fd:
                    cf:d6:e7:df:13:f4:fe:f6:d9:aa:90:b9:98:9a:bc:
                    db:8f:52:db:eb:6e:7f:52:7d:28:2e:49:2e:2e:4a:
                    1c:5c:8e:06:26:e0:bb:73:31:92:ae:9b:42:90:69:
                    64:1e:e5:9b:95:95:54:bc:d4:be:91:c4:df:85:ec:
                    a4:46:e1:c0:74:c4:b9:d3:14:9d:bb:10:53:ce:ec:
                    88:af:e1:e9:c3:c1:f2:2b:62:b8:fb:10:bb:d7:5e:
                    ab:9d:64:10:dc:df:c6:fc:70:b5:d7:b2:e6:de:98:
                    f1:bb:0f:ee:35:bb:34:18:51:b4:82:6a:28:d4:f5:
                    b5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A8:87:FC:7E:AF:68:31:EB:CF:F6:9F:EE:FD:BA:9A:42:64:6F:43
            X509v3 Authority Key Identifier:
                keyid:F4:B0:38:5A:5D:CD:EF:E6:D4:EC:6C:6C:BC:EA:21:55:FD:60:57:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LA4Wl3N7-bU7GxsvOohVf1gVxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:eb:27:95:19:e1:36:1e:a8:19:a8:90:47:c1:7e:15:24:8e:
         38:85:97:7b:95:9b:5b:5e:78:9d:2c:c3:0f:35:6a:94:89:2f:
         6b:f7:47:b2:48:36:4f:21:7f:a5:83:c8:d9:1d:cc:93:8f:65:
         5f:18:ff:3b:f9:c0:2c:5e:ea:99:80:9a:b2:ef:8b:70:71:ef:
         49:fb:60:5c:98:1d:a7:13:5b:36:5e:49:77:8a:1c:ad:98:aa:
         d6:f4:13:57:04:62:df:55:06:a4:21:b9:dd:45:32:f2:c7:83:
         40:c6:f8:c4:cb:30:2e:2c:c8:c5:06:ec:56:fb:ab:c4:57:54:
         39:94:fd:58:4f:65:cd:ec:8f:a1:a5:62:08:24:b6:be:74:e5:
         fc:32:1b:16:a4:fb:61:54:b1:e5:d3:f2:5b:16:f1:85:c8:45:
         ea:63:2d:19:05:dd:ba:42:f0:38:60:7c:6b:69:7a:11:5e:57:
         c1:e2:30:55:bd:79:3a:c4:03:6f:86:0f:4f:df:61:09:15:c1:
         11:97:11:aa:a3:21:e1:3c:7f:04:9f:2a:cf:fb:4a:01:93:d9:
         90:57:fd:5d:96:eb:b7:29:16:4f:b7:68:ca:9d:ce:e4:d0:9e:
         9a:78:9e:dc:9d:86:5f:36:a5:0c:91:7e:10:71:82:34:86:29:
         03:99:5c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:14:17 2026 by rpki-client