Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft
File:                     4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft (raw, json)
Hash identifier:          rWS6lxgAF2r/1PAvnHHW0mohsWwQ/o2qQ53yag5p7nk=
Subject key identifier:   70:3C:AC:7C:69:2D:56:06:E4:BB:02:AA:42:76:C9:44:08:E9:12:36
Authority key identifier: E0:B6:08:AF:53:41:4B:6F:59:7D:18:CA:E7:A2:14:48:3E:8A:65:9E
Certificate issuer:       /CN=A917336A/serialNumber=E0B608AF53414B6F597D18CAE7A214483E8A659E
Certificate serial:       0124
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft
Manifest number:          0123
Signing time:             Sun 01 Mar 2026 06:41:48 +0000
Manifest this update:     Sun 01 Mar 2026 06:41:47 +0000
Manifest next update:     Sun 08 Mar 2026 06:41:47 +0000
Files and hashes:         1: 4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl (hash: x1q2OJevagH5+8P/809ZSds7L+gJ0l7Y2doixqzTJ54=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl
                          rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:41:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 292 (0x124)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917336A, serialNumber=E0B608AF53414B6F597D18CAE7A214483E8A659E
        Validity
            Not Before: Mar  1 06:41:47 2026 GMT
            Not After : Mar  8 06:41:47 2026 GMT
        Subject: CN=69a3dfac-ab41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:5c:4a:9b:3f:1f:f1:37:38:03:2f:a6:cd:b8:
                    d3:bc:e8:26:ca:f8:d9:74:48:89:18:1c:5a:f7:99:
                    2b:a5:cd:82:e5:40:1c:d6:00:0c:78:d1:ad:84:88:
                    df:4b:64:0a:88:b6:cc:23:c8:38:21:83:a8:24:aa:
                    92:da:4e:56:2b:19:4b:a3:29:94:e9:49:56:79:99:
                    1f:0c:a2:c1:a4:70:04:e1:4a:e1:35:4f:c1:72:f4:
                    af:31:a5:5b:0b:32:7d:96:6f:61:79:23:3b:e4:92:
                    82:c5:90:6a:54:75:49:73:05:b6:1c:e8:1e:92:d5:
                    35:2a:b7:76:be:27:88:bb:51:ca:1a:2f:87:42:f2:
                    ec:18:e6:5a:28:38:f4:58:bf:0d:2e:af:bb:db:f3:
                    00:f7:5a:c8:77:f8:e0:cf:86:8d:c3:d3:56:a0:e8:
                    8a:05:46:8e:a4:06:38:3a:b9:91:66:7c:6b:e8:b6:
                    51:e3:13:07:ed:eb:56:26:27:9e:57:df:2a:f4:ed:
                    fb:62:f2:21:66:3f:08:fc:58:24:a7:10:66:c4:d7:
                    50:17:10:13:2c:fa:7f:7c:13:97:c7:d6:c8:ba:25:
                    da:a3:7f:a9:ba:8a:e9:80:f3:7e:f5:6f:8d:e4:75:
                    71:fd:4e:07:22:2c:54:5c:95:55:5e:de:8f:e7:c2:
                    63:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:3C:AC:7C:69:2D:56:06:E4:BB:02:AA:42:76:C9:44:08:E9:12:36
            X509v3 Authority Key Identifier:
                keyid:E0:B6:08:AF:53:41:4B:6F:59:7D:18:CA:E7:A2:14:48:3E:8A:65:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:0a:07:82:0f:99:c0:fb:69:33:f3:f2:cd:27:7a:7e:af:1a:
         54:b7:59:42:76:92:8b:c0:3b:64:d4:7a:b5:2b:05:0b:ff:c8:
         63:a0:07:6f:68:4b:33:3d:01:cd:82:82:a1:b2:b9:43:29:9a:
         39:e9:15:e0:cf:a0:ab:64:c1:1e:ed:20:7b:86:72:26:49:dc:
         7f:0e:1e:2e:81:fc:c9:50:2f:c2:c1:a9:c9:da:42:a0:24:3c:
         fd:67:68:9a:ec:27:70:06:7a:0f:b1:7e:53:bd:da:50:0f:e2:
         3f:6a:f9:6c:38:32:96:f4:f3:df:0a:4f:12:69:cc:3f:65:e0:
         ea:46:81:12:d6:17:85:51:48:28:18:60:92:a2:d4:94:cd:00:
         b6:5e:7c:a7:8b:1b:bd:1c:93:f0:55:c1:b1:8e:a7:df:e0:25:
         0f:99:66:63:99:65:b7:96:95:4e:87:7e:45:08:4e:12:70:a3:
         78:61:89:1a:ec:36:0a:53:4c:59:48:84:36:a0:7f:bc:f2:af:
         be:99:d5:28:c7:ea:fe:64:63:e6:99:72:37:07:50:30:2a:6e:
         cc:3a:5a:57:46:01:9e:0b:a3:54:56:a3:4e:05:64:8c:20:45:
         69:ed:b2:b2:c8:6b:7f:a2:48:f5:94:1d:4f:67:97:63:19:b3:
         5c:f8:c1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:43:19 2026 by rpki-client