Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.mft
File:                     40IvTt5eaM7JqqfjxuMnjHMOHnw.mft (raw, json)
Hash identifier:          jat1knM90drkyxOIDJDqU7BJ11k1CCivwNSUNcks6u0=
Subject key identifier:   0B:2E:FE:CF:33:E0:37:D4:CB:FF:A1:46:B5:88:99:0A:12:F3:C1:F6
Authority key identifier: E3:42:2F:4E:DE:5E:68:CE:C9:AA:A7:E3:C6:E3:27:8C:73:0E:1E:7C
Certificate issuer:       /CN=A9180DA4/serialNumber=E3422F4EDE5E68CEC9AAA7E3C6E3278C730E1E7C
Certificate serial:       352B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40IvTt5eaM7JqqfjxuMnjHMOHnw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.mft
Manifest number:          352B
Signing time:             Thu 16 Apr 2026 14:40:09 +0000
Manifest this update:     Thu 16 Apr 2026 14:40:09 +0000
Manifest next update:     Thu 23 Apr 2026 14:40:09 +0000
Files and hashes:         1: 40IvTt5eaM7JqqfjxuMnjHMOHnw.crl (hash: ehsup2HebWDhK3xZzQ4jMBpHPqg6s2zyuFqwcNVnfEs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.crl
                          rsync://rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40IvTt5eaM7JqqfjxuMnjHMOHnw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 14:40:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13611 (0x352b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180DA4, serialNumber=E3422F4EDE5E68CEC9AAA7E3C6E3278C730E1E7C
        Validity
            Not Before: Apr 16 14:40:09 2026 GMT
            Not After : Apr 23 14:40:09 2026 GMT
        Subject: CN=69e0f4c9-774b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c5:a5:be:0b:04:ed:0d:5a:48:5d:07:1c:c8:
                    d8:46:9e:93:65:ca:02:70:1c:ab:0f:95:e3:10:b5:
                    f5:1d:f7:b4:7b:69:b6:f9:69:56:68:96:d2:6c:6c:
                    38:86:68:c6:20:d6:91:e2:5e:74:72:d9:d9:bd:7d:
                    a5:df:59:02:7f:0e:28:bf:40:b3:ff:d0:c0:35:81:
                    f9:e6:35:41:b8:d7:4a:2e:6f:3c:d8:ec:c1:db:3d:
                    d2:46:2e:7b:60:0a:0c:8c:30:3d:f8:44:af:0f:27:
                    f4:9b:6a:bb:2d:a6:8f:2b:81:b5:54:ca:e2:94:e6:
                    07:bb:36:3c:fa:55:f8:f1:91:fd:65:ac:18:c2:ee:
                    18:74:09:17:89:52:ec:5f:5a:42:8c:06:f8:65:81:
                    30:cf:b0:40:cf:6d:07:a6:a7:24:7e:db:4f:d3:5e:
                    ff:0e:9f:86:c6:86:3a:fc:ca:64:19:a1:c3:bb:b7:
                    b1:9f:f5:c0:bb:24:fa:de:c0:25:c3:0a:21:74:66:
                    b9:8e:d0:1a:a6:c3:76:2f:83:3e:6b:21:03:55:8f:
                    72:46:0d:30:c2:16:14:e8:45:61:ed:c4:96:58:62:
                    97:ce:80:41:7b:6d:73:3e:47:45:5c:bb:81:13:e5:
                    ff:24:aa:fd:83:a7:51:67:b4:6f:fc:10:80:c8:a7:
                    c4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2E:FE:CF:33:E0:37:D4:CB:FF:A1:46:B5:88:99:0A:12:F3:C1:F6
            X509v3 Authority Key Identifier:
                keyid:E3:42:2F:4E:DE:5E:68:CE:C9:AA:A7:E3:C6:E3:27:8C:73:0E:1E:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40IvTt5eaM7JqqfjxuMnjHMOHnw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:f9:e1:4b:9c:41:63:11:32:8b:95:3c:33:6f:60:5e:99:3a:
         82:d4:d2:87:27:8f:be:12:cd:1f:0d:4e:65:90:1f:83:75:a4:
         94:79:e5:eb:44:2d:52:2b:22:71:1b:10:a3:51:44:07:61:df:
         c5:83:66:50:2e:50:41:ca:13:4c:11:d0:59:3c:92:fa:5b:65:
         45:4b:1f:b5:7d:7e:10:9e:1f:1b:1e:e5:75:4e:3d:9c:f9:dd:
         97:58:1c:7a:1a:99:66:04:b3:60:ad:11:dc:7c:ad:e7:40:ba:
         98:6a:b4:02:e4:65:45:bc:9e:af:96:f3:27:3a:3f:ce:50:3c:
         c7:99:f8:43:3c:41:4a:ac:be:90:8f:fc:c7:ce:39:16:00:43:
         71:79:43:65:d3:e8:3b:82:d7:00:e6:cf:a7:c0:6b:63:67:f6:
         22:77:52:81:20:82:85:58:cb:6a:7d:a4:13:08:2b:8e:05:01:
         a6:d0:87:d6:d3:81:95:f5:b3:97:65:a6:69:ff:84:ab:d6:f5:
         72:3f:94:01:fe:56:ce:0a:ac:14:ca:44:96:29:fa:3f:77:54:
         82:f8:ef:ac:92:10:08:f9:bb:e6:96:8c:e8:de:61:0e:77:8b:
         20:2a:f8:45:1f:5f:86:59:4a:2c:b1:16:c5:85:48:fe:ca:f8:
         a4:e9:9a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:18:30 2026 by rpki-client