Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft
File:                     4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft (raw, json)
Hash identifier:          WJWGSc/DvOUz1Fqb6NFCus7bTjGP94n2FNJG/Ue6HHw=
Subject key identifier:   D4:42:B2:84:59:CD:C4:EA:32:46:0B:6F:52:13:48:61:60:0C:AF:E5
Authority key identifier: E0:8D:6C:7F:E3:5F:E3:66:42:FE:6F:66:CC:DA:28:66:A6:62:42:F1
Certificate issuer:       /CN=A918D96C/serialNumber=E08D6C7FE35FE36642FE6F66CCDA2866A66242F1
Certificate serial:       3516
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft
Manifest number:          3516
Signing time:             Sat 28 Feb 2026 14:51:31 +0000
Manifest this update:     Sat 28 Feb 2026 14:51:31 +0000
Manifest next update:     Sat 07 Mar 2026 14:51:31 +0000
Files and hashes:         1: 4I1sf-Nf42ZC_m9mzNooZqZiQvE.crl (hash: AITrS0/99A/zR5lXIebJo1SNoNvHEJs7WeAkSRJM/Rw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.crl
                          rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 14:51:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13590 (0x3516)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D96C, serialNumber=E08D6C7FE35FE36642FE6F66CCDA2866A66242F1
        Validity
            Not Before: Feb 28 14:51:31 2026 GMT
            Not After : Mar  7 14:51:31 2026 GMT
        Subject: CN=69a300f3-35b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:32:ae:dd:0d:05:84:b8:72:89:e9:2f:bb:69:
                    38:9b:71:3f:50:74:08:03:fe:3a:cc:66:d2:10:ac:
                    71:f1:8b:54:d2:8f:d7:f5:af:ca:c4:16:10:65:34:
                    dd:65:77:26:1a:1d:3f:42:de:fb:32:3b:bb:3c:ad:
                    c0:01:3b:59:5a:f6:3e:2a:4a:cc:40:10:86:ae:05:
                    76:be:d2:c9:c5:39:39:e0:b6:2c:f5:67:71:15:58:
                    97:30:1a:fc:0f:14:90:45:cd:c1:4d:89:c6:60:b2:
                    7d:77:a9:41:9d:26:91:cb:6c:64:75:bf:b9:af:be:
                    98:c2:56:d0:3a:c8:55:f4:9c:88:0f:96:7c:19:31:
                    4d:7c:90:f7:1a:d1:cd:2b:5e:97:9e:7e:6e:dc:96:
                    03:6a:e3:6c:76:d2:eb:f4:66:a3:54:95:32:49:fb:
                    3b:40:70:b3:da:e3:16:c9:64:38:5f:11:40:b9:f8:
                    24:4e:1c:fd:33:27:90:ce:00:25:45:33:bc:34:74:
                    c7:df:3c:d1:2a:ee:ca:1c:94:2c:70:df:12:a5:0d:
                    29:eb:53:f8:44:11:cf:88:e4:07:93:30:8c:30:d0:
                    d2:d5:0b:6a:59:d5:49:6d:a8:07:63:77:61:88:ce:
                    e9:74:80:5a:23:65:8a:0d:e7:db:92:32:19:7c:b2:
                    7e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:42:B2:84:59:CD:C4:EA:32:46:0B:6F:52:13:48:61:60:0C:AF:E5
            X509v3 Authority Key Identifier:
                keyid:E0:8D:6C:7F:E3:5F:E3:66:42:FE:6F:66:CC:DA:28:66:A6:62:42:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:c9:e5:24:f3:77:69:f0:ec:09:fe:d2:fa:90:90:da:b3:ec:
         23:c0:1c:06:22:3c:27:be:5a:9f:1d:8f:b7:2a:bd:6d:94:82:
         34:e4:1f:9c:40:1e:5b:8c:b8:35:e8:14:cf:fa:bb:bc:49:5c:
         69:51:e3:1e:38:e0:53:52:ae:56:e8:3b:9d:82:9a:51:b8:48:
         5f:7b:00:0e:27:b8:9a:94:bd:ea:79:4a:8c:f1:24:02:ec:93:
         33:2b:c4:70:73:1f:83:87:76:76:07:da:43:e4:1f:06:42:a4:
         b3:e3:d2:15:75:37:75:64:6d:ab:b8:e5:69:16:85:e7:78:fb:
         3f:af:eb:24:fe:92:d2:bd:e1:46:9c:54:67:a4:f3:97:a3:34:
         0f:85:40:8c:58:fa:bb:34:6d:6f:eb:71:af:85:ab:90:bd:d7:
         b0:a9:a5:07:f9:3d:02:6a:6e:ab:14:68:ee:6b:de:ad:a7:d2:
         1f:7f:44:87:99:f7:0d:7f:2a:2a:68:30:c8:2d:8e:d8:47:8b:
         d1:44:4c:21:37:2d:2c:e1:1e:5d:1c:53:a1:f8:84:be:b3:b4:
         6d:d6:5e:dc:64:f1:4f:74:21:3f:85:1c:54:d8:dc:1f:42:a7:
         a2:b4:18:9d:7f:8f:78:2b:d9:a8:67:42:92:72:1f:35:e6:a4:
         0b:a9:e5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:01:56 2026 by rpki-client