Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft
File:                     kS3Nd84XYnPZShzEJZKtBclnamI.mft (raw, json)
Hash identifier:          l6pXeh9+Ded8xP57ZrID92XnAheTwdL1e+IV/u/SfWk=
Subject key identifier:   84:41:00:A1:43:2B:2B:BC:05:EA:37:16:69:3E:E7:50:4A:A6:4D:8C
Authority key identifier: 91:2D:CD:77:CE:17:62:73:D9:4A:1C:C4:25:92:AD:05:C9:67:6A:62
Certificate issuer:       /CN=A91CA6E6/serialNumber=912DCD77CE176273D94A1CC42592AD05C9676A62
Certificate serial:       0210
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS3Nd84XYnPZShzEJZKtBclnamI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft
Manifest number:          0367
Signing time:             Mon 02 Mar 2026 01:40:44 +0000
Manifest this update:     Mon 02 Mar 2026 01:40:43 +0000
Manifest next update:     Mon 09 Mar 2026 01:40:43 +0000
Files and hashes:         1: kS3Nd84XYnPZShzEJZKtBclnamI.crl (hash: GmxAxUZ+bAUiTJ5Jn4BhhmbdXHVH6i6dN3F6YJumx+Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.crl
                          rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS3Nd84XYnPZShzEJZKtBclnamI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:40:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 528 (0x210)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA6E6, serialNumber=912DCD77CE176273D94A1CC42592AD05C9676A62
        Validity
            Not Before: Mar  2 01:40:43 2026 GMT
            Not After : Mar  9 01:40:43 2026 GMT
        Subject: CN=69a4ea9c-87a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:12:36:92:b1:76:92:cf:18:63:20:92:a2:dd:
                    e2:05:b0:cd:a3:90:c7:41:82:1d:cc:6c:28:bf:bf:
                    5e:d1:de:42:0c:41:d9:27:50:d2:f5:6d:72:5a:c4:
                    5d:5d:8d:67:c9:53:4f:10:39:ad:87:91:16:25:82:
                    45:a4:fc:b0:14:f9:09:0d:e9:92:af:40:08:ea:8b:
                    65:e1:6a:e5:3f:8e:e8:f4:d4:f7:f8:a0:df:4c:c9:
                    63:0f:c1:d5:e1:3e:db:77:9b:a6:5c:69:7a:f6:17:
                    24:4f:cd:85:4f:ea:e7:8a:e8:cc:ff:05:ca:98:ce:
                    fa:1c:90:32:e7:61:f4:ed:39:5a:79:e3:9e:3a:81:
                    32:ce:87:db:8e:09:ad:ee:1c:11:cc:62:0b:16:c2:
                    fb:81:19:46:0d:46:ed:bd:d1:3f:c9:fd:cf:c4:57:
                    3a:36:35:79:64:5f:f5:84:61:3a:54:4c:b0:b0:21:
                    1e:11:73:ef:73:8d:78:fb:bc:58:ff:8c:bf:d6:f7:
                    bf:1b:11:77:ea:a4:7d:9c:18:3f:39:4d:43:4d:d0:
                    94:32:fb:30:ab:71:90:ba:8c:9e:be:5a:ce:3d:5e:
                    c1:70:aa:4f:bb:12:d4:8c:a6:97:d3:6f:3b:a0:92:
                    53:d7:b1:34:ed:14:70:89:71:79:1a:01:d6:e9:21:
                    55:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:41:00:A1:43:2B:2B:BC:05:EA:37:16:69:3E:E7:50:4A:A6:4D:8C
            X509v3 Authority Key Identifier:
                keyid:91:2D:CD:77:CE:17:62:73:D9:4A:1C:C4:25:92:AD:05:C9:67:6A:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS3Nd84XYnPZShzEJZKtBclnamI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:53:3b:73:7e:18:86:68:ea:a4:c8:26:c4:f7:1a:d6:36:4f:
         dd:1b:75:a7:63:bc:6d:03:17:fe:8e:07:8e:59:07:01:e4:02:
         95:57:42:c1:31:5a:aa:49:58:22:ac:ab:a7:45:ac:98:13:72:
         60:e5:34:73:8f:ae:4a:64:fd:b2:65:45:c4:ed:d4:c7:2f:34:
         c9:03:81:47:df:6a:39:11:50:51:4a:9a:51:2f:4e:57:2c:7b:
         cc:07:76:bd:b6:10:a7:ab:12:78:fa:70:74:0d:d6:11:e1:d3:
         bb:04:7d:8a:f6:73:cc:ad:fb:eb:ee:99:5b:b1:9e:21:89:6c:
         7a:69:17:bf:d1:73:37:05:92:7b:e1:13:93:02:7d:7a:3f:6b:
         19:56:4d:a8:09:60:c2:18:88:1e:e8:a8:f9:de:09:7a:4b:60:
         89:63:23:c8:08:71:ad:8e:51:fc:9a:9b:9a:10:52:5e:1b:03:
         14:52:41:30:f6:cc:4d:9d:51:32:0f:b9:38:5e:8b:4c:0b:ab:
         dc:10:ae:1f:04:fa:59:3c:af:e5:d7:6c:b3:b7:25:14:66:20:
         b5:c0:b5:16:10:25:78:ba:17:a3:32:e9:4e:bf:f3:c0:0d:ec:
         04:b8:3d:a4:dd:4a:a0:08:9f:16:05:19:52:91:b9:d6:83:b7:
         86:84:01:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:41:27 2026 by rpki-client