Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.mft
File:                     lC4n1lxHr7WXCpr-goCbMXnYtGY.mft (raw, json)
Hash identifier:          AsPIJgc1C2iiPvSSgjYnhDYYee6SlKMufcRPpEG2yJA=
Subject key identifier:   89:BC:36:92:52:96:85:CE:94:71:D4:2D:41:84:00:45:8F:6D:66:21
Authority key identifier: 94:2E:27:D6:5C:47:AF:B5:97:0A:9A:FE:82:80:9B:31:79:D8:B4:66
Certificate issuer:       /CN=A91DC33B/serialNumber=942E27D65C47AFB5970A9AFE82809B3179D8B466
Certificate serial:       73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC4n1lxHr7WXCpr-goCbMXnYtGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.mft
Manifest number:          176D
Signing time:             Mon 02 Mar 2026 01:05:01 +0000
Manifest this update:     Mon 02 Mar 2026 01:04:59 +0000
Manifest next update:     Mon 09 Mar 2026 01:04:59 +0000
Files and hashes:         1: lC4n1lxHr7WXCpr-goCbMXnYtGY.crl (hash: co9vnUla0brd1IFJP4nAbKZBuoEcfLn3JIzQZkSu6HI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.crl
                          rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC4n1lxHr7WXCpr-goCbMXnYtGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:04:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC33B, serialNumber=942E27D65C47AFB5970A9AFE82809B3179D8B466
        Validity
            Not Before: Mar  2 01:04:59 2026 GMT
            Not After : Mar  9 01:04:59 2026 GMT
        Subject: CN=69a4e23c-a325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:26:7d:cd:9c:db:0d:3b:27:67:79:91:7a:6e:
                    cf:41:19:38:78:2e:29:d4:64:62:d7:39:65:9b:e8:
                    bc:cb:dc:78:aa:27:04:79:8c:7d:56:fc:05:03:03:
                    f4:72:02:64:32:ed:c3:b4:68:ca:db:c1:a4:e2:bf:
                    f5:f7:ae:af:97:bf:78:55:7b:8b:42:6d:87:33:e7:
                    38:7a:56:b3:1a:d1:d9:7d:27:8f:42:ad:4a:96:77:
                    32:40:49:de:ce:98:83:41:72:4c:24:44:25:15:4d:
                    2c:18:56:0e:20:f2:37:39:21:e2:ac:31:9b:61:a3:
                    dd:a2:36:d3:c7:85:7f:91:cb:42:ab:03:2a:73:3d:
                    eb:08:d3:25:3d:39:dc:05:b8:4f:de:a6:ce:5b:c8:
                    04:52:02:7a:75:c9:03:2e:9e:56:c1:e9:d4:0b:c1:
                    39:30:9d:8a:2b:e9:a0:4f:ed:c8:27:9d:08:5d:0b:
                    90:14:98:64:ed:3a:13:e7:13:69:c7:16:d6:3f:04:
                    b3:f8:d4:7a:5d:78:fb:43:5b:f1:2a:65:c2:f1:a0:
                    0c:00:62:82:1d:5c:2e:65:7e:e4:0a:8c:14:bc:8a:
                    63:fa:50:bf:30:d1:60:55:52:37:2d:c7:f9:df:d4:
                    b6:5b:ce:28:c8:b0:7d:2f:de:af:66:a4:6e:61:f6:
                    21:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:BC:36:92:52:96:85:CE:94:71:D4:2D:41:84:00:45:8F:6D:66:21
            X509v3 Authority Key Identifier:
                keyid:94:2E:27:D6:5C:47:AF:B5:97:0A:9A:FE:82:80:9B:31:79:D8:B4:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC4n1lxHr7WXCpr-goCbMXnYtGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:20:10:44:14:ba:1e:49:42:50:1b:ed:07:58:87:1d:fb:44:
         29:17:69:88:91:49:3c:68:e5:fe:1f:2d:b8:26:6d:17:cd:74:
         ba:fc:ef:9d:52:ac:fa:f5:cc:81:b6:cb:29:ba:50:c0:d7:f4:
         1d:be:20:a0:59:08:0b:ee:27:72:1d:53:9b:a3:b0:9c:a1:2f:
         73:33:1a:82:f6:a4:a8:e0:f3:b4:5c:9d:54:89:0b:19:8e:84:
         3b:3f:87:ea:4d:1d:f7:9e:1e:c9:fb:88:14:b7:99:da:6d:e5:
         52:38:59:bb:f0:e1:87:70:eb:d1:54:bd:bb:b1:5a:73:c2:8a:
         58:9f:63:d4:fe:d4:92:6d:6f:d8:38:c9:97:1c:8f:b3:de:b4:
         fc:0f:c7:48:c9:b1:3b:f8:30:21:56:ce:6d:ab:c7:c0:4f:d1:
         ef:fb:2c:a7:fc:4d:f4:bd:1b:79:6f:6e:cc:3c:c6:b1:fd:1d:
         cf:c6:7f:b8:4a:31:77:29:e2:64:a6:15:ab:73:07:75:cc:0e:
         66:76:1b:05:b4:f1:39:72:15:29:12:0b:0e:cd:18:82:69:ab:
         6a:77:b9:b6:56:c0:a4:fa:9b:15:1a:76:58:24:15:ca:64:fb:
         4b:be:15:54:25:f5:4b:8a:01:d7:65:34:3c:38:61:5f:eb:96:
         e8:a0:bf:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:52 2026 by rpki-client