Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft
File:                     dEy0Bnedz3q-afF952ykOS2ebsM.mft (raw, json)
Hash identifier:          NPgEFdH/8gTpbY1SdlUt+bG46QrdrNA4kjJ8pt1Wo24=
Subject key identifier:   4B:1C:F2:87:BE:0F:C1:40:14:8C:53:69:71:22:3F:7B:A6:07:E2:1D
Authority key identifier: 74:4C:B4:06:77:9D:CF:7A:BE:69:F1:7D:E7:6C:A4:39:2D:9E:6E:C3
Certificate issuer:       /CN=A911535B/serialNumber=744CB406779DCF7ABE69F17DE76CA4392D9E6EC3
Certificate serial:       3523
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEy0Bnedz3q-afF952ykOS2ebsM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft
Manifest number:          3523
Signing time:             Tue 24 Mar 2026 14:54:17 +0000
Manifest this update:     Tue 24 Mar 2026 14:54:16 +0000
Manifest next update:     Tue 31 Mar 2026 14:54:16 +0000
Files and hashes:         1: dEy0Bnedz3q-afF952ykOS2ebsM.crl (hash: rrV1295TB75UeKixor50SQM/jItVjOQqkvNDMz8lt8E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.crl
                          rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEy0Bnedz3q-afF952ykOS2ebsM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 14:54:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13603 (0x3523)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911535B, serialNumber=744CB406779DCF7ABE69F17DE76CA4392D9E6EC3
        Validity
            Not Before: Mar 24 14:54:16 2026 GMT
            Not After : Mar 31 14:54:16 2026 GMT
        Subject: CN=69c2a599-e4bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2a:7b:c6:d2:c9:80:98:02:cd:d9:cd:cf:92:
                    e3:9b:a7:17:3e:49:56:e7:9c:d6:21:92:09:6c:bc:
                    80:a8:0c:0b:c5:dc:7b:23:b6:94:39:c6:9c:d9:a3:
                    e2:c5:f1:91:a4:e8:ab:04:57:08:29:84:27:3a:70:
                    50:d6:a2:40:a6:a5:64:78:b9:85:df:da:c7:32:dd:
                    53:7a:4f:19:6d:9f:ea:26:9c:9b:90:89:3d:b7:0a:
                    89:47:d4:6d:47:df:3e:73:cb:f0:1e:ec:51:b2:3c:
                    35:1a:85:91:7d:0f:a0:28:b5:e2:41:cb:0e:dd:6e:
                    e3:20:81:57:e1:95:42:d8:6a:db:75:3e:3d:f5:4a:
                    1b:3c:ac:37:54:8b:c7:5d:7f:fc:65:12:b5:19:d2:
                    51:5d:f7:f9:0a:55:c1:d5:d7:35:cb:83:14:69:b1:
                    54:37:cb:39:d2:e4:dc:53:fb:37:6a:3e:6d:99:a5:
                    84:67:bf:26:8b:7e:e6:34:7f:5d:1e:17:43:71:63:
                    88:bc:92:6f:61:63:f1:ea:fc:c9:7c:12:ad:6c:eb:
                    fc:e7:70:df:83:18:7e:3e:e0:db:de:c5:5a:a2:cc:
                    0f:63:44:be:f9:4d:00:29:3c:ae:9c:69:bd:46:1a:
                    3b:d3:06:a7:21:bf:26:16:7f:7b:b1:97:b0:b8:ac:
                    1a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:1C:F2:87:BE:0F:C1:40:14:8C:53:69:71:22:3F:7B:A6:07:E2:1D
            X509v3 Authority Key Identifier:
                keyid:74:4C:B4:06:77:9D:CF:7A:BE:69:F1:7D:E7:6C:A4:39:2D:9E:6E:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEy0Bnedz3q-afF952ykOS2ebsM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:a2:dc:26:e3:45:2c:74:fb:25:db:73:bf:8e:9e:2d:0b:a0:
         c6:f7:d4:39:ce:fc:f0:8f:a4:f0:3d:67:f0:2c:2e:12:c6:d9:
         7d:97:76:7c:31:d1:65:5b:49:a3:15:79:ae:62:45:ce:ee:cb:
         f6:5d:75:a1:71:03:1e:1d:dd:02:b1:c8:32:cd:50:eb:d6:90:
         d7:be:04:4b:c0:3f:3a:8a:c5:e2:54:d5:6c:f8:d1:fd:01:86:
         7e:ec:72:76:b1:bf:e1:bb:2c:49:c9:4a:43:5e:3c:25:e2:b5:
         3d:8d:6e:a9:a0:36:14:cd:33:47:ae:fc:6e:08:ce:cd:24:b8:
         93:60:71:2d:86:7c:a1:67:f5:bb:cf:04:6f:7b:95:47:db:10:
         fe:2b:f8:da:be:83:2e:92:4a:08:55:3f:21:14:fd:84:2f:2f:
         81:52:f5:e1:46:fe:9c:48:a6:43:d6:31:3c:13:93:2c:12:c6:
         9b:7c:88:a9:4c:61:94:6e:c4:b2:11:20:51:04:fe:fa:bd:29:
         61:56:7c:e7:8f:77:8e:f6:0c:d4:63:43:77:37:b2:34:6f:92:
         b1:89:b2:81:55:a2:74:46:e7:6b:20:ed:77:da:e4:ce:80:47:
         12:84:c4:10:83:4e:46:54:58:f0:96:f1:ab:a2:88:fa:ac:3a:
         d4:1f:6b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:05 2026 by rpki-client