Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft
File:                     A_TeA6HJhcNNxoJy-ddzWzP6at4.mft (raw, json)
Hash identifier:          oC3ZUqOEiyyWZfYaF9H6fZKiBPacRtnSwSMdACMWpZc=
Subject key identifier:   3A:F9:A6:16:DF:D8:A8:61:8A:79:A2:2B:2E:44:06:F7:06:3F:2F:B4
Authority key identifier: 03:F4:DE:03:A1:C9:85:C3:4D:C6:82:72:F9:D7:73:5B:33:FA:6A:DE
Certificate issuer:       /CN=A911C7CD/serialNumber=03F4DE03A1C985C34DC68272F9D7735B33FA6ADE
Certificate serial:       012C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft
Manifest number:          012C
Signing time:             Wed 25 Mar 2026 04:47:06 +0000
Manifest this update:     Wed 25 Mar 2026 04:47:05 +0000
Manifest next update:     Wed 01 Apr 2026 04:47:05 +0000
Files and hashes:         1: A_TeA6HJhcNNxoJy-ddzWzP6at4.crl (hash: tUdz7zHGjcPcm98FmEzrk6jKIfhkh6+UPa417R35qWk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.crl
                          rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:47:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300 (0x12c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C7CD, serialNumber=03F4DE03A1C985C34DC68272F9D7735B33FA6ADE
        Validity
            Not Before: Mar 25 04:47:05 2026 GMT
            Not After : Apr  1 04:47:05 2026 GMT
        Subject: CN=69c368c9-52b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0d:4a:3a:f8:d7:b4:f7:3d:f5:d7:d5:5c:71:
                    37:d1:19:66:33:b1:c9:22:71:96:fc:c4:9e:90:72:
                    65:4e:6e:b5:08:a0:b5:f3:5a:bf:1d:f1:dc:27:f9:
                    94:09:d1:cb:18:20:47:82:55:c5:eb:b7:b0:9e:a9:
                    8e:f5:d4:6f:5b:a2:59:3c:79:7b:fc:a0:9d:cf:94:
                    80:4c:99:be:19:61:3c:18:6a:84:11:dc:70:a3:5f:
                    03:e1:e6:af:b3:22:c7:1c:ff:6a:a7:9e:2f:13:a9:
                    6b:33:fc:71:8e:98:bd:60:81:a7:ce:05:a9:5c:2b:
                    62:61:30:00:24:b2:1e:ec:5a:f7:82:84:a2:e6:af:
                    2e:e3:55:3f:f4:d9:8b:a1:a8:40:86:76:66:f6:0e:
                    a1:d0:9a:da:bd:ea:40:2f:2a:79:79:f3:9a:98:1f:
                    78:26:41:b6:b5:c8:34:ff:87:4f:1e:7a:1e:4e:ed:
                    eb:c4:87:16:b8:48:b3:a1:26:85:b6:b5:b1:66:05:
                    31:3b:21:e1:34:95:81:65:d3:99:f2:71:c2:44:d4:
                    34:6e:2d:ad:48:36:9b:92:c1:32:a7:d9:ef:30:50:
                    f2:8b:44:0f:ed:4f:98:19:d0:3a:d0:2d:90:49:eb:
                    18:1d:58:eb:cc:3e:6c:23:94:98:5c:60:45:6a:74:
                    de:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F9:A6:16:DF:D8:A8:61:8A:79:A2:2B:2E:44:06:F7:06:3F:2F:B4
            X509v3 Authority Key Identifier:
                keyid:03:F4:DE:03:A1:C9:85:C3:4D:C6:82:72:F9:D7:73:5B:33:FA:6A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:e5:95:b6:42:af:14:41:c0:6c:5a:de:d2:85:9e:d8:b8:99:
         0b:71:6d:d8:95:c3:bb:04:1b:62:1d:ab:1d:97:f5:de:ee:13:
         38:ee:36:af:69:56:99:80:ea:b3:4f:d3:a7:02:16:3f:2e:8f:
         5d:69:d6:dd:98:c0:8f:a2:15:fa:d9:0d:6e:fd:3d:5b:4f:ac:
         cb:9f:1c:78:33:7c:d5:0b:e2:5c:b3:0e:84:3b:f3:13:f8:b6:
         05:fb:83:76:87:73:d1:2d:49:bc:cf:d3:27:1e:b9:52:81:a4:
         10:64:7e:35:84:1c:80:91:8f:27:1c:5f:9f:41:63:56:dd:9f:
         82:db:a7:cd:0d:b6:89:71:fb:b2:68:04:06:a3:11:14:aa:55:
         5f:a2:2e:e9:3f:03:6f:08:de:63:c0:21:a6:8b:4f:1d:60:1b:
         7e:45:0b:1f:20:cb:8d:64:88:5c:a5:8c:99:bd:4d:12:a1:b6:
         9d:da:75:92:27:ed:46:ed:c4:93:52:fb:ba:41:8e:99:eb:0d:
         b3:0a:ed:4e:c6:de:84:c8:51:a1:eb:e8:b4:6f:cc:62:9b:27:
         05:31:1a:3a:d6:0a:43:a3:d5:a4:48:30:ca:26:6a:b6:4d:71:
         c8:ab:04:a5:bb:a3:02:e0:ba:4d:38:c0:73:22:a1:2d:9b:22:
         d6:d5:4b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:27:09 2026 by rpki-client