Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft
File:                     yuLPsaeXStawJFrjTksNztggmGc.mft (raw, json)
Hash identifier:          6vZs8nLSwEH0EDSr6bI4W/Fh3y4OdOJbV+n0bE1Y1is=
Subject key identifier:   DF:0B:E2:97:AE:26:8F:BD:51:46:2A:C9:F7:03:B4:62:7C:E6:3A:3E
Authority key identifier: CA:E2:CF:B1:A7:97:4A:D6:B0:24:5A:E3:4E:4B:0D:CE:D8:20:98:67
Certificate issuer:       /CN=A9120968/serialNumber=CAE2CFB1A7974AD6B0245AE34E4B0DCED8209867
Certificate serial:       3524
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft
Manifest number:          3524
Signing time:             Tue 24 Mar 2026 14:55:03 +0000
Manifest this update:     Tue 24 Mar 2026 14:55:02 +0000
Manifest next update:     Tue 31 Mar 2026 14:55:02 +0000
Files and hashes:         1: yuLPsaeXStawJFrjTksNztggmGc.crl (hash: rLtvkOQi1ZO1U+DHdOWYv4m0KhmIn5cTPtGj9o/tf/4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.crl
                          rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 14:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13604 (0x3524)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120968, serialNumber=CAE2CFB1A7974AD6B0245AE34E4B0DCED8209867
        Validity
            Not Before: Mar 24 14:55:02 2026 GMT
            Not After : Mar 31 14:55:02 2026 GMT
        Subject: CN=69c2a5c7-8b01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e2:9d:d0:32:51:34:f4:b4:d8:d1:ec:b8:66:
                    98:0e:a4:5c:1b:4d:8d:57:35:ee:1b:f8:12:c5:01:
                    c3:85:bc:ac:4b:db:d5:7e:76:36:4c:1c:a4:c2:64:
                    ec:b8:84:55:fb:c6:da:28:50:54:35:ba:b1:87:65:
                    81:20:e1:b2:0f:a3:30:83:f9:37:4d:df:43:ae:f0:
                    a7:9c:71:d3:db:34:f6:03:dc:e6:8e:4f:12:04:eb:
                    0d:8e:09:53:eb:e5:2e:03:3e:c8:f1:67:5f:d6:a9:
                    94:58:95:79:23:29:0a:c7:c0:e3:66:1d:0a:d4:50:
                    e7:bf:29:e3:a6:26:37:68:6a:30:c7:a8:98:60:17:
                    8e:bc:10:b6:f9:6e:0c:ae:a3:ff:e1:cc:51:4f:90:
                    88:0a:b4:41:27:06:ca:6d:8e:72:9f:fd:ee:27:88:
                    23:2c:1a:5c:f6:ec:e0:e4:12:53:91:ce:5d:2f:92:
                    b7:e3:0d:74:94:b0:7c:05:2b:4a:e6:f2:9a:e7:b6:
                    77:3e:6b:bc:af:ed:85:a6:85:48:c2:42:0d:44:5a:
                    da:d9:6d:32:88:d1:cd:3c:66:e7:ba:c0:3c:aa:7d:
                    15:37:43:23:5f:7b:5b:c4:5e:4a:96:c2:91:06:56:
                    c4:3f:be:69:a5:50:5f:7e:fe:26:05:b3:36:6d:06:
                    4e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:0B:E2:97:AE:26:8F:BD:51:46:2A:C9:F7:03:B4:62:7C:E6:3A:3E
            X509v3 Authority Key Identifier:
                keyid:CA:E2:CF:B1:A7:97:4A:D6:B0:24:5A:E3:4E:4B:0D:CE:D8:20:98:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:b5:b5:91:0f:eb:cc:87:34:d1:05:1c:20:e8:03:37:74:b5:
         9e:04:8e:23:94:92:68:db:4f:4b:6e:c9:ff:9e:2c:81:40:a3:
         d8:08:03:15:8d:ad:44:0b:1f:e4:92:c1:bd:c4:a7:2c:88:68:
         32:f8:d9:62:1a:86:24:7c:35:c5:66:4e:72:a9:85:13:6c:8a:
         87:74:08:08:f9:e2:8b:40:32:56:32:5d:4a:90:9e:7a:27:29:
         05:87:45:1e:91:3f:ab:2c:8d:4e:a6:3d:53:7b:15:7e:d5:03:
         47:e9:f4:13:3d:36:80:09:14:9d:3f:15:70:1b:1f:a0:c1:4a:
         80:cb:61:16:0c:0c:13:ec:a5:a6:1f:80:07:77:e8:74:07:7a:
         6d:56:be:9c:42:59:18:07:7c:b8:3b:04:56:f5:a3:f2:4a:c1:
         4e:89:22:2f:41:c4:a4:d6:d3:0f:e8:d7:8d:c3:db:92:54:77:
         67:ee:a8:1b:dd:a4:bb:bd:d0:b3:11:4f:95:43:28:e3:8a:0d:
         c0:08:26:11:64:0b:ff:0d:f7:3c:b4:ad:91:55:e4:c9:89:ee:
         58:a6:55:8f:08:e9:29:56:68:fa:30:43:56:71:bc:a3:3a:c8:
         40:66:6e:2b:40:74:49:12:c1:c9:4f:3e:92:b8:8d:c5:b4:5f:
         f6:81:24:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:27:16 2026 by rpki-client