Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121335/93F37CD018BB11F1857DA4650B3D8C67/3RLtc6ywUU4D8meITUNc-8iJXkw.mft
File:                     3RLtc6ywUU4D8meITUNc-8iJXkw.mft (raw, json)
Hash identifier:          Sq1mBZwB3KuQNDsfnzk3DPsDT37brUMfHm3D3+8AwIk=
Subject key identifier:   5C:42:0C:8B:09:80:31:28:63:CE:CA:C8:DD:4A:61:2E:E8:23:95:1D
Authority key identifier: DD:12:ED:73:AC:B0:51:4E:03:F2:67:88:4D:43:5C:FB:C8:89:5E:4C
Certificate issuer:       /CN=A9121335/serialNumber=DD12ED73ACB0514E03F267884D435CFBC8895E4C
Certificate serial:       24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RLtc6ywUU4D8meITUNc-8iJXkw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121335/93F37CD018BB11F1857DA4650B3D8C67/3RLtc6ywUU4D8meITUNc-8iJXkw.mft
Manifest number:          24
Signing time:             Mon 11 May 2026 09:00:44 +0000
Manifest this update:     Mon 11 May 2026 09:00:43 +0000
Manifest next update:     Mon 18 May 2026 09:00:43 +0000
Files and hashes:         1: 3RLtc6ywUU4D8meITUNc-8iJXkw.crl (hash: YTHh2/D+GxF4nu9Xn02v66eO5NfULd12kfTnAmnMAZc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121335/93F37CD018BB11F1857DA4650B3D8C67/3RLtc6ywUU4D8meITUNc-8iJXkw.crl
                          rsync://rpki.apnic.net/member_repository/A9121335/93F37CD018BB11F1857DA4650B3D8C67/3RLtc6ywUU4D8meITUNc-8iJXkw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RLtc6ywUU4D8meITUNc-8iJXkw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121335, serialNumber=DD12ED73ACB0514E03F267884D435CFBC8895E4C
        Validity
            Not Before: May 11 09:00:43 2026 GMT
            Not After : May 18 09:00:43 2026 GMT
        Subject: CN=6a019abb-6722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9d:26:d8:cc:47:dc:fd:06:c7:36:95:d6:d5:
                    20:60:fd:3e:00:51:f0:31:60:5f:d1:af:77:cd:94:
                    a9:5f:30:f1:f3:f1:ea:f0:f4:7f:92:90:f8:3e:3e:
                    f1:7f:16:8c:b8:e5:d1:16:a8:42:e0:56:bb:5d:62:
                    0e:59:ca:d3:f3:be:39:43:a0:1e:b7:aa:42:28:4c:
                    72:c1:e2:5e:2d:4d:b8:58:7d:dd:07:c3:b2:c5:b9:
                    74:ad:af:c6:35:cc:ef:91:68:1a:85:14:eb:4b:a9:
                    73:c1:41:56:24:38:19:48:da:75:f2:cf:38:c5:d3:
                    db:b4:66:e3:d6:1a:fd:aa:09:2f:7c:08:bf:50:9c:
                    4e:43:f3:0e:45:f3:a2:44:30:6a:80:2f:a1:08:b6:
                    2b:95:e6:14:ff:cd:18:bd:ee:67:1b:d7:a9:a3:4f:
                    b8:32:86:7c:5a:12:58:eb:03:ce:d4:5f:4e:97:0d:
                    7d:d1:96:6f:72:50:f2:d5:54:76:a9:f3:40:77:71:
                    41:7c:7f:99:10:89:19:5e:40:43:13:d6:e2:35:f2:
                    11:91:63:6b:20:12:36:c5:7f:82:b9:cf:91:ce:d1:
                    8b:94:71:76:f9:06:56:a6:5f:5d:3f:c3:9f:c5:b5:
                    c8:94:13:04:f1:70:02:42:af:e0:c7:86:53:d5:6d:
                    7e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:42:0C:8B:09:80:31:28:63:CE:CA:C8:DD:4A:61:2E:E8:23:95:1D
            X509v3 Authority Key Identifier:
                keyid:DD:12:ED:73:AC:B0:51:4E:03:F2:67:88:4D:43:5C:FB:C8:89:5E:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121335/93F37CD018BB11F1857DA4650B3D8C67/3RLtc6ywUU4D8meITUNc-8iJXkw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RLtc6ywUU4D8meITUNc-8iJXkw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121335/93F37CD018BB11F1857DA4650B3D8C67/3RLtc6ywUU4D8meITUNc-8iJXkw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:98:bc:8c:c0:89:dc:f6:ce:32:5d:92:c9:c1:40:6c:99:0e:
         4b:0c:cf:9a:6b:38:fb:31:21:e1:25:03:5e:ef:7a:00:0e:39:
         6e:4b:2e:4d:ae:f7:49:59:cd:3f:8f:60:e5:1c:25:31:5e:01:
         9d:f8:b0:e6:ea:2c:54:9b:43:6f:5e:d2:8b:f1:00:17:ce:c3:
         59:1d:97:06:69:92:10:9e:c6:5a:02:17:d6:c9:e4:61:fd:30:
         a0:42:e8:62:47:36:ee:58:52:9a:00:c9:99:e5:fa:2e:49:c4:
         7a:1e:d2:2a:19:2c:aa:4a:d2:92:c2:e9:bd:31:eb:a1:a5:db:
         14:d4:5a:06:7a:f2:18:78:9d:8f:77:42:66:52:bc:8f:c3:cc:
         7f:89:98:6c:42:79:45:49:d6:bb:61:97:72:30:87:09:03:88:
         94:59:e0:db:6d:cf:6f:24:a9:5a:a7:9e:03:f9:7c:f6:7d:54:
         d4:8f:2e:89:5f:e8:a3:22:98:97:1d:87:72:54:09:0b:9f:86:
         f8:ba:21:ca:e5:b7:9b:6a:ba:b1:60:13:8a:8e:84:59:78:95:
         43:2a:ba:f4:ac:94:fb:7b:cb:12:d5:a7:a8:46:d7:af:8d:f0:
         03:89:53:d3:be:3c:7d:96:cb:93:10:ac:10:f0:e2:98:eb:67:
         24:d5:d5:36
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
MTMzNTExMC8GA1UEBRMoREQxMkVENzNBQ0IwNTE0RTAzRjI2Nzg4NEQ0MzVDRkJD
ODg5NUU0QzAeFw0yNjA1MTEwOTAwNDNaFw0yNjA1MTgwOTAwNDNaMBgxFjAUBgNV
BAMTDTZhMDE5YWJiLTY3MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCwnSbYzEfc/QbHNpXW1SBg/T4AUfAxYF/Rr3fNlKlfMPHz8erw9H+SkPg+PvF/
Foy45dEWqELgVrtdYg5ZytPzvjlDoB63qkIoTHLB4l4tTbhYfd0Hw7LFuXStr8Y1
zO+RaBqFFOtLqXPBQVYkOBlI2nXyzzjF09u0ZuPWGv2qCS98CL9QnE5D8w5F86JE
MGqAL6EItiuV5hT/zRi97mcb16mjT7gyhnxaEljrA87UX06XDX3Rlm9yUPLVVHap
80B3cUF8f5kQiRleQEMT1uI18hGRY2sgEjbFf4K5z5HO0YuUcXb5BlamX10/w5/F
tciUEwTxcAJCr+DHhlPVbX7ZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUXEIMiwmA
MShjzsrI3UphLugjlR0wHwYDVR0jBBgwFoAU3RLtc6ywUU4D8meITUNc+8iJXkww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIxMzM1LzkzRjM3Q0QwMThC
QjExRjE4NTdEQTQ2NTBCM0Q4QzY3LzNSTHRjNnl3VVU0RDhtZUlUVU5jLThpSlhr
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvM1JMdGM2eXdVVTREOG1lSVRVTmMtOGlKWGt3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIx
MzM1LzkzRjM3Q0QwMThCQjExRjE4NTdEQTQ2NTBCM0Q4QzY3LzNSTHRjNnl3VVU0
RDhtZUlUVU5jLThpSlhrdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAOmLyMwInc9s4yXZLJwUBsmQ5LDM+aazj7MSHhJQNe73oADjluSy5NrvdJWc0/
j2DlHCUxXgGd+LDm6ixUm0NvXtKL8QAXzsNZHZcGaZIQnsZaAhfWyeRh/TCgQuhi
RzbuWFKaAMmZ5fouScR6HtIqGSyqStKSwum9MeuhpdsU1FoGevIYeJ2Pd0JmUryP
w8x/iZhsQnlFSda7YZdyMIcJA4iUWeDbbc9vJKlap54D+Xz2fVTUjy6JX+ijIpiX
HYdyVAkLn4b4uiHK5bebarqxYBOKjoRZeJVDKrr0rJT7e8sS1aeoRtevjfADiVPT
vjx9lsuTEKwQ8OKY62ck1dU2
-----END CERTIFICATE-----
Generated at Wed May 13 08:58:17 2026 by rpki-client