Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121335/93F37CD018BB11F1857DA4650B3D8C67/3RLtc6ywUU4D8meITUNc-8iJXkw.mft
File:                     3RLtc6ywUU4D8meITUNc-8iJXkw.mft (raw, json)
Hash identifier:          KS/3HRuIirZaMzNeLGUM24hSCl1x+jw/gtma86oK34Y=
Subject key identifier:   F8:63:5B:A4:8B:FF:2E:1B:E8:30:F3:98:3E:32:74:5A:FA:75:F2:7E
Authority key identifier: DD:12:ED:73:AC:B0:51:4E:03:F2:67:88:4D:43:5C:FB:C8:89:5E:4C
Certificate issuer:       /CN=A9121335/serialNumber=DD12ED73ACB0514E03F267884D435CFBC8895E4C
Certificate serial:       0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RLtc6ywUU4D8meITUNc-8iJXkw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121335/93F37CD018BB11F1857DA4650B3D8C67/3RLtc6ywUU4D8meITUNc-8iJXkw.mft
Manifest number:          0C
Signing time:             Wed 25 Mar 2026 08:18:27 +0000
Manifest this update:     Wed 25 Mar 2026 08:18:27 +0000
Manifest next update:     Wed 01 Apr 2026 08:18:27 +0000
Files and hashes:         1: 3RLtc6ywUU4D8meITUNc-8iJXkw.crl (hash: R+JerZxsV0jySgu81/tSlvMTbJwX6+302ZJ74UQN590=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121335/93F37CD018BB11F1857DA4650B3D8C67/3RLtc6ywUU4D8meITUNc-8iJXkw.crl
                          rsync://rpki.apnic.net/member_repository/A9121335/93F37CD018BB11F1857DA4650B3D8C67/3RLtc6ywUU4D8meITUNc-8iJXkw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RLtc6ywUU4D8meITUNc-8iJXkw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:18:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121335, serialNumber=DD12ED73ACB0514E03F267884D435CFBC8895E4C
        Validity
            Not Before: Mar 25 08:18:27 2026 GMT
            Not After : Apr  1 08:18:27 2026 GMT
        Subject: CN=69c39a53-7a5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e0:e2:c8:41:58:62:8a:6b:5c:ef:a1:e1:c6:
                    fc:a5:e4:bf:65:36:b1:ee:73:f3:cf:27:d7:2c:08:
                    7f:53:91:80:85:ae:ab:57:a7:94:c2:3a:23:e4:76:
                    70:77:36:79:7d:d8:7d:8b:18:01:3a:42:c4:7a:b8:
                    d7:2f:df:54:1c:89:e0:22:4f:36:aa:53:b9:06:df:
                    5a:76:04:90:60:65:54:34:f3:16:fb:8f:05:12:a3:
                    05:ad:80:0a:f7:e0:a5:7b:ed:ea:63:b7:d2:9b:2c:
                    34:9b:37:26:34:a4:33:1a:c5:68:74:a1:ba:cb:e6:
                    4d:dc:ae:dd:b4:4b:d3:0d:1b:76:6b:80:68:55:eb:
                    83:1b:48:9f:45:af:e0:ae:d1:f1:a5:f1:b1:35:7d:
                    52:36:24:ca:9a:28:94:89:16:dc:3f:4e:4f:85:f3:
                    f7:c0:17:ff:64:15:c2:17:e9:9e:56:3c:eb:4f:41:
                    5b:a4:78:93:16:12:42:5f:8c:d4:45:18:33:24:42:
                    8b:77:2b:62:94:23:28:dc:b8:b8:b8:04:fd:64:5c:
                    0b:eb:e7:c9:3d:ff:7d:99:cb:60:88:e1:df:9d:5d:
                    2a:3b:2d:4e:28:ad:31:98:5f:76:47:cb:68:2c:07:
                    c1:98:46:11:f0:15:2e:80:e9:f0:2d:44:a1:5a:61:
                    da:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:63:5B:A4:8B:FF:2E:1B:E8:30:F3:98:3E:32:74:5A:FA:75:F2:7E
            X509v3 Authority Key Identifier:
                keyid:DD:12:ED:73:AC:B0:51:4E:03:F2:67:88:4D:43:5C:FB:C8:89:5E:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121335/93F37CD018BB11F1857DA4650B3D8C67/3RLtc6ywUU4D8meITUNc-8iJXkw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RLtc6ywUU4D8meITUNc-8iJXkw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121335/93F37CD018BB11F1857DA4650B3D8C67/3RLtc6ywUU4D8meITUNc-8iJXkw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:16:e9:f5:4e:6c:74:62:8e:f5:78:f3:1c:71:97:dd:70:98:
         f8:a6:67:c9:83:de:aa:d6:5a:c8:13:ca:5e:9d:6f:57:13:30:
         19:90:23:08:b5:3f:9f:0e:ba:b3:64:dc:6c:54:68:03:58:d3:
         1d:59:5e:de:92:9a:b0:19:e6:82:74:21:25:14:68:98:82:44:
         17:d0:8a:5f:18:15:9c:f0:ba:02:8a:9b:c9:46:de:18:d0:49:
         4e:d7:ed:2c:7c:b5:72:49:4f:23:43:b7:21:8e:43:d3:69:fd:
         9e:06:8e:98:37:f0:db:bb:af:b3:b8:79:30:35:a4:75:1f:ec:
         c5:75:fc:99:63:b5:f4:36:9e:0d:4f:d6:40:d6:62:bc:15:4e:
         1b:f6:a3:db:19:de:d5:9b:a3:27:6c:91:b5:ff:e4:52:a7:f2:
         d6:71:4d:fe:ee:ed:25:a1:12:39:65:4f:a0:e1:53:82:82:d7:
         d1:32:0a:5e:af:6a:12:78:52:15:f6:5f:17:41:47:8e:b3:5e:
         c1:cb:e2:62:e7:0a:98:13:c8:b1:35:65:9b:82:9d:d8:d5:d3:
         cd:3a:67:7c:fe:1e:1a:4d:20:40:8f:21:4f:91:00:a1:c4:ac:
         6d:e4:52:e8:e3:5c:95:81:6b:e3:fa:32:10:10:65:e0:30:bd:
         cb:77:b7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:21:54 2026 by rpki-client