Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft
File:                     8SYNZTBeOoldssaRtq3APlGfPQA.mft (raw, json)
Hash identifier:          dIIgqLrWu8OUyy/cipDREGHhFvAqHCVuKdZbnV5L9Ic=
Subject key identifier:   80:E6:F8:0E:81:B9:74:BF:5E:0E:AD:82:49:39:7F:7E:F2:15:A4:6D
Authority key identifier: F1:26:0D:65:30:5E:3A:89:5D:B2:C6:91:B6:AD:C0:3E:51:9F:3D:00
Certificate issuer:       /CN=A9123F01/serialNumber=F1260D65305E3A895DB2C691B6ADC03E519F3D00
Certificate serial:       351E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SYNZTBeOoldssaRtq3APlGfPQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft
Manifest number:          351E
Signing time:             Thu 26 Mar 2026 15:11:36 +0000
Manifest this update:     Thu 26 Mar 2026 15:11:36 +0000
Manifest next update:     Thu 02 Apr 2026 15:11:36 +0000
Files and hashes:         1: 8SYNZTBeOoldssaRtq3APlGfPQA.crl (hash: rocrVcUQc1xh2VDY+qlV3990n0AVgQZmbtPuOp9gii0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.crl
                          rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SYNZTBeOoldssaRtq3APlGfPQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 15:11:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13598 (0x351e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123F01, serialNumber=F1260D65305E3A895DB2C691B6ADC03E519F3D00
        Validity
            Not Before: Mar 26 15:11:36 2026 GMT
            Not After : Apr  2 15:11:36 2026 GMT
        Subject: CN=69c54ca8-94b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:39:e2:19:51:18:b5:5b:47:b1:98:7b:9d:78:
                    75:63:cd:ca:44:a9:94:13:e6:2f:b3:7b:38:31:6f:
                    76:4a:fb:9f:26:e3:a9:a6:15:b8:48:46:b4:78:0f:
                    98:f0:76:47:ca:a8:e6:13:8f:a2:ce:35:95:36:67:
                    6f:7a:7e:54:96:ea:8f:50:38:cd:2b:55:0e:8c:93:
                    f3:cb:e5:e3:ed:dd:3c:53:28:76:e5:d1:4d:3a:cd:
                    fc:19:4b:36:25:aa:87:81:af:a4:da:a1:8d:bc:23:
                    96:c4:cc:e1:c1:e7:70:f9:df:81:7e:50:27:f9:6d:
                    41:e9:04:24:fd:a5:a4:8a:35:d7:8c:d4:de:80:e1:
                    85:e3:e9:c6:51:0c:50:c8:b7:cc:46:8d:ba:4a:89:
                    94:d0:70:21:29:4d:ae:47:90:2c:61:7c:46:16:9e:
                    82:1a:51:06:c1:93:62:83:5e:fb:53:72:59:7a:02:
                    b0:25:c9:71:ff:96:8a:a0:f5:84:e7:94:85:46:3a:
                    70:e1:58:53:92:d0:ea:62:22:5a:a4:7e:f1:11:e7:
                    cd:87:f6:ce:b7:4a:6f:a1:ac:4c:f9:58:72:9d:ce:
                    37:3a:88:ca:11:b8:f6:18:8e:e5:52:12:80:23:ea:
                    1e:18:69:83:c6:06:b7:3a:5f:b4:aa:6a:e8:00:59:
                    88:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E6:F8:0E:81:B9:74:BF:5E:0E:AD:82:49:39:7F:7E:F2:15:A4:6D
            X509v3 Authority Key Identifier:
                keyid:F1:26:0D:65:30:5E:3A:89:5D:B2:C6:91:B6:AD:C0:3E:51:9F:3D:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SYNZTBeOoldssaRtq3APlGfPQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:ad:9c:fe:d4:e6:5a:ab:08:1f:9d:9d:28:c3:0c:36:29:ee:
         ce:f0:da:3c:ab:d4:7f:c0:39:f7:b3:05:ad:c5:e0:f5:a6:f0:
         29:8c:ef:97:d7:60:20:f2:b1:00:df:ee:64:32:a5:a6:97:11:
         d1:7a:5e:2e:a6:cb:71:58:f9:f3:9e:4b:7a:09:0e:6f:bf:b6:
         82:4a:42:b5:80:f1:ed:e4:a5:5e:50:a3:62:a8:df:62:06:2f:
         9c:7e:c0:71:8d:65:18:ea:3e:62:7e:bd:6f:89:ff:1b:69:af:
         80:36:5f:c4:e2:af:a6:09:f4:4b:40:f6:2d:25:9b:f1:f0:00:
         9d:a9:20:88:5f:a4:c1:78:0d:05:02:4f:a7:24:6f:68:08:44:
         bc:c7:60:13:7c:0c:a9:ae:52:8d:c4:e9:ac:95:ac:cb:38:2c:
         e0:b8:50:c9:8a:2e:82:2e:2f:ab:52:72:97:ee:10:b5:d2:d4:
         19:52:88:ee:77:6b:3b:78:1f:29:1b:d3:35:b3:8f:24:9c:f0:
         34:ec:fd:d6:0d:a6:1d:56:ea:a8:8f:f0:71:8b:dc:ac:66:f8:
         88:cc:ed:86:96:d5:d5:7e:2f:7d:cd:48:50:82:a7:81:d2:2b:
         c7:72:ad:cf:9f:fa:68:90:0c:1b:59:5c:ca:8d:b7:1a:04:fc:
         e5:cf:a7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:42:20 2026 by rpki-client