Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft
File:                     p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft (raw, json)
Hash identifier:          rM/qgxzR0s9yHfTWlZEy8et6TFhLmkyvgtBqMJHLCHE=
Subject key identifier:   BF:69:EB:17:1C:6C:3D:E0:7B:79:B8:6D:D7:0E:F6:E6:4A:C2:3A:7F
Authority key identifier: A7:FE:12:86:56:82:2F:26:21:A4:A0:FF:95:63:42:78:07:98:C4:F0
Certificate issuer:       /CN=A9132933/serialNumber=A7FE128656822F2621A4A0FF956342780798C4F0
Certificate serial:       07B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_4ShlaCLyYhpKD_lWNCeAeYxPA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft
Manifest number:          07A9
Signing time:             Thu 26 Mar 2026 21:20:12 +0000
Manifest this update:     Thu 26 Mar 2026 21:20:12 +0000
Manifest next update:     Thu 02 Apr 2026 21:20:12 +0000
Files and hashes:         1: p_4ShlaCLyYhpKD_lWNCeAeYxPA.crl (hash: nnWvaWda5A18K1KJsa55AP2rCBToiQgC3i18pJJNiPU=)
                          2: F2A90B8C3ECD11EBADC7D32AC4F9AE02.roa (hash: jVzme03Vu2I79tu0fHCymwNgLThfYA82/QOq/I44Au4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.crl
                          rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_4ShlaCLyYhpKD_lWNCeAeYxPA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 21:20:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1969 (0x7b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132933, serialNumber=A7FE128656822F2621A4A0FF956342780798C4F0
        Validity
            Not Before: Mar 26 21:20:12 2026 GMT
            Not After : Apr  2 21:20:12 2026 GMT
        Subject: CN=69c5a30c-7dfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:00:1f:12:13:0c:d8:ed:d1:d7:b0:ac:2d:2c:
                    bc:2e:3a:82:fa:a1:37:cd:71:7b:b9:62:37:3f:8b:
                    2a:d1:27:c0:8f:b8:eb:1c:13:38:12:6d:cc:b9:b6:
                    9d:38:45:7b:9a:4e:e7:e2:7d:71:0a:46:a4:0b:b5:
                    27:30:c0:99:bc:2b:a2:c1:a3:a8:55:21:3c:7b:a7:
                    d6:5a:f6:f5:f0:0c:a9:71:3b:13:5f:ba:fa:d4:b5:
                    94:46:93:a1:7d:65:5e:45:8a:85:76:1f:56:22:c6:
                    e1:0f:36:5c:ca:89:80:45:27:62:6f:9d:5e:6c:19:
                    ac:ab:41:cf:36:3a:69:a7:4f:6c:a9:48:00:42:0f:
                    7d:d3:18:19:e4:87:49:cd:4d:fd:50:8d:f5:e6:12:
                    76:78:31:f6:85:11:8f:91:3b:35:76:bc:0c:49:c9:
                    70:bf:a0:46:43:fa:8f:25:9d:88:e8:56:4b:43:63:
                    05:6b:30:93:e6:28:42:5a:a4:fc:86:5f:23:52:31:
                    29:ce:3f:72:40:de:30:f8:99:09:df:c8:d2:ed:27:
                    6f:f5:8a:87:3d:37:45:4d:26:e0:54:80:8f:d1:b2:
                    cd:c2:6e:14:99:7a:93:64:97:52:e3:5c:57:fc:97:
                    35:2e:13:3d:fd:f3:8b:06:31:57:2b:5c:7b:db:b7:
                    6a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:69:EB:17:1C:6C:3D:E0:7B:79:B8:6D:D7:0E:F6:E6:4A:C2:3A:7F
            X509v3 Authority Key Identifier:
                keyid:A7:FE:12:86:56:82:2F:26:21:A4:A0:FF:95:63:42:78:07:98:C4:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_4ShlaCLyYhpKD_lWNCeAeYxPA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:57:19:34:0c:e0:40:b2:fb:b6:f2:03:b9:a7:39:41:de:27:
         76:70:a4:36:39:76:ba:b0:69:5c:c7:0e:28:3e:ee:c7:93:7a:
         18:74:3e:4a:f1:38:b2:8c:90:0a:56:d6:a0:a0:72:e4:33:17:
         12:4f:0f:83:cb:42:cf:af:1c:43:6b:bb:1b:34:51:8c:d8:98:
         7c:a5:e9:e7:4c:3b:0c:4b:94:0e:48:c6:d9:12:1a:0d:92:f9:
         2d:e3:d0:23:a9:15:e9:9f:78:b1:6b:be:96:83:f3:a2:f3:b3:
         83:07:40:ee:d5:f8:85:40:46:45:67:5b:6a:8a:6e:a5:12:8a:
         6a:32:0b:28:88:5a:10:56:10:de:df:ab:6a:26:48:dc:f3:70:
         d4:f9:01:18:0a:d2:d6:13:b9:d5:ce:c9:d2:d9:fc:fd:8c:7b:
         3e:98:f9:7c:1c:76:db:76:8b:d2:90:cc:91:85:4f:3f:ea:7f:
         87:0b:81:d1:0d:46:4c:9f:f4:de:03:c1:88:b6:9b:90:80:98:
         8c:a8:46:0c:07:21:ab:dc:c0:bb:52:17:12:ae:8a:0f:bf:66:
         ce:06:f2:d8:7e:a0:c6:3e:09:ff:f8:d2:89:a9:38:bb:8d:e9:
         f7:9e:cc:48:41:b6:0f:31:f2:4d:48:e1:ca:41:2f:de:ab:24:
         31:0d:9c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:35:31 2026 by rpki-client