Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft
File:                     9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft (raw, json)
Hash identifier:          GbgBTyPldsRZyC3e/u3kPwCZ47CCfTgQCXWC+I777wU=
Subject key identifier:   60:F9:27:9E:0D:67:50:71:FB:7B:5C:48:F5:4A:39:B5:DB:15:60:1E
Authority key identifier: F4:B0:38:5A:5D:CD:EF:E6:D4:EC:6C:6C:BC:EA:21:55:FD:60:57:17
Certificate issuer:       /CN=A913CE18/serialNumber=F4B0385A5DCDEFE6D4EC6C6CBCEA2155FD605717
Certificate serial:       41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LA4Wl3N7-bU7GxsvOohVf1gVxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft
Manifest number:          41
Signing time:             Wed 25 Mar 2026 07:35:34 +0000
Manifest this update:     Wed 25 Mar 2026 07:35:33 +0000
Manifest next update:     Wed 01 Apr 2026 07:35:33 +0000
Files and hashes:         1: 9LA4Wl3N7-bU7GxsvOohVf1gVxc.crl (hash: Qj9jFy1gdJCjTFcU00BzPgkb0ghPzOzCmnF/PJ0c6RQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.crl
                          rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LA4Wl3N7-bU7GxsvOohVf1gVxc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:35:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CE18, serialNumber=F4B0385A5DCDEFE6D4EC6C6CBCEA2155FD605717
        Validity
            Not Before: Mar 25 07:35:33 2026 GMT
            Not After : Apr  1 07:35:33 2026 GMT
        Subject: CN=69c39046-c29f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:dc:f7:7e:32:4a:85:7f:5b:90:2f:dd:ac:95:
                    64:8c:e1:17:19:12:3f:f3:14:f3:f7:d0:3f:2a:47:
                    31:f0:24:02:ec:fd:3b:92:82:7e:4f:91:b5:41:60:
                    63:69:4c:f0:c8:9f:bb:87:09:14:66:3e:5a:60:6a:
                    2b:fe:5c:3e:f0:cd:88:9c:ca:2f:88:9d:2c:08:bc:
                    17:5d:b3:1c:88:9e:1d:10:4a:a3:45:f5:ac:f6:b6:
                    00:16:41:a4:87:ab:3b:6d:65:63:3f:43:5f:5b:63:
                    27:69:65:0d:2e:15:83:e4:89:1d:af:78:ed:66:22:
                    4e:a0:59:ae:4a:4d:bb:57:a5:4f:3c:82:5e:1f:de:
                    89:9c:af:ab:da:7e:fd:a4:b7:52:38:15:4a:0e:a6:
                    bf:04:96:53:8c:eb:92:5a:ad:e7:2c:04:e9:77:be:
                    5e:dc:a3:71:d2:0b:35:fc:10:ca:79:b4:b2:01:49:
                    a0:05:2c:09:ba:b6:8d:f0:16:4a:3c:92:53:cc:ac:
                    37:48:e9:84:f1:0a:75:cc:07:d8:31:52:15:32:9a:
                    73:f9:29:59:e5:ca:3e:ce:b6:30:8c:6a:a2:5e:83:
                    3e:c7:49:f0:26:34:e2:d8:c9:4d:77:4d:e7:e4:49:
                    0b:0b:74:b2:0a:70:8a:20:77:36:01:1b:3d:94:b8:
                    ff:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F9:27:9E:0D:67:50:71:FB:7B:5C:48:F5:4A:39:B5:DB:15:60:1E
            X509v3 Authority Key Identifier:
                keyid:F4:B0:38:5A:5D:CD:EF:E6:D4:EC:6C:6C:BC:EA:21:55:FD:60:57:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LA4Wl3N7-bU7GxsvOohVf1gVxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:92:69:25:d0:03:93:96:1b:d3:d4:25:d7:08:dc:4c:88:ea:
         c0:e5:81:4a:bf:72:05:35:ae:e8:b2:a6:04:9b:65:d2:cc:29:
         f0:56:df:af:ad:1f:6a:7e:3a:21:22:4c:83:8c:83:0b:62:73:
         91:1a:f0:3f:fe:be:23:ae:9c:47:b5:a6:e0:6a:18:df:54:d9:
         d3:ac:55:bf:55:0f:37:aa:61:ed:a5:0f:6e:ab:3f:a3:c2:6d:
         eb:c2:d5:7d:bc:b5:e5:1d:4d:fe:57:cb:9a:f2:cf:0a:9b:e9:
         21:84:29:48:34:fc:66:b7:7f:50:51:6b:0a:cb:7c:8d:ad:b6:
         14:81:aa:25:ad:c0:08:8d:80:7c:78:8f:df:74:be:40:ed:49:
         58:0d:33:3a:ac:4b:c4:59:d3:c4:e4:fe:a2:61:f6:ac:0e:28:
         e1:4f:30:d9:6a:05:0a:fb:02:76:0f:12:c8:6b:c8:d7:1f:1d:
         fe:24:91:c2:88:02:65:ca:0d:52:e1:fb:d9:1c:2d:98:25:41:
         b0:07:b8:ce:a0:09:90:11:88:71:0d:dc:e7:45:65:41:d1:ac:
         cb:33:c2:5c:ae:4c:78:db:de:2d:11:da:a7:c4:85:f6:90:71:
         c0:34:99:80:dd:3c:7b:28:42:ab:c8:f2:0d:a9:90:98:c4:89:
         f1:ff:ec:ac
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
Q0UxODExMC8GA1UEBRMoRjRCMDM4NUE1RENERUZFNkQ0RUM2QzZDQkNFQTIxNTVG
RDYwNTcxNzAeFw0yNjAzMjUwNzM1MzNaFw0yNjA0MDEwNzM1MzNaMBgxFjAUBgNV
BAMTDTY5YzM5MDQ2LWMyOWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDW3Pd+MkqFf1uQL92slWSM4RcZEj/zFPP30D8qRzHwJALs/TuSgn5PkbVBYGNp
TPDIn7uHCRRmPlpgaiv+XD7wzYicyi+InSwIvBddsxyInh0QSqNF9az2tgAWQaSH
qzttZWM/Q19bYydpZQ0uFYPkiR2veO1mIk6gWa5KTbtXpU88gl4f3omcr6vafv2k
t1I4FUoOpr8EllOM65JarecsBOl3vl7co3HSCzX8EMp5tLIBSaAFLAm6to3wFko8
klPMrDdI6YTxCnXMB9gxUhUymnP5KVnlyj7OtjCMaqJegz7HSfAmNOLYyU13Tefk
SQsLdLIKcIogdzYBGz2UuP9vAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUYPknng1n
UHH7e1xI9Uo5tdsVYB4wHwYDVR0jBBgwFoAU9LA4Wl3N7+bU7GxsvOohVf1gVxcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNDRTE4L0JEREM0REI0QzY4
MjExRjBCQTVFMTc0NkM0RjlBRTAyLzlMQTRXbDNONy1iVTdHeHN2T29oVmYxZ1Z4
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvOUxBNFdsM043LWJVN0d4c3ZPb2hWZjFnVnhjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTND
RTE4L0JEREM0REI0QzY4MjExRjBCQTVFMTc0NkM0RjlBRTAyLzlMQTRXbDNONy1i
VTdHeHN2T29oVmYxZ1Z4Yy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQDCkmkl0AOTlhvT1CXXCNxMiOrA5YFKv3IFNa7osqYEm2XSzCnwVt+vrR9qfjoh
IkyDjIMLYnORGvA//r4jrpxHtabgahjfVNnTrFW/VQ83qmHtpQ9uqz+jwm3rwtV9
vLXlHU3+V8ua8s8Km+khhClINPxmt39QUWsKy3yNrbYUgaolrcAIjYB8eI/fdL5A
7UlYDTM6rEvEWdPE5P6iYfasDijhTzDZagUK+wJ2DxLIa8jXHx3+JJHCiAJlyg1S
4fvZHC2YJUGwB7jOoAmQEYhxDdznRWVB0azLM8Jcrkx4294tEdqnxIX2kHHANJmA
3Tx7KEKryPINqZCYxInx/+ys
-----END CERTIFICATE-----
Generated at Fri Mar 27 01:00:27 2026 by rpki-client