Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft
File:                     cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft (raw, json)
Hash identifier:          WOOmxw441nlhMQopHl5YkxGVlLbGA5bVAv9saX8lbxk=
Subject key identifier:   D1:FF:83:C2:7A:2F:1A:50:D6:1F:A9:0F:02:19:D4:92:8E:0C:35:1F
Authority key identifier: 72:F2:CB:33:D7:7C:16:38:99:E5:35:0D:8E:80:1E:71:70:E4:84:DE
Certificate issuer:       /CN=A9143C5C/serialNumber=72F2CB33D77C163899E5350D8E801E7170E484DE
Certificate serial:       0A2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft
Manifest number:          0A1A
Signing time:             Tue 24 Mar 2026 19:37:32 +0000
Manifest this update:     Tue 24 Mar 2026 19:37:31 +0000
Manifest next update:     Tue 31 Mar 2026 19:37:31 +0000
Files and hashes:         1: cvLLM9d8FjiZ5TUNjoAecXDkhN4.crl (hash: 6aRtCz/YQrQ+0vDFgsPRgrD0jsUEYYWiLEpLD7ymKqk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.crl
                          rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:37:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2607 (0xa2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143C5C, serialNumber=72F2CB33D77C163899E5350D8E801E7170E484DE
        Validity
            Not Before: Mar 24 19:37:31 2026 GMT
            Not After : Mar 31 19:37:31 2026 GMT
        Subject: CN=69c2e7fc-6288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:36:e3:ec:7e:b4:0e:6c:7f:78:ce:ed:97:b9:
                    d7:48:de:20:c7:c5:2e:bd:be:53:6c:4e:ae:ee:1b:
                    0c:78:7d:3a:64:d7:bd:b3:1e:10:ca:e2:99:48:01:
                    c9:5c:07:f5:8b:c7:ae:69:c0:d6:64:3b:b0:53:92:
                    24:b9:4d:40:fa:11:d6:28:08:54:20:e7:77:8c:89:
                    41:7c:a2:9d:b0:d5:a9:f5:f3:84:05:a4:b1:d1:3e:
                    f3:32:40:92:8d:9e:48:51:ca:6e:ac:e1:c6:9b:02:
                    fa:a1:cc:d2:e0:01:a6:5a:26:54:6d:0e:ae:86:3f:
                    ee:e5:4f:33:f5:9c:63:82:bb:58:ef:63:34:30:56:
                    a6:be:17:89:77:08:de:a0:33:95:82:61:93:b5:e5:
                    0e:80:8d:e2:e4:22:43:97:04:01:32:82:51:96:ff:
                    a3:5c:7b:50:64:6b:02:89:d5:5c:42:87:b6:42:f0:
                    c1:92:86:28:69:cb:d5:9a:12:d8:5a:e3:b7:d3:82:
                    1f:b4:8c:e7:1d:db:b4:62:a8:a7:41:1d:6c:8b:51:
                    33:ec:ef:a8:39:90:93:70:7f:b5:40:63:da:44:3f:
                    6c:fb:bf:02:e2:8e:1a:1d:d8:99:fa:5d:92:d8:db:
                    41:c9:a6:9c:1c:f4:32:a8:94:b0:54:7d:4c:7e:18:
                    28:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:FF:83:C2:7A:2F:1A:50:D6:1F:A9:0F:02:19:D4:92:8E:0C:35:1F
            X509v3 Authority Key Identifier:
                keyid:72:F2:CB:33:D7:7C:16:38:99:E5:35:0D:8E:80:1E:71:70:E4:84:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:d2:ad:37:bb:5c:35:23:01:c2:f3:b8:2c:fd:2b:b1:29:84:
         7b:31:43:81:4a:b9:61:0a:f1:c9:14:6a:a8:5c:52:c3:a1:bc:
         57:cd:54:1a:2f:65:49:0a:4b:49:46:18:37:e8:bb:00:ab:ff:
         a9:38:1f:a9:fb:04:7f:37:5f:2f:71:bc:5f:b3:5a:4c:17:15:
         73:53:5c:cc:e6:8b:65:2d:e7:48:4f:98:ab:4e:6e:41:84:37:
         42:91:2e:81:52:f1:a6:b1:d2:b2:f5:73:fc:09:c5:dd:84:42:
         55:34:10:80:cb:ae:ba:50:b4:7d:45:dd:ca:fa:a8:7d:c6:17:
         28:38:6e:4f:78:f6:2e:c5:83:1e:57:8d:64:42:37:0c:9e:7d:
         d9:01:f5:7b:07:9f:e0:ca:f8:50:a5:d8:1d:46:7c:70:fe:87:
         cd:69:f2:3b:df:88:02:7f:b5:31:86:33:9c:5b:79:31:c0:41:
         28:f1:8b:5a:91:3c:2e:90:89:7c:bb:69:08:3f:05:7c:69:cb:
         c1:f4:d9:6d:1c:6e:ac:41:ad:89:ec:46:39:e5:e1:82:de:93:
         7e:89:cb:8f:17:ab:ea:c8:c0:af:8a:6a:d8:7e:a6:3c:46:ad:
         1a:6f:c4:fa:25:50:80:81:c8:62:b0:38:b8:5b:6e:5f:89:51:
         61:db:12:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:45 2026 by rpki-client