Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft
File:                     Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft (raw, json)
Hash identifier:          PTOQAb02B94sagZiqmFrtsUDykupfownfBo8qeJRwcI=
Subject key identifier:   3B:BD:3E:2E:2D:D0:A6:F0:AA:17:DA:16:D8:58:55:42:BA:BB:E4:B5
Authority key identifier: 36:7E:1F:AF:75:2C:63:1F:C4:3D:87:20:98:24:0E:80:32:15:75:C7
Certificate issuer:       /CN=A9150A9C/serialNumber=367E1FAF752C631FC43D872098240E80321575C7
Certificate serial:       0996
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft
Manifest number:          09D6
Signing time:             Tue 24 Mar 2026 19:48:19 +0000
Manifest this update:     Tue 24 Mar 2026 19:48:19 +0000
Manifest next update:     Tue 31 Mar 2026 19:48:19 +0000
Files and hashes:         1: Nn4fr3UsYx_EPYcgmCQOgDIVdcc.crl (hash: DoAIGVRDFhHFHO4EEqedwIbNXzAUgXWr6deVHBAQKF0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.crl
                          rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:48:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2454 (0x996)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150A9C, serialNumber=367E1FAF752C631FC43D872098240E80321575C7
        Validity
            Not Before: Mar 24 19:48:19 2026 GMT
            Not After : Mar 31 19:48:19 2026 GMT
        Subject: CN=69c2ea83-633e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:11:8b:6c:40:ef:45:34:f1:90:69:08:f7:25:
                    12:60:4f:68:39:3c:b7:1b:77:c2:c8:be:93:ba:37:
                    05:e2:cc:37:f2:67:78:fc:74:bc:52:08:45:92:1e:
                    bf:e2:25:02:dc:04:5d:a9:a7:f8:68:a9:e0:32:f2:
                    52:e1:30:54:ec:59:c8:9e:76:a5:31:30:6c:7e:ef:
                    58:fd:6b:85:37:1e:8c:0d:a8:28:98:db:b5:3f:fc:
                    08:1d:22:ab:47:09:57:c9:9f:ab:3d:c5:e9:ad:32:
                    39:f6:45:fa:f5:b5:f3:98:12:67:dc:3a:a5:35:ce:
                    85:5a:ac:f1:3b:27:f4:6d:45:d9:57:35:98:98:ba:
                    21:bb:56:21:81:c0:c4:dc:86:49:ff:a0:9e:8f:d7:
                    79:34:90:7b:39:e3:e2:26:d1:6b:95:b8:a4:58:7b:
                    e0:45:c7:2a:dc:58:1d:5e:23:19:58:ae:93:1d:55:
                    70:92:1d:95:23:24:8b:a2:c6:3c:31:b4:6e:f7:71:
                    42:bd:32:14:32:47:f2:63:90:b5:50:df:f3:34:af:
                    84:4a:7f:e2:a0:92:25:ed:68:9a:25:90:b7:49:26:
                    43:8a:26:35:aa:4d:2a:0d:8a:ad:80:12:ef:ae:40:
                    1a:fe:5e:d5:3e:76:79:7c:43:4d:09:29:5d:63:1e:
                    09:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:BD:3E:2E:2D:D0:A6:F0:AA:17:DA:16:D8:58:55:42:BA:BB:E4:B5
            X509v3 Authority Key Identifier:
                keyid:36:7E:1F:AF:75:2C:63:1F:C4:3D:87:20:98:24:0E:80:32:15:75:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:fa:60:82:35:69:e7:d0:cf:21:e2:bf:f2:93:65:4b:20:d9:
         45:25:b4:70:1e:0a:dd:34:ba:29:17:ce:3a:14:bb:16:6f:c3:
         03:38:4a:ca:6a:7c:15:14:b7:02:af:67:ce:65:23:88:93:fd:
         a2:56:ec:7d:8f:61:84:51:bd:3e:68:9f:a4:e1:38:fb:d2:dd:
         dd:81:c4:d3:96:bb:55:ac:01:ae:8a:95:e7:c4:93:c2:87:0b:
         3d:cb:a8:1e:79:0a:f8:1a:21:25:6d:36:81:cb:51:e7:48:d5:
         7c:a7:45:48:04:78:5f:44:dc:6b:3a:d1:51:37:f5:62:1e:cd:
         60:33:9b:e9:54:8d:4f:df:5b:ff:41:d8:21:97:b3:d6:c3:a1:
         bb:23:4f:58:3e:63:0c:1d:23:d7:d0:2e:88:ad:6c:3c:69:ed:
         c0:68:5b:73:b6:f3:46:b7:8b:4c:56:e1:2b:fe:cf:38:95:b3:
         8f:b5:e7:17:6e:1c:ed:d1:79:71:58:f7:04:e7:5e:c6:9c:ca:
         09:27:3e:48:cf:5e:47:68:a6:d9:87:8d:07:01:3a:f2:0f:75:
         43:0e:e4:59:c1:7b:13:86:cf:04:73:a6:5d:9b:88:58:72:12:
         e2:1c:c9:08:4d:13:b7:27:e4:63:80:ed:19:8a:a5:e4:1b:ac:
         01:8f:01:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:56 2026 by rpki-client