Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft
File:                     l0tKVlSG4EjQwXaY1yJ2cM88mac.mft (raw, json)
Hash identifier:          epv5H85eym9roG5xMkZ+2WI/woq8L5D+vkeCj9MgP94=
Subject key identifier:   0E:B8:9E:FB:72:72:44:2D:BD:D4:55:42:16:84:ED:51:14:D0:2B:B0
Authority key identifier: 97:4B:4A:56:54:86:E0:48:D0:C1:76:98:D7:22:76:70:CF:3C:99:A7
Certificate issuer:       /CN=A916069A/serialNumber=974B4A565486E048D0C17698D7227670CF3C99A7
Certificate serial:       0103
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft
Manifest number:          0103
Signing time:             Wed 25 Mar 2026 05:17:01 +0000
Manifest this update:     Wed 25 Mar 2026 05:17:01 +0000
Manifest next update:     Wed 01 Apr 2026 05:17:01 +0000
Files and hashes:         1: l0tKVlSG4EjQwXaY1yJ2cM88mac.crl (hash: /Mqfoga5K8ivhow21Ake1r7LlUgsJYnqGr1irgCPX8Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.crl
                          rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:17:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 259 (0x103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916069A, serialNumber=974B4A565486E048D0C17698D7227670CF3C99A7
        Validity
            Not Before: Mar 25 05:17:01 2026 GMT
            Not After : Apr  1 05:17:01 2026 GMT
        Subject: CN=69c36fcd-8d51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0d:7f:ac:e3:6d:0d:07:06:c9:1a:89:d0:e6:
                    53:60:1d:6f:96:b3:d5:58:f6:15:c1:b7:a0:63:a7:
                    78:1d:1f:61:c1:0c:d8:9c:94:ea:76:03:d9:84:0a:
                    4d:7e:0f:fa:a3:34:a4:fe:cd:ec:7b:c3:11:0f:94:
                    88:c7:a6:43:61:46:9f:f1:0c:71:b9:19:d3:b8:e4:
                    0f:4e:27:e1:69:d0:bf:3c:ff:d4:00:bc:a6:8d:47:
                    33:c6:95:c1:74:3a:a3:7f:22:ca:8f:73:33:a0:e7:
                    04:f7:b8:0d:5b:f8:78:0c:be:63:e8:75:28:0a:fc:
                    16:9c:97:24:6a:bf:d0:1c:8e:b6:c3:9a:c5:c8:b6:
                    72:63:1d:d0:a1:2b:01:de:c9:01:ec:ce:d3:3a:27:
                    d5:24:c8:31:4a:71:fc:17:93:44:f4:9a:b2:a1:0f:
                    38:33:9e:a9:ea:de:e8:27:9a:9a:94:e2:9a:c0:98:
                    7e:c5:0f:ae:ac:67:93:0c:99:ea:a1:42:8a:97:d0:
                    38:e3:17:55:ce:a1:21:e2:96:18:6f:05:f8:c6:b1:
                    85:60:57:04:45:81:5f:f1:49:7d:1c:85:83:b1:93:
                    c3:72:94:85:4c:90:5c:4e:83:51:15:51:d9:16:c8:
                    a8:a7:9c:fe:27:61:24:77:c0:63:84:05:cd:0d:88:
                    ff:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B8:9E:FB:72:72:44:2D:BD:D4:55:42:16:84:ED:51:14:D0:2B:B0
            X509v3 Authority Key Identifier:
                keyid:97:4B:4A:56:54:86:E0:48:D0:C1:76:98:D7:22:76:70:CF:3C:99:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:5c:65:77:fe:0d:d0:18:f5:85:73:a4:78:ad:73:8a:51:c7:
         25:88:28:ab:f1:42:4c:72:ed:87:ca:84:4e:47:7b:ec:bd:8e:
         5f:20:76:9c:9e:f0:14:f9:d0:6f:c9:58:d3:07:98:64:af:de:
         1e:06:32:0d:7c:fe:11:80:27:06:58:ac:72:31:eb:26:a5:b8:
         ee:8e:8f:3b:c1:1b:37:d7:79:ec:45:08:8a:f2:9b:8f:f5:6c:
         62:e4:10:7a:92:8c:a6:3f:0f:33:62:92:9a:26:33:a1:13:9f:
         57:9c:91:2e:98:d9:de:b6:b5:40:fb:6f:90:4a:40:df:f7:7e:
         d7:db:80:b0:29:15:81:3a:f9:e1:dc:73:0c:68:e2:66:f6:69:
         21:bf:14:1a:7f:b1:53:d3:cd:de:d8:84:45:40:95:62:86:8d:
         01:ac:f8:f3:24:f7:67:50:40:33:c6:ab:60:60:08:52:c0:4b:
         a1:7d:da:06:ee:eb:e9:e1:b6:3a:cd:d7:9e:3f:47:6f:19:8b:
         f0:18:82:43:16:a5:9b:0d:99:6e:59:ef:81:a7:56:39:57:b9:
         fe:e3:60:d2:8c:a5:0c:c0:a1:20:d6:b3:ec:73:67:73:63:91:
         b4:4c:c6:c1:36:55:2d:d8:e6:76:46:48:63:17:5f:be:79:24:
         23:12:a2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:52:48 2026 by rpki-client