Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176DA8/9006CC30271611F1A41F8856A3833773/60Y5e044RmfgPE26UHVUDwA30bg.mft
File:                     60Y5e044RmfgPE26UHVUDwA30bg.mft (raw, json)
Hash identifier:          2EI8QJbs2YY8WSHeRMpGn268ruJKeUjTPnpu1p5RbYU=
Subject key identifier:   0D:8B:41:C7:67:13:80:76:33:25:2A:42:73:C1:F9:2A:5A:2C:20:2B
Authority key identifier: EB:46:39:7B:4E:38:46:67:E0:3C:4D:BA:50:75:54:0F:00:37:D1:B8
Certificate issuer:       /CN=A9176DA8/serialNumber=EB46397B4E384667E03C4DBA5075540F0037D1B8
Certificate serial:       03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60Y5e044RmfgPE26UHVUDwA30bg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176DA8/9006CC30271611F1A41F8856A3833773/60Y5e044RmfgPE26UHVUDwA30bg.mft
Manifest number:          03
Signing time:             Wed 25 Mar 2026 08:26:28 +0000
Manifest this update:     Wed 25 Mar 2026 08:26:27 +0000
Manifest next update:     Wed 01 Apr 2026 08:26:27 +0000
Files and hashes:         1: 60Y5e044RmfgPE26UHVUDwA30bg.crl (hash: p1beYsMcAIKqhwaVunDFLrOH81euYdyqv7/J4KEGYBU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176DA8/9006CC30271611F1A41F8856A3833773/60Y5e044RmfgPE26UHVUDwA30bg.crl
                          rsync://rpki.apnic.net/member_repository/A9176DA8/9006CC30271611F1A41F8856A3833773/60Y5e044RmfgPE26UHVUDwA30bg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60Y5e044RmfgPE26UHVUDwA30bg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:26:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176DA8, serialNumber=EB46397B4E384667E03C4DBA5075540F0037D1B8
        Validity
            Not Before: Mar 25 08:26:27 2026 GMT
            Not After : Apr  1 08:26:27 2026 GMT
        Subject: CN=69c39c34-14d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:67:52:6b:da:ea:96:05:69:b0:dd:e6:c8:f9:
                    02:51:03:73:f6:b1:83:de:f4:5b:92:c2:63:77:cf:
                    d8:85:21:70:3b:45:42:eb:d6:3d:40:98:bd:ba:6a:
                    c6:2a:6d:26:ef:88:c3:bf:dc:1f:a3:4a:6b:f7:54:
                    d0:7f:2b:37:81:9a:ae:ab:d0:62:e2:a5:9f:18:28:
                    82:d5:ea:f3:9a:c5:b7:37:68:6e:9f:e8:80:75:e7:
                    96:86:af:19:31:84:1c:ea:1c:77:f0:87:2a:68:ac:
                    51:eb:28:7e:d8:64:9f:32:15:9f:e0:e9:5e:0f:3c:
                    1d:59:38:53:29:db:ef:59:cd:6f:2a:51:42:8c:54:
                    c1:ce:ad:12:b0:ec:d1:ca:81:27:20:09:ba:de:23:
                    ec:45:3b:00:66:02:60:d1:f7:7c:23:f2:39:9c:89:
                    41:6a:d8:50:d7:8e:e1:49:90:f4:8d:a4:e6:07:6a:
                    fe:a1:d8:4b:bf:b6:b7:10:8d:72:7b:b7:bf:96:1a:
                    d6:6c:5e:85:84:7c:e7:66:94:39:8e:41:50:f3:51:
                    39:32:fc:89:ca:29:3c:6c:7d:ce:85:57:fb:e8:b7:
                    4f:e6:29:ae:e0:02:f8:d4:33:61:b0:d7:f5:00:21:
                    d5:4a:42:ff:fa:ff:cb:eb:69:6b:ed:a4:57:f9:f2:
                    69:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:8B:41:C7:67:13:80:76:33:25:2A:42:73:C1:F9:2A:5A:2C:20:2B
            X509v3 Authority Key Identifier:
                keyid:EB:46:39:7B:4E:38:46:67:E0:3C:4D:BA:50:75:54:0F:00:37:D1:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176DA8/9006CC30271611F1A41F8856A3833773/60Y5e044RmfgPE26UHVUDwA30bg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60Y5e044RmfgPE26UHVUDwA30bg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176DA8/9006CC30271611F1A41F8856A3833773/60Y5e044RmfgPE26UHVUDwA30bg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:b0:d8:0a:8b:ef:7e:9a:9d:92:7b:5c:cc:ae:ce:41:72:47:
         7f:33:6e:04:a7:f4:d6:d0:04:34:c6:c3:06:6f:7f:b8:5c:99:
         5c:ed:14:84:3b:e2:db:d6:54:56:05:2c:12:d5:39:5c:df:e6:
         61:5e:31:77:1a:29:17:7b:3e:ab:d8:da:66:a0:71:f6:17:24:
         8b:ee:90:e0:f9:12:3b:9e:51:7a:ab:93:23:77:23:f6:39:1f:
         94:e9:01:c1:fd:36:e6:92:a3:b0:26:95:8b:14:0c:75:e8:82:
         92:bc:7a:d6:83:bd:4d:dd:4f:f6:15:46:ab:d4:c9:93:f9:24:
         bd:8f:22:5d:dd:1c:59:aa:99:94:54:27:96:63:7f:41:1a:10:
         9c:07:bc:c1:2b:65:3b:e7:7e:9a:d6:1f:f7:d3:a7:e7:49:6d:
         cc:8a:86:d8:a8:b9:23:82:7e:4b:21:63:69:3f:ae:02:52:15:
         79:fe:bd:5e:ea:ef:bd:95:f6:74:1a:1f:c7:13:8e:c4:0d:ef:
         bc:9a:26:15:2b:98:08:f7:d3:0f:19:d1:e5:26:7a:34:7b:ed:
         49:64:42:81:2f:32:0c:94:62:6c:fd:cb:2c:5c:6a:30:bf:5d:
         9b:4f:0a:41:8e:f1:21:42:68:92:b2:22:d0:13:20:30:cf:fd:
         29:ef:c5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:12:21 2026 by rpki-client