Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AFC/2921D1D40FDA11F1AD0F898F043D8C67/LThammVNvyfyEuUykzG0AdAlKDo.mft
File:                     LThammVNvyfyEuUykzG0AdAlKDo.mft (raw, json)
Hash identifier:          4EMqTfK3y7PMhOLrY6nasj5Kmj1+NPkWXH4uYESkfy8=
Subject key identifier:   C7:F3:54:7F:DF:1B:58:74:06:DC:C4:98:61:3C:22:CE:6B:32:71:8A
Authority key identifier: 2D:38:5A:9A:65:4D:BF:27:F2:12:E5:32:93:31:B4:01:D0:25:28:3A
Certificate issuer:       /CN=A9178AFC/serialNumber=2D385A9A654DBF27F212E5329331B401D025283A
Certificate serial:       17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LThammVNvyfyEuUykzG0AdAlKDo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178AFC/2921D1D40FDA11F1AD0F898F043D8C67/LThammVNvyfyEuUykzG0AdAlKDo.mft
Manifest number:          17
Signing time:             Wed 25 Mar 2026 08:13:03 +0000
Manifest this update:     Wed 25 Mar 2026 08:13:02 +0000
Manifest next update:     Wed 01 Apr 2026 08:13:02 +0000
Files and hashes:         1: LThammVNvyfyEuUykzG0AdAlKDo.crl (hash: aUhL14FRLT45YGpfANNc8A/Vl/oyf8oXVzkZVRI16BQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178AFC/2921D1D40FDA11F1AD0F898F043D8C67/LThammVNvyfyEuUykzG0AdAlKDo.crl
                          rsync://rpki.apnic.net/member_repository/A9178AFC/2921D1D40FDA11F1AD0F898F043D8C67/LThammVNvyfyEuUykzG0AdAlKDo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LThammVNvyfyEuUykzG0AdAlKDo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:13:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178AFC, serialNumber=2D385A9A654DBF27F212E5329331B401D025283A
        Validity
            Not Before: Mar 25 08:13:02 2026 GMT
            Not After : Apr  1 08:13:02 2026 GMT
        Subject: CN=69c3990f-15ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d6:eb:49:22:89:a0:c0:58:11:f9:5f:24:90:
                    99:85:af:5d:b7:ef:32:d1:47:46:2b:03:61:0f:54:
                    ee:d5:57:c0:44:76:05:5c:54:26:63:c3:d0:e8:7f:
                    77:7d:e6:d1:7e:58:77:08:8d:eb:0b:7f:9b:0d:9c:
                    29:0b:9c:7a:ce:53:a4:0b:53:1d:f9:a8:07:c9:92:
                    a8:73:dd:0a:9e:0d:d2:d9:4e:d7:f7:c1:ca:81:8c:
                    6a:ff:87:13:0a:91:ea:cd:d8:52:9e:de:51:8a:e6:
                    55:82:bf:e4:c1:ff:66:84:40:3c:83:d4:ae:8f:22:
                    c1:62:f2:06:a0:6b:49:d7:8d:32:ec:81:f5:d3:38:
                    48:68:66:67:98:de:af:b8:69:a5:c9:b6:96:eb:52:
                    b1:80:ab:e6:b0:67:7c:a6:94:ba:86:29:06:74:b7:
                    03:86:81:4a:60:03:e4:1d:86:01:62:e4:fe:30:e3:
                    94:a2:d2:4b:3c:4a:15:36:80:60:44:29:a5:76:bf:
                    0e:91:bd:25:30:f1:8a:fd:fd:56:f4:93:79:f0:9c:
                    1f:d7:8b:cd:fc:64:5e:e0:65:5f:51:a9:aa:24:e8:
                    ce:bb:2d:8d:62:9c:ef:fa:b4:0d:05:12:1a:32:96:
                    31:4c:92:3e:35:9f:02:7c:db:6f:f6:d7:bd:95:b6:
                    08:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F3:54:7F:DF:1B:58:74:06:DC:C4:98:61:3C:22:CE:6B:32:71:8A
            X509v3 Authority Key Identifier:
                keyid:2D:38:5A:9A:65:4D:BF:27:F2:12:E5:32:93:31:B4:01:D0:25:28:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178AFC/2921D1D40FDA11F1AD0F898F043D8C67/LThammVNvyfyEuUykzG0AdAlKDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LThammVNvyfyEuUykzG0AdAlKDo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AFC/2921D1D40FDA11F1AD0F898F043D8C67/LThammVNvyfyEuUykzG0AdAlKDo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:ad:9b:cf:52:d8:d7:b2:0a:1c:79:0d:bf:da:25:27:fd:42:
         7a:b7:59:39:e8:35:7e:b1:27:d0:a7:9c:4f:2e:51:c9:bd:f8:
         ff:b0:4e:57:00:d0:c9:82:eb:92:34:4e:68:5c:da:c7:57:cf:
         4f:9e:e0:71:aa:fa:0e:39:44:77:eb:b3:51:c1:af:28:6d:32:
         f4:34:59:24:69:60:cb:54:43:f6:5c:b4:a9:7e:6b:33:a7:4b:
         62:11:0a:49:a9:eb:44:48:17:bc:5a:b0:21:fb:ec:1e:33:d4:
         4e:03:32:e8:10:b8:55:12:7a:03:41:7c:3a:8d:56:9d:ca:02:
         36:98:9c:47:19:33:7e:66:4d:fa:e9:57:4a:df:ae:9a:d2:49:
         56:42:d1:59:86:0b:f3:68:44:3e:c6:4a:b2:22:23:da:fc:e6:
         23:82:87:0f:c8:f8:28:7c:f9:33:a1:4c:dc:47:a7:85:0a:25:
         ff:84:b9:a9:e9:89:cf:af:00:be:ab:85:a3:4b:9e:d9:b1:00:
         b5:be:f6:dc:ed:1a:91:bc:77:b4:af:7c:9d:ce:16:18:01:cf:
         40:8c:63:25:6b:16:59:b9:4b:87:94:b6:b3:f0:1d:ca:6a:da:
         66:89:a6:3b:50:10:43:e5:ff:6f:d8:3e:97:7c:13:6a:50:55:
         a5:80:18:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:16:00 2026 by rpki-client