Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft
File:                     ML4eudOsSdCv7hNTw_nRFnoAexc.mft (raw, json)
Hash identifier:          zP42SAQwH3BZ56Q6JiSgQPmD9AHZ1DXwP4O64qc4S2U=
Subject key identifier:   49:91:2D:31:B1:22:24:3A:D6:D2:19:C6:5C:F6:6E:A0:87:B7:9B:6F
Authority key identifier: 30:BE:1E:B9:D3:AC:49:D0:AF:EE:13:53:C3:F9:D1:16:7A:00:7B:17
Certificate issuer:       /CN=A917B736/serialNumber=30BE1EB9D3AC49D0AFEE1353C3F9D1167A007B17
Certificate serial:       012B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft
Manifest number:          011D
Signing time:             Wed 25 Mar 2026 05:04:15 +0000
Manifest this update:     Wed 25 Mar 2026 05:04:15 +0000
Manifest next update:     Wed 01 Apr 2026 05:04:15 +0000
Files and hashes:         1: ML4eudOsSdCv7hNTw_nRFnoAexc.crl (hash: Qh3V2UA/ivhWlo66INlrNXMNwBp19IxEjO4wHL3uIFI=)
                          2: A8F4AE389D7E11EF91A24C73C4F9AE02.roa (hash: 0iZ7Xt/Zu5nFY9hKwlAmek0RRWbfnGrf5rL6vXkjRAk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.crl
                          rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:04:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 299 (0x12b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B736, serialNumber=30BE1EB9D3AC49D0AFEE1353C3F9D1167A007B17
        Validity
            Not Before: Mar 25 05:04:15 2026 GMT
            Not After : Apr  1 05:04:15 2026 GMT
        Subject: CN=69c36ccf-de33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a3:6d:d4:c5:bc:17:1a:ed:04:59:6d:a5:11:
                    d0:18:3c:09:56:08:bb:e6:3c:eb:8f:8c:07:2b:eb:
                    28:6a:03:97:55:7f:c1:42:fc:9c:44:6c:6a:55:be:
                    92:6a:ff:6c:f0:bd:b0:ea:db:59:0f:f8:92:2f:0a:
                    3a:07:28:de:9b:2e:47:6f:69:91:31:35:4d:db:64:
                    9e:ec:e1:d1:44:12:c9:a5:af:42:c2:a1:a8:73:dc:
                    fc:c5:43:03:c8:4c:3d:14:80:ae:1b:fb:e1:22:ea:
                    88:65:77:00:18:57:70:bf:b6:dd:5b:82:b0:d2:0e:
                    3b:02:ac:52:37:0f:9a:57:7b:4e:e9:c0:77:1e:88:
                    fd:b5:f2:2d:5c:dc:04:71:d4:4e:d3:86:ae:2c:3b:
                    78:00:48:af:5c:97:07:18:d0:5b:00:61:50:5a:21:
                    6e:2f:03:9f:c1:75:e7:8b:ff:df:6c:62:58:4d:08:
                    6c:21:b1:af:91:b4:65:b1:7f:b3:e8:e7:ed:c8:a7:
                    9e:5e:83:f0:48:09:b5:fd:cf:48:5c:73:9c:f0:b2:
                    38:c0:e6:e5:aa:7b:82:90:bc:db:4f:d8:a9:49:c5:
                    66:ad:bb:1a:27:9f:79:ea:23:58:e7:e5:8d:15:ba:
                    01:05:8c:f7:74:78:29:35:f8:ab:0a:be:85:a1:d8:
                    77:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:91:2D:31:B1:22:24:3A:D6:D2:19:C6:5C:F6:6E:A0:87:B7:9B:6F
            X509v3 Authority Key Identifier:
                keyid:30:BE:1E:B9:D3:AC:49:D0:AF:EE:13:53:C3:F9:D1:16:7A:00:7B:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:b8:bb:dd:20:02:f1:3d:52:d2:c4:4c:0b:92:b3:71:26:83:
         4c:36:3f:90:75:88:b8:bd:b0:0b:66:24:d0:ac:14:c8:db:fd:
         5c:a3:8b:bd:c5:07:b9:5a:c3:ac:b8:8b:93:1c:88:67:08:c8:
         51:15:f9:9b:ea:be:78:fa:27:4a:71:0f:6e:f1:d6:2e:d8:05:
         bc:78:6f:13:e0:5d:d7:06:11:7e:a7:22:56:0f:25:c0:41:d6:
         d5:c2:53:94:7a:19:7b:e7:4d:3a:55:da:2d:41:60:b8:20:e5:
         49:d6:c0:b4:94:e7:b3:25:0b:7f:0f:fd:5a:a4:62:38:fd:36:
         50:35:5b:62:f0:9e:b3:49:68:00:38:42:ec:7a:a9:10:43:6b:
         3f:99:ca:2d:4a:57:1a:7f:7d:20:63:fd:56:c7:dc:26:58:4e:
         5d:97:c2:b9:ff:4b:0f:55:a8:a9:f2:88:27:65:de:34:f6:38:
         e7:c8:03:05:d0:86:92:66:d4:f1:2d:c1:0b:44:c1:2e:b3:cf:
         01:53:00:1c:54:ab:a9:af:02:78:3e:b0:a0:2e:05:28:f6:0b:
         02:d9:9d:d4:a1:c3:85:fb:16:1c:0a:fb:56:06:fd:70:87:e9:
         df:02:d2:8f:f4:b4:56:af:e2:28:65:14:7e:32:80:21:18:be:
         46:04:96:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:16:24 2026 by rpki-client