Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft
File:                     3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft (raw, json)
Hash identifier:          3YZ8QrkWCYQoom4sw93AWVpoUqxMtmbubJ/NH89KIXI=
Subject key identifier:   3C:C4:A1:D8:FF:66:F7:F7:4C:1C:66:64:43:FB:EE:43:6E:8B:CF:8D
Authority key identifier: DE:78:F7:BD:59:24:A8:06:74:90:BF:BD:32:E4:7E:7F:FA:B6:77:20
Certificate issuer:       /CN=A9113C02/serialNumber=DE78F7BD5924A8067490BFBD32E47E7FFAB67720
Certificate serial:       0903
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft
Manifest number:          2826
Signing time:             Wed 20 May 2026 16:16:56 +0000
Manifest this update:     Wed 20 May 2026 16:16:55 +0000
Manifest next update:     Wed 27 May 2026 16:16:55 +0000
Files and hashes:         1: 3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl (hash: tdEDulg78XzQhqQvG6imHtxzwrCBpHMc6/jatcNrSEY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl
                          rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 16:16:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2307 (0x903)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113C02, serialNumber=DE78F7BD5924A8067490BFBD32E47E7FFAB67720
        Validity
            Not Before: May 20 16:16:55 2026 GMT
            Not After : May 27 16:16:55 2026 GMT
        Subject: CN=6a0dde78-a5ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b1:31:2e:47:a7:e2:9b:9e:4e:0a:14:97:2a:
                    8c:98:ce:3b:98:58:b4:0d:23:d0:0b:8e:a7:e9:ed:
                    59:ed:7b:3b:6f:b8:b0:52:50:d0:eb:3f:34:1b:9a:
                    71:bf:28:8c:dc:fd:bb:54:40:c6:73:df:4e:78:2b:
                    4f:5b:71:2c:19:db:56:7a:ef:d0:9b:50:22:f5:43:
                    a3:21:cf:1f:98:1b:60:c9:0c:c1:2a:4e:33:9f:56:
                    13:98:e7:ea:f9:2b:10:9a:24:ac:ac:35:96:03:29:
                    af:2f:1f:25:e8:60:62:6d:65:51:95:79:12:8c:99:
                    43:87:66:00:3e:96:ad:a0:bb:9c:34:89:04:5b:2a:
                    df:f0:1d:54:65:87:da:3f:9c:7e:4a:65:1c:e7:53:
                    d2:9d:eb:62:ea:cb:85:5b:fa:48:03:c6:e6:75:08:
                    7d:63:d1:a0:3b:dc:bf:12:d9:3c:b4:49:e1:a9:1f:
                    6e:eb:d1:ba:26:c1:ad:e8:f6:d7:f6:16:4c:68:54:
                    0a:fe:2c:07:43:fa:4c:30:77:f4:41:34:6e:75:f7:
                    92:3a:b7:fc:6e:38:cf:f9:aa:59:ce:95:9f:82:ea:
                    1f:3e:82:ad:40:b4:ac:48:c1:e6:45:1b:cf:f2:3d:
                    5f:85:5f:83:05:4f:65:a6:03:39:64:45:1a:bb:fd:
                    92:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C4:A1:D8:FF:66:F7:F7:4C:1C:66:64:43:FB:EE:43:6E:8B:CF:8D
            X509v3 Authority Key Identifier:
                keyid:DE:78:F7:BD:59:24:A8:06:74:90:BF:BD:32:E4:7E:7F:FA:B6:77:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:ac:5b:ce:49:98:c2:a7:e1:32:03:2a:b4:4f:d3:16:1a:a4:
         25:81:e9:16:e1:dc:19:88:00:36:cd:11:c9:52:9a:30:4f:83:
         03:7c:63:7d:45:2b:92:d6:9a:30:57:ef:f7:73:2a:15:3c:98:
         5e:09:d4:3c:de:a9:b8:a4:59:16:b8:54:27:1f:00:02:41:78:
         d9:9e:ba:1d:4c:cd:84:40:e8:20:02:4e:c0:a8:f4:95:ae:ad:
         e5:64:f0:19:16:53:3d:db:b9:a7:e2:19:d5:2f:87:a8:3d:46:
         63:df:97:d2:cb:07:35:69:cd:53:e4:6b:33:95:06:50:3f:1b:
         7d:3d:61:b9:a2:96:fb:24:23:a4:cd:5a:af:1f:a7:b8:bb:2e:
         c2:68:4d:21:d9:98:d8:bd:6f:11:c4:55:b4:e1:e1:44:49:22:
         b6:c6:37:d0:e3:27:62:0c:9e:6b:3f:79:42:4e:b4:17:20:6b:
         fb:09:c3:04:a5:39:e9:e4:ed:8f:3c:8a:d0:b2:49:a9:46:d0:
         cb:90:96:18:16:4e:0b:aa:86:46:10:93:a3:1c:19:6d:ce:18:
         17:27:1e:98:59:36:85:d2:40:d1:c6:1b:b8:40:be:f9:a1:4a:
         c9:63:ce:2f:f5:9a:7b:b2:a8:d2:b6:8f:b3:ac:8b:90:15:17:
         b2:0e:43:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:16:16 2026 by rpki-client