Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft
File:                     mdb3fuCkNuVIfpjO5VK2S17GWxM.mft (raw, json)
Hash identifier:          jD053pcuebDqpfKHOjZTtMsXSVauomkXr7oSyvzemN4=
Subject key identifier:   E2:15:F3:7C:B8:A0:CC:8E:88:EE:7E:8A:B7:35:BD:8C:74:F8:F2:4D
Authority key identifier: 99:D6:F7:7E:E0:A4:36:E5:48:7E:98:CE:E5:52:B6:4B:5E:C6:5B:13
Certificate issuer:       /CN=A912A799/serialNumber=99D6F77EE0A436E5487E98CEE552B64B5EC65B13
Certificate serial:       3525
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft
Manifest number:          3524
Signing time:             Sat 04 Apr 2026 15:08:22 +0000
Manifest this update:     Sat 04 Apr 2026 15:08:22 +0000
Manifest next update:     Sat 11 Apr 2026 15:08:22 +0000
Files and hashes:         1: mdb3fuCkNuVIfpjO5VK2S17GWxM.crl (hash: 0fY1ktdfMQa7yKKEPPZefvUZY6g8CsdvCzRL/BQxJp4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.crl
                          rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 15:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13605 (0x3525)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A799, serialNumber=99D6F77EE0A436E5487E98CEE552B64B5EC65B13
        Validity
            Not Before: Apr  4 15:08:22 2026 GMT
            Not After : Apr 11 15:08:22 2026 GMT
        Subject: CN=69d12966-3f67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:08:3c:d2:0e:5f:b1:09:31:a9:9b:9a:0c:61:
                    53:29:d5:78:f5:48:8f:02:d3:e6:1b:ed:b3:46:58:
                    a6:53:3b:eb:98:95:ce:c0:80:d4:95:9a:62:31:bd:
                    a7:24:97:6b:86:20:38:18:8e:de:79:d7:e7:ad:0c:
                    b6:3c:e1:9a:ca:7d:bf:02:23:78:33:1b:c7:18:4e:
                    b0:65:ea:13:aa:cf:55:eb:c2:ce:a6:ae:b3:50:f9:
                    79:ef:5c:a3:30:0b:0f:f0:ad:f9:2f:2c:12:8b:41:
                    63:16:12:6d:4d:05:9d:e2:50:6b:65:2a:7c:56:75:
                    43:86:a5:5a:27:e4:9f:1c:03:b0:76:14:51:7f:1a:
                    8f:a8:b6:98:64:a2:eb:19:34:f7:66:3d:70:1e:48:
                    fd:62:27:29:99:bc:07:82:82:6f:e6:8a:00:c5:ee:
                    33:f5:3c:60:38:0a:3a:52:7e:d6:bb:3a:51:51:d2:
                    79:46:82:74:4a:40:3a:df:2f:83:e2:ef:93:d2:73:
                    60:79:5e:c1:5f:af:f1:d4:fe:69:02:05:ca:a8:43:
                    4b:42:d6:93:10:a9:e9:72:3d:c6:48:1e:30:03:41:
                    6b:68:37:a3:93:77:6f:2f:48:87:64:36:8b:f7:fb:
                    b9:4b:82:c2:56:9e:b2:29:9f:bd:1a:6d:2a:0b:6b:
                    8f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:15:F3:7C:B8:A0:CC:8E:88:EE:7E:8A:B7:35:BD:8C:74:F8:F2:4D
            X509v3 Authority Key Identifier:
                keyid:99:D6:F7:7E:E0:A4:36:E5:48:7E:98:CE:E5:52:B6:4B:5E:C6:5B:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:de:57:24:74:bc:0b:c3:63:ab:ca:83:27:a0:e4:50:1a:9c:
         34:80:9b:69:e2:e9:54:db:18:60:21:9b:59:86:52:4f:88:31:
         e2:13:ae:a7:cd:9e:e4:d2:f4:63:4c:6f:95:0e:e2:e0:37:10:
         e9:ea:6a:63:5a:3b:35:b9:ff:9c:ef:db:61:54:49:12:45:16:
         2f:94:8c:ee:34:48:63:b9:00:2b:43:4f:df:ee:a0:42:71:57:
         b1:6e:3c:12:0d:b4:5e:fc:0b:b7:b9:b6:d6:c6:31:8b:22:63:
         ef:f5:fc:23:35:67:5f:22:af:31:b4:8f:32:71:43:b0:3c:f6:
         a9:59:45:e0:ce:55:cb:d1:ee:0e:7f:c7:2b:41:79:4c:31:ed:
         1e:76:aa:fe:bd:c1:d2:e3:22:6f:3d:8a:2e:5d:c5:a5:36:f1:
         29:5a:83:f8:72:f5:f0:38:b5:4c:be:2c:9f:e7:10:ec:d7:c3:
         c8:57:12:3e:7b:cc:3c:97:52:e7:b0:7f:1d:33:b0:a5:1c:54:
         34:fc:57:a0:ee:c5:d4:12:14:be:ef:c8:cb:c9:78:00:5b:b6:
         12:9d:d1:4e:78:9b:c1:17:0c:2d:11:b3:a8:a2:f8:c1:75:76:
         15:ec:25:98:9f:91:1e:5b:f5:37:df:a9:a5:83:fd:09:50:40:
         d6:dc:32:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:49:40 2026 by rpki-client