Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft
File:                     4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft (raw, json)
Hash identifier:          gFXMj6GqadK3KdkTpwZXYpNaUtZRusf/shyXHdxFUgE=
Subject key identifier:   9B:C5:28:79:0D:E7:EC:35:54:B8:53:A7:A0:51:DC:99:63:B9:C2:B0
Authority key identifier: E0:B9:A2:E9:93:9D:55:8F:18:BE:62:17:5C:95:D7:68:D2:45:D3:1F
Certificate issuer:       /CN=A915B361/serialNumber=E0B9A2E9939D558F18BE62175C95D768D245D31F
Certificate serial:       0E25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft
Manifest number:          0E14
Signing time:             Sat 04 Apr 2026 17:41:42 +0000
Manifest this update:     Sat 04 Apr 2026 17:41:41 +0000
Manifest next update:     Sat 11 Apr 2026 17:41:41 +0000
Files and hashes:         1: 4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl (hash: pRd7uAwwXi0M0CKJljmsemykPZt3ZGtOudCciANs/TY=)
                          2: 3D8179B431AE11F0A7D0076FC4F9AE02.roa (hash: hREq3dfebI3lmN/AdMfL+hkUkOZoLrGY9aPcGr6VVN4=)
                          3: 5E6CE2C631AE11F0A9F09E0AC4F9AE02.roa (hash: 2pN9nTFxj6nclr0WTJ25vKxxUHXAvjKZjFUhskFnTRI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl
                          rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 17:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3621 (0xe25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B361, serialNumber=E0B9A2E9939D558F18BE62175C95D768D245D31F
        Validity
            Not Before: Apr  4 17:41:41 2026 GMT
            Not After : Apr 11 17:41:41 2026 GMT
        Subject: CN=69d14d56-706d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:33:9e:0f:5d:cf:51:e4:08:d1:08:ef:88:a6:
                    d7:6e:2e:48:ad:9d:3a:37:e2:f6:64:fd:6f:c6:d5:
                    38:8a:46:5a:15:5a:36:06:ab:95:f3:ef:8c:c8:0d:
                    32:77:d5:27:89:23:0e:fd:72:e1:76:32:eb:2f:6a:
                    74:35:b4:0c:ec:e2:e6:ba:1a:97:db:ac:bc:ed:e1:
                    09:dd:2d:cb:6f:35:b3:28:bc:17:67:83:5c:77:01:
                    e1:4a:72:eb:8b:a5:1f:6f:6a:04:7f:c5:c6:79:2c:
                    19:b6:44:69:03:16:f4:c9:59:01:7f:02:fb:57:84:
                    08:a6:49:0b:4e:3a:18:49:75:19:3d:83:51:5a:38:
                    4c:cc:b9:d1:0e:9f:76:6d:fe:02:75:04:06:6e:58:
                    56:a1:53:b7:58:88:18:10:2d:38:29:a1:c0:41:83:
                    52:84:25:99:bf:d0:05:39:29:12:70:ac:c5:9f:48:
                    ae:ad:aa:b0:9a:bd:4a:86:ae:70:da:3d:fd:60:d6:
                    80:3a:44:06:1d:98:77:e5:f8:6f:bd:60:1f:aa:8f:
                    9a:2d:63:a8:b4:bd:71:9c:f5:a1:87:c0:a8:71:df:
                    b0:08:da:21:27:7d:8d:02:0f:ad:ff:45:7f:e0:ba:
                    f2:89:44:0d:10:9e:b8:f7:ba:b3:81:f1:46:6f:d1:
                    09:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C5:28:79:0D:E7:EC:35:54:B8:53:A7:A0:51:DC:99:63:B9:C2:B0
            X509v3 Authority Key Identifier:
                keyid:E0:B9:A2:E9:93:9D:55:8F:18:BE:62:17:5C:95:D7:68:D2:45:D3:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:e9:cf:d4:27:d7:72:a2:1c:54:45:91:a0:d4:c6:c9:17:ad:
         14:9e:2c:87:b2:db:28:05:9d:e3:65:ce:9d:3d:67:48:bc:92:
         ec:64:87:44:b6:5f:52:22:f8:39:dc:2d:c9:eb:1a:bc:e9:b1:
         3a:1f:8d:30:0b:ea:e4:f9:c8:80:b8:87:77:16:00:56:cd:89:
         49:e0:5f:d3:78:21:0b:f9:4d:92:59:84:b7:08:1b:b4:2d:37:
         30:9f:4d:81:88:64:78:ba:00:39:85:ce:5d:9f:76:18:cb:06:
         5d:2b:2b:a8:1e:26:75:a5:62:b6:20:64:53:73:3c:96:05:65:
         b9:89:88:b7:d2:9b:52:3e:e1:fd:b6:a5:ab:7f:c5:f2:b4:ce:
         aa:39:28:10:7e:44:3c:a9:1d:c3:5b:6c:be:52:ad:bf:3d:8e:
         0a:0c:b1:b2:d8:99:96:ce:77:96:e9:b0:c4:5c:a4:a0:a1:79:
         30:89:ee:06:29:08:3a:6b:6a:64:24:82:e4:ca:c9:0e:fb:30:
         8b:ca:d9:5b:72:de:9f:d2:28:23:23:f1:55:48:29:77:ce:68:
         ea:5b:c8:80:24:11:85:fd:61:15:64:c9:60:f2:57:38:5b:e2:
         b0:dc:87:32:3d:35:bd:bd:fd:6c:7c:b4:b8:ef:5d:e5:82:34:
         fe:1b:81:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:28:39 2026 by rpki-client