Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft
File:                     lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft (raw, json)
Hash identifier:          hcBKFflzh3u0XO/450YutN7A1IBi56eJHkYvpnAv+v0=
Subject key identifier:   AF:ED:E5:78:8F:63:48:07:A7:53:97:4D:84:31:F2:86:C2:13:BE:31
Authority key identifier: 96:A4:31:ED:06:7C:3E:B1:E4:73:C1:30:4A:C6:DF:9B:76:22:55:A3
Certificate issuer:       /CN=A918779B/serialNumber=96A431ED067C3EB1E473C1304AC6DF9B762255A3
Certificate serial:       109B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft
Manifest number:          1806
Signing time:             Sat 04 Apr 2026 17:14:17 +0000
Manifest this update:     Sat 04 Apr 2026 17:14:17 +0000
Manifest next update:     Sat 11 Apr 2026 17:14:17 +0000
Files and hashes:         1: lqQx7QZ8PrHkc8EwSsbfm3YiVaM.crl (hash: chowYSCFYIvKZCy25cyEUW7KoF9tlxxY9gkQ8ESI/9M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.crl
                          rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 17:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4251 (0x109b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918779B, serialNumber=96A431ED067C3EB1E473C1304AC6DF9B762255A3
        Validity
            Not Before: Apr  4 17:14:17 2026 GMT
            Not After : Apr 11 17:14:17 2026 GMT
        Subject: CN=69d146e9-fa7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:af:74:21:16:0d:b0:00:52:aa:0e:a3:3b:8a:
                    b6:05:69:84:4d:20:b3:cd:5a:55:75:1e:95:12:2c:
                    2b:dc:21:7c:e7:50:5c:07:70:ba:ba:ff:6e:42:1a:
                    48:91:ba:7b:96:94:06:63:4b:7e:c3:f1:50:58:7a:
                    d8:fa:1f:dc:d1:3d:1f:91:1c:86:d9:cc:7e:d8:32:
                    c3:7b:37:8c:65:04:72:a6:60:49:98:f6:1d:10:44:
                    a0:a2:97:68:3f:9a:5d:29:9a:9a:a6:97:4a:03:02:
                    36:ce:89:f2:91:21:ee:e5:fb:26:f9:bf:10:7f:9c:
                    3a:7c:9b:4a:fd:ce:62:80:0a:b8:2e:c5:bb:08:b5:
                    f6:a9:97:6f:d7:e9:ac:91:b8:6d:80:97:0a:42:77:
                    d2:d6:9a:c3:36:d6:3e:98:61:f1:b5:ab:82:cd:1b:
                    36:34:60:48:b3:09:f2:91:fc:a9:78:21:ee:8c:23:
                    12:49:34:74:02:21:97:9b:e1:56:f9:fa:7f:45:1a:
                    bc:27:7f:a9:e9:c9:8a:49:dd:cf:97:70:6e:9f:46:
                    07:bf:57:50:02:79:61:80:eb:ae:30:54:56:1c:02:
                    02:14:d6:f6:7a:0c:2a:9c:46:c6:3f:50:f1:0d:74:
                    7c:90:7a:1b:56:9a:46:c1:2b:55:f4:fb:ae:20:26:
                    a7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:ED:E5:78:8F:63:48:07:A7:53:97:4D:84:31:F2:86:C2:13:BE:31
            X509v3 Authority Key Identifier:
                keyid:96:A4:31:ED:06:7C:3E:B1:E4:73:C1:30:4A:C6:DF:9B:76:22:55:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:d1:9b:14:9c:99:0f:bf:d4:a9:9d:c3:ea:01:91:6e:cf:25:
         35:c9:a3:0e:90:fd:e4:fa:54:ed:06:fd:5c:00:26:87:9e:a0:
         b6:eb:45:d3:b0:f6:29:26:49:bb:a0:bd:37:fd:e5:87:3a:54:
         cf:6a:cd:ee:10:21:0d:84:0e:c0:cf:ff:f9:9d:d5:82:7c:87:
         3e:03:30:34:ed:6b:5f:0f:00:77:8f:d4:c9:fa:80:26:73:0b:
         fc:9a:fc:e6:19:8d:7d:2a:b7:be:02:1f:14:cd:54:af:8f:66:
         76:af:27:fa:b5:0e:c4:bf:8d:cf:95:f5:aa:91:6b:ec:b4:bb:
         9d:d9:03:4c:a5:0f:76:ce:21:ac:f6:b1:d6:83:20:10:10:9f:
         28:c7:22:ef:3e:c3:5e:1c:5e:4f:f9:53:6b:90:f8:2c:75:3a:
         7b:7e:70:29:b7:f4:f7:c4:67:1e:a7:0d:94:d0:ee:48:44:96:
         17:26:ff:05:0e:a4:d2:47:a2:ef:32:4c:9b:e3:3b:29:b5:c5:
         77:f8:bc:d3:06:71:5b:91:37:d6:6a:5d:07:df:06:e6:1b:61:
         46:79:51:2a:7e:1c:68:b3:c8:15:56:69:7c:e8:00:7d:f3:e7:
         81:cb:22:86:63:b1:ac:d6:cd:29:98:d9:2c:cd:d7:44:a6:6c:
         f9:00:b1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 23:51:02 2026 by rpki-client