Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.mft
File:                     lTU3mXduubP_WHJemdAqplT7GgQ.mft (raw, json)
Hash identifier:          Py8I1qAqpiy3ndMoliw2EODkGKkNeJHJuTkQFU7DQBA=
Subject key identifier:   04:4E:62:98:EF:42:12:9E:D8:D2:D7:DB:53:8F:E0:C1:18:74:60:42
Authority key identifier: 95:35:37:99:77:6E:B9:B3:FF:58:72:5E:99:D0:2A:A6:54:FB:1A:04
Certificate issuer:       /CN=A9113E15/serialNumber=95353799776EB9B3FF58725E99D02AA654FB1A04
Certificate serial:       065C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTU3mXduubP_WHJemdAqplT7GgQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.mft
Manifest number:          0655
Signing time:             Sat 04 Apr 2026 22:27:43 +0000
Manifest this update:     Sat 04 Apr 2026 22:27:43 +0000
Manifest next update:     Sat 11 Apr 2026 22:27:43 +0000
Files and hashes:         1: lTU3mXduubP_WHJemdAqplT7GgQ.crl (hash: TXVnL2HxQI37yOzhS0eKbyxDl45t/+odZn8OY42Nhro=)
                          2: F9869896C8F411EBB460DB52C4F9AE02.roa (hash: K6M5+omsh8sdWzUbRK0rqy52Lgh96SakH3WSKDZW7gk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.crl
                          rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTU3mXduubP_WHJemdAqplT7GgQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:27:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1628 (0x65c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113E15, serialNumber=95353799776EB9B3FF58725E99D02AA654FB1A04
        Validity
            Not Before: Apr  4 22:27:43 2026 GMT
            Not After : Apr 11 22:27:43 2026 GMT
        Subject: CN=69d1905f-9ebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:17:a6:e4:87:15:ad:d7:fa:0b:d7:cf:55:10:
                    dd:0b:2b:8c:8a:e6:6e:a1:fa:31:e3:49:dc:51:e3:
                    bd:07:de:3b:6c:cf:13:c1:79:2d:c5:05:85:aa:04:
                    5a:40:a6:8c:c2:82:37:7c:80:76:67:cb:fb:a8:e9:
                    09:f5:9f:06:74:f0:74:54:e2:cb:e8:9e:8c:e8:b6:
                    da:68:33:e6:f2:27:92:18:b6:ca:5f:a6:f4:e8:e3:
                    17:5f:e1:b4:53:e8:bb:e5:1c:e2:1b:6d:af:24:6d:
                    b9:98:e2:c9:00:72:8e:f2:8c:49:42:84:ae:01:6d:
                    ab:64:c1:8f:2e:56:c0:2c:0d:ff:0b:4f:ea:46:6d:
                    b5:27:ce:f0:4a:15:1e:14:2f:8e:27:c5:72:cd:e9:
                    e5:3f:e2:12:25:f9:e7:8e:20:27:56:e7:c7:48:92:
                    68:eb:2d:91:1a:49:50:4d:46:b7:c9:c0:5e:ef:95:
                    68:5f:d1:7b:5f:7b:07:65:59:c6:06:9d:b7:25:d0:
                    3b:6a:23:2a:16:c9:1f:ee:49:b2:aa:2c:81:6e:44:
                    60:9d:04:ea:16:db:c9:50:84:ff:a2:51:57:6d:fa:
                    c6:ef:71:78:0a:81:67:a2:b3:ce:96:45:d0:ba:f3:
                    b6:ac:cc:0f:41:18:ca:89:78:d5:91:bb:6b:ab:5d:
                    42:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:4E:62:98:EF:42:12:9E:D8:D2:D7:DB:53:8F:E0:C1:18:74:60:42
            X509v3 Authority Key Identifier:
                keyid:95:35:37:99:77:6E:B9:B3:FF:58:72:5E:99:D0:2A:A6:54:FB:1A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTU3mXduubP_WHJemdAqplT7GgQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:ae:17:e9:dd:f7:86:0d:c3:2f:7e:c3:7b:73:80:23:da:eb:
         cb:d5:d5:64:0d:22:fc:70:64:9c:d7:4b:40:ca:b7:b9:dd:16:
         85:5e:48:6b:38:16:dc:3d:8a:73:30:17:d9:86:b0:9c:8d:98:
         5a:51:26:7f:24:96:7f:e5:30:31:f8:2d:95:42:0c:ac:ab:f4:
         f1:73:16:58:43:f6:2c:cb:0b:7b:33:0e:32:83:38:8c:5f:73:
         6e:bd:d9:f9:d3:1d:15:68:ec:62:2d:ba:8e:42:7f:cb:90:04:
         00:40:df:ea:db:98:0b:ac:8d:11:af:90:4b:68:7a:b6:0f:9b:
         bc:04:72:d0:d1:0d:00:c0:cf:51:c5:ed:e6:3e:3b:86:ea:b2:
         ed:8d:2c:a4:17:7f:70:6f:d6:90:85:e9:10:9e:23:ae:74:93:
         d0:97:16:3e:13:31:3d:e8:eb:85:d7:c1:90:65:28:a8:d3:e6:
         92:53:5a:6d:87:1b:ea:fc:01:25:cb:cb:19:98:73:98:00:73:
         94:b2:87:cc:d9:f5:2a:4b:23:fa:dc:ec:3e:03:2b:8d:76:9c:
         2a:96:60:21:9b:28:77:d0:89:3c:c1:30:4a:87:2b:60:5c:dd:
         e9:45:04:c9:f0:d3:e7:3e:b1:fd:ed:d4:e1:17:3d:8c:3c:55:
         58:a2:32:3d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTNFMTUxMTAvBgNVBAUTKDk1MzUzNzk5Nzc2RUI5QjNGRjU4NzI1RTk5RDAyQUE2
NTRGQjFBMDQwHhcNMjYwNDA0MjIyNzQzWhcNMjYwNDExMjIyNzQzWjAYMRYwFAYD
VQQDEw02OWQxOTA1Zi05ZWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3hem5IcVrdf6C9fPVRDdCyuMiuZuofox40ncUeO9B947bM8TwXktxQWFqgRa
QKaMwoI3fIB2Z8v7qOkJ9Z8GdPB0VOLL6J6M6LbaaDPm8ieSGLbKX6b06OMXX+G0
U+i75RziG22vJG25mOLJAHKO8oxJQoSuAW2rZMGPLlbALA3/C0/qRm21J87wShUe
FC+OJ8VyzenlP+ISJfnnjiAnVufHSJJo6y2RGklQTUa3ycBe75VoX9F7X3sHZVnG
Bp23JdA7aiMqFskf7kmyqiyBbkRgnQTqFtvJUIT/olFXbfrG73F4CoFnorPOlkXQ
uvO2rMwPQRjKiXjVkbtrq11C2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAROYpjv
QhKe2NLX21OP4MEYdGBCMB8GA1UdIwQYMBaAFJU1N5l3brmz/1hyXpnQKqZU+xoE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0UxNS82NzBDMDk4MEM4
RjIxMUVCOEUzRkFENTBDNEY5QUUwMi9sVFUzbVhkdXViUF9XSEplbWRBcXBsVDdH
Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xUVTNtWGR1dWJQX1dISmVtZEFxcGxUN0dnUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
M0UxNS82NzBDMDk4MEM4RjIxMUVCOEUzRkFENTBDNEY5QUUwMi9sVFUzbVhkdXVi
UF9XSEplbWRBcXBsVDdHZ1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAm64X6d33hg3DL37De3OAI9rry9XVZA0i/HBknNdLQMq3ud0WhV5IazgW3D2K
czAX2YawnI2YWlEmfySWf+UwMfgtlUIMrKv08XMWWEP2LMsLezMOMoM4jF9zbr3Z
+dMdFWjsYi26jkJ/y5AEAEDf6tuYC6yNEa+QS2h6tg+bvARy0NENAMDPUcXt5j47
huqy7Y0spBd/cG/WkIXpEJ4jrnST0JcWPhMxPejrhdfBkGUoqNPmklNabYcb6vwB
JcvLGZhzmABzlLKHzNn1Kksj+tzsPgMrjXacKpZgIZsod9CJPMEwSocrYFzd6UUE
yfDT5z6x/e3U4Rc9jDxVWKIyPQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:28:57 2026 by rpki-client