Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft
File:                     1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft (raw, json)
Hash identifier:          6LNUVazNsyx3mwz5gEhMRIWMjSKBb+M8fwx6jckAqs4=
Subject key identifier:   24:02:31:A7:5A:6E:A4:1B:96:16:0C:F6:A2:BB:CC:E0:9D:2F:45:0E
Authority key identifier: D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52
Certificate issuer:       /CN=A911C2E1/serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52
Certificate serial:       01EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft
Manifest number:          01E9
Signing time:             Sun 05 Apr 2026 02:51:35 +0000
Manifest this update:     Sun 05 Apr 2026 02:51:34 +0000
Manifest next update:     Sun 12 Apr 2026 02:51:34 +0000
Files and hashes:         1: 1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl (hash: y08aavDWzPrWnPpZ0FQsPM+pYceDmbZnEDGdU0XVLms=)
                          2: 3FE30722468C11EE9462EC3AC4F9AE02.roa (hash: GghlvZSMgFSIPZl/c13nz5F4JJXOhoiY0qEmjni18nQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl
                          rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 02:51:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 494 (0x1ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C2E1, serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52
        Validity
            Not Before: Apr  5 02:51:34 2026 GMT
            Not After : Apr 12 02:51:34 2026 GMT
        Subject: CN=69d1ce37-db63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:78:df:2d:ea:a8:02:bc:34:7a:6e:6c:cc:bb:
                    73:3a:17:a7:58:25:75:37:8b:6c:ff:47:c0:b0:e4:
                    6e:d1:b2:10:33:36:aa:07:f3:da:40:4f:60:9d:1b:
                    3c:28:18:e1:77:7b:f7:95:de:87:b4:87:f6:16:15:
                    8c:e7:4b:1f:20:f3:4a:88:9e:49:fe:b1:ee:07:7c:
                    11:51:28:bb:e3:22:c6:78:4e:15:43:58:fe:39:6c:
                    40:8f:4e:05:0a:b2:f4:ce:5d:10:92:7b:2e:dc:e2:
                    18:2a:17:a0:69:63:3f:ec:38:78:87:2e:57:2d:de:
                    db:03:b3:ed:c8:81:c3:b2:ff:22:b0:64:2e:19:92:
                    76:51:78:d5:fc:0c:22:38:cd:1f:25:aa:01:b2:c6:
                    da:89:5e:f7:ac:cb:46:1b:9a:27:a9:ae:64:93:45:
                    2a:35:f3:70:72:39:02:38:d1:ea:0e:23:27:b4:17:
                    19:75:0e:75:eb:6e:80:dd:bc:16:81:ab:90:ca:a7:
                    8b:0e:1b:d9:68:2f:d1:05:6b:30:c4:0a:f8:54:5d:
                    11:27:66:04:bb:14:81:fe:5b:79:45:d7:1a:db:19:
                    de:0e:25:f7:fa:3a:6e:a8:52:f6:58:98:0f:bd:0c:
                    78:1a:fd:4e:70:a1:a6:0d:f3:4b:2a:af:a4:8a:27:
                    1f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:02:31:A7:5A:6E:A4:1B:96:16:0C:F6:A2:BB:CC:E0:9D:2F:45:0E
            X509v3 Authority Key Identifier:
                keyid:D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:46:9e:52:ff:69:a8:93:6b:44:f3:58:c1:e6:5a:0b:cf:e9:
         b0:69:c2:c9:09:9a:ab:71:db:46:28:86:dc:03:9e:ba:49:68:
         ca:22:a7:22:92:af:b8:ee:02:3f:c7:bf:af:aa:ca:1c:5b:a9:
         f2:31:70:c3:ea:5b:40:3b:4c:12:a5:c9:60:b5:61:85:83:df:
         6c:47:ab:2e:58:07:bc:2d:46:df:cf:b2:1b:bf:85:be:19:3c:
         1d:a6:4e:8b:56:48:c7:e5:e7:77:5e:63:df:c9:eb:4a:6b:13:
         c3:96:42:17:c6:53:13:0d:40:ff:1c:59:d5:d9:31:33:9a:28:
         5f:7c:cb:b2:b5:db:64:50:df:e1:44:80:f7:ee:e2:10:c1:9d:
         72:8d:58:a7:61:18:47:3e:e3:33:0d:cd:fa:81:74:14:65:1d:
         cc:3a:bc:c5:fe:7c:1c:d7:13:b5:19:b2:a7:0c:28:1d:83:15:
         c4:63:59:3f:3c:91:de:a9:9e:ee:7d:20:a9:a7:ea:ce:bf:aa:
         78:c4:ee:90:47:3f:5f:60:3f:e7:d8:91:2c:f1:af:95:7a:d2:
         3f:83:47:7f:dd:72:40:22:be:15:2b:d6:dc:ae:09:14:f7:6c:
         0a:47:7a:66:ff:a6:40:87:1c:1c:52:0a:14:79:20:ac:cd:29:
         61:cc:95:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:28:59 2026 by rpki-client