Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft
File:                     lML0ajLRB3XhZJuiUPaX_0esBj0.mft (raw, json)
Hash identifier:          5h+YVkK5aPZhCMo0NCw3jnnelur8HI9+yd8+5r/JGAc=
Subject key identifier:   C7:03:F1:06:70:F2:9F:4D:27:88:D3:6E:E8:D5:F3:1D:36:22:A7:23
Authority key identifier: 94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D
Certificate issuer:       /CN=A9121071/serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D
Certificate serial:       029C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft
Manifest number:          0283
Signing time:             Tue 07 Apr 2026 01:39:27 +0000
Manifest this update:     Tue 07 Apr 2026 01:39:26 +0000
Manifest next update:     Tue 14 Apr 2026 01:39:26 +0000
Files and hashes:         1: lML0ajLRB3XhZJuiUPaX_0esBj0.crl (hash: lcnV2Ht25aQu1TYNpaxR7Fy0EXdpsitguCCaaYNsbqo=)
                          2: 42C28C36A80711F0A622350DC4F9AE02.roa (hash: BpCSL66Kcxa7BlGBFMkmM3b3I1bmGIXPHueAxzsNq50=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl
                          rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 01:39:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 668 (0x29c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121071, serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D
        Validity
            Not Before: Apr  7 01:39:26 2026 GMT
            Not After : Apr 14 01:39:26 2026 GMT
        Subject: CN=69d4604f-93df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ec:7f:24:ef:39:63:44:c1:ff:b6:6b:f3:5c:
                    a8:5b:8c:a1:bb:ee:f8:51:ed:51:9e:13:63:93:b7:
                    6e:b1:97:b4:3e:56:19:de:b8:09:53:1e:bb:31:b4:
                    c5:53:7f:bb:3b:0f:af:c0:de:06:78:d7:f4:0c:f8:
                    88:83:73:91:8c:64:97:95:77:5f:31:80:91:0c:06:
                    7b:69:76:5b:62:af:e0:40:b1:6d:84:92:2c:d8:b5:
                    12:9a:35:9d:17:21:83:c5:cd:dc:49:2c:55:ee:64:
                    95:6d:c4:2e:e3:8b:11:eb:40:22:39:4d:d8:8a:b0:
                    87:ac:43:53:43:82:6c:a8:b5:a0:ef:51:f6:c6:c0:
                    c8:63:02:83:0f:51:e6:5d:d9:74:c0:8b:57:c1:8a:
                    be:b9:37:6b:19:99:69:22:a0:e4:a4:31:48:23:ba:
                    7d:dd:87:73:41:f7:96:b9:0d:2a:8b:77:52:36:64:
                    b6:05:1f:0f:88:32:4b:b3:5a:b2:07:3a:d8:4f:d0:
                    bc:db:9a:04:d3:fa:f3:23:e1:32:9e:9f:d9:fb:6b:
                    b0:10:d5:d5:91:37:f0:fa:1f:a2:f1:d9:cd:b9:20:
                    14:78:5a:48:c5:61:9b:13:73:fd:cc:9a:b5:cb:29:
                    b5:ec:dc:86:1f:4c:d6:ca:b3:3f:7b:78:07:5b:9d:
                    22:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:03:F1:06:70:F2:9F:4D:27:88:D3:6E:E8:D5:F3:1D:36:22:A7:23
            X509v3 Authority Key Identifier:
                keyid:94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:44:ef:59:cd:02:9e:22:7d:47:a9:fa:59:66:cf:b2:38:c4:
         33:55:dc:43:98:fe:35:fc:66:e5:df:65:e7:e2:ad:62:37:2d:
         e3:e6:df:97:46:a5:57:04:cc:37:a1:d7:ce:92:0e:3a:08:f3:
         2f:9f:22:e4:43:07:c0:03:bc:4b:5a:d5:53:f0:b3:6e:2d:8a:
         e1:4d:e7:f6:43:a9:a1:96:94:9b:93:67:39:ca:be:b5:77:da:
         7f:d5:9a:d7:5b:2c:42:49:a0:4d:8d:7e:48:1f:e0:f2:12:80:
         cd:17:33:2b:de:e5:38:91:b1:c8:83:e6:4d:75:c5:28:c1:e1:
         78:d2:1d:6c:e8:df:56:9b:23:e2:45:6a:7e:82:9e:6d:5a:d1:
         bf:70:e3:29:51:69:2d:93:46:2e:86:ad:7d:88:ea:c7:65:42:
         db:ef:cd:9f:ad:d6:6b:67:5d:5c:8e:b5:a5:29:e3:5a:6a:6e:
         c0:ac:13:ca:ab:a2:9c:e6:b4:41:ec:a8:dd:c3:05:37:ec:6d:
         f2:79:65:3b:d5:42:70:16:f2:25:c8:19:6d:d8:0a:c1:d5:31:
         64:3a:cb:7f:a2:d0:5d:64:df:31:59:f5:8e:67:e6:9e:77:02:
         dd:27:5c:30:5e:d2:15:12:f9:20:41:ca:c8:c0:15:11:8f:b7:
         f1:b3:56:dc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICApwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjEwNzExMTAvBgNVBAUTKDk0QzJGNDZBMzJEMTA3NzVFMTY0OUJBMjUwRjY5N0ZG
NDdBQzA2M0QwHhcNMjYwNDA3MDEzOTI2WhcNMjYwNDE0MDEzOTI2WjAYMRYwFAYD
VQQDEw02OWQ0NjA0Zi05M2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu+x/JO85Y0TB/7Zr81yoW4yhu+74Ue1RnhNjk7dusZe0PlYZ3rgJUx67MbTF
U3+7Ow+vwN4GeNf0DPiIg3ORjGSXlXdfMYCRDAZ7aXZbYq/gQLFthJIs2LUSmjWd
FyGDxc3cSSxV7mSVbcQu44sR60AiOU3YirCHrENTQ4JsqLWg71H2xsDIYwKDD1Hm
Xdl0wItXwYq+uTdrGZlpIqDkpDFII7p93YdzQfeWuQ0qi3dSNmS2BR8PiDJLs1qy
BzrYT9C825oE0/rzI+Eynp/Z+2uwENXVkTfw+h+i8dnNuSAUeFpIxWGbE3P9zJq1
yym17NyGH0zWyrM/e3gHW50ihQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMcD8QZw
8p9NJ4jTbujV8x02IqcjMB8GA1UdIwQYMBaAFJTC9Goy0Qd14WSbolD2l/9HrAY9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTA3MS8yRjBGN0E0ODg2
QjYxMUVEQUEzQjJCMzNDNEY5QUUwMi9sTUwwYWpMUkIzWGhaSnVpVVBhWF8wZXNC
ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xNTDBhakxSQjNYaFpKdWlVUGFYXzBlc0JqMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MTA3MS8yRjBGN0E0ODg2QjYxMUVEQUEzQjJCMzNDNEY5QUUwMi9sTUwwYWpMUkIz
WGhaSnVpVVBhWF8wZXNCajAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAn0TvWc0CniJ9R6n6WWbPsjjEM1XcQ5j+Nfxm5d9l5+KtYjct4+bfl0alVwTM
N6HXzpIOOgjzL58i5EMHwAO8S1rVU/Czbi2K4U3n9kOpoZaUm5NnOcq+tXfaf9Wa
11ssQkmgTY1+SB/g8hKAzRczK97lOJGxyIPmTXXFKMHheNIdbOjfVpsj4kVqfoKe
bVrRv3DjKVFpLZNGLoatfYjqx2VC2+/Nn63Wa2ddXI61pSnjWmpuwKwTyquinOa0
Qeyo3cMFN+xt8nllO9VCcBbyJcgZbdgKwdUxZDrLf6LQXWTfMVn1jmfmnncC3Sdc
MF7SFRL5IEHKyMAVEY+38bNW3A==
-----END CERTIFICATE-----
Generated at Wed Apr 8 10:23:43 2026 by rpki-client