Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft
File:                     Lv74nW1YMOr9plod8ZRuR6FEpBk.mft (raw, json)
Hash identifier:          /2lcnmiaEwTtRfTlSrA/Edquq8brpJdnItzGP+O734M=
Subject key identifier:   12:28:B1:52:8A:61:54:EF:9A:7A:AB:F7:0B:E4:AF:FD:49:27:23:01
Authority key identifier: 2E:FE:F8:9D:6D:58:30:EA:FD:A6:5A:1D:F1:94:6E:47:A1:44:A4:19
Certificate issuer:       /CN=A9123F2F/serialNumber=2EFEF89D6D5830EAFDA65A1DF1946E47A144A419
Certificate serial:       B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft
Manifest number:          B3
Signing time:             Sun 05 Apr 2026 06:28:01 +0000
Manifest this update:     Sun 05 Apr 2026 06:28:00 +0000
Manifest next update:     Sun 12 Apr 2026 06:28:00 +0000
Files and hashes:         1: Lv74nW1YMOr9plod8ZRuR6FEpBk.crl (hash: uEnY/vh1N/P8PE0Hvc0ASDuE6FvVjmWeHfl+2Y2ONcw=)
                          2: 72AD814686F911F0A97FA80EC4F9AE02.roa (hash: t6ZSVMbsxuBBJVxsfnJR2/4SpjFBD9tweOs5BjzUU9w=)
                          3: E7930D061E6111F098E32F79C4F9AE02.roa (hash: tRzWam95vSpEscniZPqXRHQpti8KQpPkufP+tHJBdpA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.crl
                          rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:27:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183 (0xb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123F2F, serialNumber=2EFEF89D6D5830EAFDA65A1DF1946E47A144A419
        Validity
            Not Before: Apr  5 06:28:00 2026 GMT
            Not After : Apr 12 06:28:00 2026 GMT
        Subject: CN=69d200f0-a405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f6:1c:a6:41:ed:19:39:5d:d4:17:b9:79:c1:
                    b6:6a:94:c3:8f:f8:a8:94:6b:45:e6:9f:2f:a1:1d:
                    94:6e:c4:21:9a:35:22:8d:80:d3:16:75:4f:90:a9:
                    1a:ad:e1:a3:70:26:72:aa:03:6e:e4:1d:21:77:4e:
                    4c:a5:32:43:29:4c:a3:a5:dd:0b:c3:12:56:eb:d2:
                    a0:7a:74:17:81:7c:25:c9:32:51:f6:7c:1b:fa:e7:
                    dd:05:d4:d6:af:0e:f6:b0:54:dd:80:5d:54:c4:b3:
                    14:b7:ba:be:5f:0a:bd:ab:00:c1:b9:83:d9:e4:bc:
                    a5:50:08:58:98:8e:ea:d6:8b:32:ec:eb:1f:1f:b2:
                    ac:a0:98:0c:37:3a:83:79:82:a2:e4:78:29:ac:3d:
                    30:0a:0c:7f:a8:3a:dc:00:0b:61:2c:34:36:cf:4f:
                    f6:7d:ba:d1:0f:41:9c:01:c5:2e:c6:a6:81:c0:aa:
                    cd:8d:40:a5:55:c5:fd:bd:d8:75:a4:f5:9e:94:a6:
                    16:e4:51:6a:07:35:a2:f6:04:10:81:31:1c:65:9a:
                    bc:f4:96:14:12:9f:bc:e4:51:4f:e7:ed:11:12:02:
                    6c:c1:b5:82:23:06:f6:09:5d:2b:1d:dc:2e:4c:4f:
                    b3:ff:5a:c2:42:0c:fc:2a:ad:d9:99:30:06:16:75:
                    7b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:28:B1:52:8A:61:54:EF:9A:7A:AB:F7:0B:E4:AF:FD:49:27:23:01
            X509v3 Authority Key Identifier:
                keyid:2E:FE:F8:9D:6D:58:30:EA:FD:A6:5A:1D:F1:94:6E:47:A1:44:A4:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:7d:08:27:4d:13:d7:b7:fa:5f:4f:48:7b:83:2b:a4:07:de:
         3a:04:6a:a9:37:8a:0b:31:46:be:1f:d5:84:32:3e:1b:d7:47:
         e7:21:c7:20:19:93:1b:d1:c7:e7:04:33:73:3f:73:e1:b8:67:
         04:d4:11:2f:7f:c5:ca:32:cb:d7:56:13:dc:8f:25:ab:13:e2:
         48:94:7a:ce:ac:b3:ba:ca:3f:38:da:3b:53:a3:7b:a4:d7:53:
         36:66:3a:87:ba:34:ac:92:73:45:8b:c9:f7:ab:f0:14:09:d5:
         65:74:e3:66:67:f7:02:7d:9d:d5:3d:80:5b:8d:31:b2:7f:1c:
         fd:15:89:98:f0:3b:b8:51:fe:3b:94:b0:77:9d:49:c5:a2:c3:
         b7:6b:83:e6:7e:d0:87:90:23:9c:d0:b6:7a:ee:a2:af:99:5d:
         cf:1f:82:6c:79:18:a5:43:33:db:74:c5:fe:47:24:44:46:3f:
         0f:9d:09:fc:4b:36:72:e0:78:65:fa:f7:7b:e4:69:87:fa:fd:
         04:61:e6:9b:44:d1:7c:3c:15:e7:c9:9b:5c:6e:db:7b:89:13:
         ff:c8:67:5a:ba:4b:ec:7d:0e:3c:76:17:98:db:77:4b:0e:65:
         3a:72:c8:6f:f9:2d:48:43:01:e9:27:e3:bf:c3:5f:2d:ba:b3:
         78:51:f4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:52:05 2026 by rpki-client