Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft
File:                     4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft (raw, json)
Hash identifier:          RH1wy1rJRc403SaAvmxW4YZNGUOXGRRD3w0N1Pl9dSw=
Subject key identifier:   84:AB:D7:08:14:0C:EE:9A:1A:0C:ED:D4:20:80:D0:55:80:6E:D7:44
Authority key identifier: E0:B4:45:8B:9A:BD:32:03:51:73:53:EC:80:BE:31:0C:36:55:4D:AE
Certificate issuer:       /CN=A91273A9/serialNumber=E0B4458B9ABD3203517353EC80BE310C36554DAE
Certificate serial:       021D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft
Manifest number:          0219
Signing time:             Sun 05 Apr 2026 02:23:14 +0000
Manifest this update:     Sun 05 Apr 2026 02:23:14 +0000
Manifest next update:     Sun 12 Apr 2026 02:23:14 +0000
Files and hashes:         1: 4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl (hash: Qyjgc1cd5ZU7W3Lb+XvrMhAVRM9AyYFz9M5Sg8lHmio=)
                          2: 831C2D12FAD711EDBF5E232DC4F9AE02.roa (hash: AhGKgfXwB3QCEYVYk2JC1x2s8zC2sNYIPveCwndDaTw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl
                          rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 02:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 541 (0x21d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91273A9, serialNumber=E0B4458B9ABD3203517353EC80BE310C36554DAE
        Validity
            Not Before: Apr  5 02:23:14 2026 GMT
            Not After : Apr 12 02:23:14 2026 GMT
        Subject: CN=69d1c792-2eec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fe:14:42:a4:fe:66:37:73:96:e8:34:e4:03:
                    58:0c:d9:cb:8b:b3:22:a5:e1:d5:e0:a7:55:09:70:
                    2a:01:4a:2d:1d:b2:d7:c1:6c:17:7b:f7:5c:c0:f8:
                    bc:1d:93:a4:85:16:35:b6:a2:c5:0e:cb:ee:79:23:
                    36:a5:9d:aa:5f:1e:8e:3e:3d:33:eb:f2:fb:8f:99:
                    b6:3f:63:e2:c7:1e:72:73:b2:b1:25:1e:32:eb:1f:
                    e6:a0:91:e7:4a:4a:c8:8f:cb:c5:fa:75:a4:a6:15:
                    d4:9b:2c:42:72:62:00:ba:d0:aa:e0:4f:7a:9c:da:
                    bf:33:4d:09:80:38:7c:89:26:53:44:57:63:28:d5:
                    36:6d:d9:50:4b:3b:29:bc:bb:7a:e7:70:81:65:40:
                    01:fc:ac:63:97:d3:15:b0:01:45:45:97:18:bf:a5:
                    df:71:7a:1d:66:c6:00:2a:2b:6f:bf:5d:55:cb:6d:
                    65:6c:f1:89:37:00:2f:28:28:86:50:fa:da:5d:2c:
                    70:60:61:e0:6a:34:90:1e:9d:03:94:21:2a:35:9b:
                    b7:23:9f:c2:62:74:07:7e:b8:f3:3b:c7:1b:2b:c3:
                    0b:65:a0:3e:e3:36:bc:ef:db:aa:20:b4:b9:8b:e2:
                    04:1d:cd:54:2d:90:d2:d7:c2:29:c6:e6:f3:c4:9c:
                    db:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:AB:D7:08:14:0C:EE:9A:1A:0C:ED:D4:20:80:D0:55:80:6E:D7:44
            X509v3 Authority Key Identifier:
                keyid:E0:B4:45:8B:9A:BD:32:03:51:73:53:EC:80:BE:31:0C:36:55:4D:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:14:ce:2e:8f:48:8b:33:8e:ba:9e:dd:80:ad:49:25:cc:21:
         f1:b8:4b:25:fb:8c:46:40:8b:1e:99:2a:b9:c3:d7:db:3e:05:
         8a:14:4e:a9:ae:34:bb:76:8f:88:fc:28:ee:19:ad:91:4c:b3:
         46:b7:f5:7a:b6:9d:af:2b:0e:93:d0:45:27:68:b0:3f:6b:af:
         e0:39:f0:79:ec:1d:f9:97:41:e9:ad:d8:2c:6c:cd:e1:06:76:
         5d:a2:cf:70:a9:5b:27:65:7e:7c:f5:79:d3:61:bc:bf:f1:24:
         f9:da:99:56:9a:13:b6:48:e1:9b:f3:10:39:ea:e2:1d:4b:e5:
         96:1d:35:ed:48:84:4d:4c:38:63:dd:1e:73:83:3f:45:9a:cb:
         a4:63:5c:7a:6d:dd:ea:b3:a0:e0:29:25:02:34:31:52:15:fe:
         e5:21:24:4c:b8:19:89:b7:90:28:57:5f:ca:91:14:6a:1d:57:
         bf:04:3c:a0:0c:56:e6:6b:57:02:78:15:3d:43:fd:43:13:26:
         4d:b9:6a:7e:4d:fd:11:69:39:c0:d4:61:ad:4b:3f:03:67:6d:
         bb:9e:3d:82:e3:38:11:18:de:f1:9d:11:5f:5a:c9:cc:5e:2d:
         68:bd:61:8b:14:18:85:dc:ef:5b:d7:a8:30:5f:e8:23:6c:68:
         8a:cb:8d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:56:14 2026 by rpki-client