Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
File:                     lWVe5y4XegIJbAy2BnaqHmaa5-A.mft (raw, json)
Hash identifier:          SpKZzoXo9bHr1wfNQIOxcn/NOzaK0MHfAIwU7HQAApQ=
Subject key identifier:   57:65:B9:1F:07:E3:BB:BD:78:22:99:07:19:E3:91:45:C2:9E:41:A5
Authority key identifier: 95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0
Certificate issuer:       /CN=A9127898/serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
Certificate serial:       01FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
Manifest number:          07AB
Signing time:             Thu 12 Mar 2026 22:40:45 +0000
Manifest this update:     Thu 12 Mar 2026 22:40:44 +0000
Manifest next update:     Thu 19 Mar 2026 22:40:44 +0000
Files and hashes:         1: lWVe5y4XegIJbAy2BnaqHmaa5-A.crl (hash: Th+GsuyvTqXwFHGAryobixN336unRUatwpB3z9sjs6k=)
                          2: BFD5DDF0D95311EF9B045445C4F9AE02.roa (hash: n7OEkS+f68NF4N/p9/uhdtvyYSY3OrDptN85GWEeXDg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl
                          rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 22:40:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 510 (0x1fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127898, serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
        Validity
            Not Before: Mar 12 22:40:44 2026 GMT
            Not After : Mar 19 22:40:44 2026 GMT
        Subject: CN=69b340ec-3309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9c:79:97:59:82:b3:36:b0:bb:4a:a4:a6:71:
                    3b:37:b1:a0:ff:87:46:11:fd:99:fa:17:d3:99:ac:
                    3f:7b:53:a3:76:eb:48:3c:5f:c3:ac:43:b3:f1:a3:
                    d7:dc:4b:e9:09:17:ee:d8:41:ac:93:8e:1c:a3:4c:
                    64:28:68:3e:da:e6:b0:23:c9:c2:3c:59:e2:ed:7b:
                    d3:81:f2:c9:d6:f7:33:59:d5:f2:10:65:26:3f:bc:
                    48:fa:24:2d:de:be:7d:b9:92:69:5b:ec:4b:29:0f:
                    c9:c9:95:36:70:77:15:0d:50:1a:e3:8d:29:25:ac:
                    cd:bb:f1:3e:fb:31:91:37:6b:96:3d:1b:34:91:f3:
                    f1:af:2f:8a:3c:5d:27:a3:96:ac:72:a7:5c:12:03:
                    63:0d:1c:21:f5:50:80:fe:bc:e7:cc:17:a6:20:08:
                    fc:ec:72:58:79:96:fc:c8:45:28:8f:91:06:fa:02:
                    1b:4a:1a:04:eb:86:4d:23:77:b4:f6:18:dc:35:41:
                    1d:21:e0:c3:ef:8b:5e:9f:98:ec:35:49:13:b2:f8:
                    f9:56:a0:8b:2d:0d:6d:aa:f4:41:10:5e:bb:0a:14:
                    8e:85:9b:de:92:e1:e0:01:d2:31:7f:3d:25:1b:0e:
                    12:94:68:2c:89:8e:56:22:d3:08:3a:30:f1:3b:fd:
                    78:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:65:B9:1F:07:E3:BB:BD:78:22:99:07:19:E3:91:45:C2:9E:41:A5
            X509v3 Authority Key Identifier:
                keyid:95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:4a:7c:ec:89:29:82:0b:48:32:98:9e:87:8a:15:ca:34:bb:
         47:27:0f:e4:dd:1f:cc:5b:ff:86:f6:f0:f4:eb:a5:ea:8b:5b:
         98:74:c9:1a:7e:3a:23:76:49:ea:84:44:18:9c:70:22:a0:e5:
         5e:ac:e9:18:9d:2d:57:93:c8:89:e5:04:20:a2:a3:a5:95:af:
         34:ef:9f:37:47:1b:50:53:8e:61:56:d6:d7:b3:e1:d1:4e:a8:
         83:7f:a0:b7:c4:fa:7e:f8:fb:54:e5:57:40:fe:9b:b7:12:31:
         dd:62:8a:cf:c9:bd:0a:76:6a:d2:57:00:05:64:37:88:0b:5e:
         f4:4e:a5:82:7e:de:0c:74:20:94:27:4a:86:d5:40:9a:a4:cf:
         ef:7b:39:36:54:f1:6a:40:3e:88:7e:ae:49:46:fc:e2:b9:b2:
         e5:29:b0:bd:a1:57:07:cc:5f:dd:1a:1d:83:a8:3a:fc:4e:21:
         0e:0b:63:2f:a3:1b:f0:7c:3f:c3:ca:38:5c:1a:f1:f9:4b:e5:
         17:e0:c3:a6:2f:c8:46:f2:a5:11:ef:d7:4e:1f:55:ba:04:2f:
         7b:f1:7d:8f:ec:a8:ce:c4:4d:ca:41:65:fb:13:d8:69:35:f7:
         a7:87:a2:5d:2d:f8:fa:18:90:b6:ed:0e:85:9d:c8:09:22:09:
         5d:e2:c0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 03:04:02 2026 by rpki-client