Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.mft
File:                     F-lBr577tRXXwktBjmn5hnx6FMo.mft (raw, json)
Hash identifier:          LwwPLMTDz3zginDKlJqRnaaTz44H1bp7B1l9BmWVcnQ=
Subject key identifier:   A6:88:8A:D7:D7:D7:39:86:A5:9A:0A:21:D8:DC:83:86:88:5A:8D:96
Authority key identifier: 17:E9:41:AF:9E:FB:B5:15:D7:C2:4B:41:8E:69:F9:86:7C:7A:14:CA
Certificate issuer:       /CN=A9129023/serialNumber=17E941AF9EFBB515D7C24B418E69F9867C7A14CA
Certificate serial:       0158
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F-lBr577tRXXwktBjmn5hnx6FMo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.mft
Manifest number:          0158
Signing time:             Sun 05 Apr 2026 04:26:00 +0000
Manifest this update:     Sun 05 Apr 2026 04:26:00 +0000
Manifest next update:     Sun 12 Apr 2026 04:26:00 +0000
Files and hashes:         1: F-lBr577tRXXwktBjmn5hnx6FMo.crl (hash: lgsJ4zQMjf3u/Z6Ue93vCKKubZfiz9WaBUzTdQZPEhg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.crl
                          rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F-lBr577tRXXwktBjmn5hnx6FMo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:25:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 344 (0x158)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129023, serialNumber=17E941AF9EFBB515D7C24B418E69F9867C7A14CA
        Validity
            Not Before: Apr  5 04:26:00 2026 GMT
            Not After : Apr 12 04:26:00 2026 GMT
        Subject: CN=69d1e458-6718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:85:18:0a:1c:c7:55:43:bf:3b:01:45:d2:de:
                    39:5f:43:da:3d:68:05:67:eb:bf:26:0e:1c:68:3c:
                    46:9c:e2:36:70:d3:94:d8:dd:3b:a1:da:e5:b8:37:
                    eb:0a:bf:9b:b0:b3:90:9c:41:a0:5e:69:6a:fc:fe:
                    5d:cc:6e:0d:f7:34:0b:38:42:5e:fc:19:ac:a1:a9:
                    fc:a1:75:87:55:b1:99:e2:23:d6:e2:e2:f9:4c:06:
                    44:63:b7:ec:6c:5a:3e:cf:94:bc:8f:41:5e:e7:f3:
                    4a:b5:80:dc:1d:3e:e8:88:04:4c:4c:4b:5e:ef:9d:
                    a3:66:7c:09:0e:fc:85:5e:07:36:28:1d:03:f2:55:
                    26:a0:de:46:a1:39:82:2e:df:31:d7:41:df:e0:8a:
                    ea:74:e6:f4:3a:e4:ba:9c:06:af:69:17:5a:60:cb:
                    99:26:80:db:2f:ad:e8:6e:2e:c0:b3:5b:73:fe:1c:
                    5b:8f:38:23:01:73:39:d7:00:fa:cc:d9:80:d0:e3:
                    cd:e8:f0:9f:16:78:8c:f2:8a:73:90:3c:18:eb:37:
                    77:0f:c0:89:28:6f:a6:ac:24:ea:c0:64:02:bb:3b:
                    99:63:a0:09:64:49:81:1c:80:d5:98:b0:6f:d3:5f:
                    04:50:43:5b:22:05:0c:7f:f7:78:39:87:0b:68:fc:
                    7c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:88:8A:D7:D7:D7:39:86:A5:9A:0A:21:D8:DC:83:86:88:5A:8D:96
            X509v3 Authority Key Identifier:
                keyid:17:E9:41:AF:9E:FB:B5:15:D7:C2:4B:41:8E:69:F9:86:7C:7A:14:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F-lBr577tRXXwktBjmn5hnx6FMo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:9e:71:90:74:a3:2e:0e:23:9a:33:a1:0e:da:77:9f:10:31:
         87:bd:d6:6c:a6:6d:fb:cc:9d:10:1e:ba:08:83:34:35:6a:56:
         73:63:76:4a:71:53:cc:34:03:f6:53:b1:03:93:ea:da:25:93:
         59:18:53:28:92:0b:58:32:64:ad:9d:54:b8:e5:63:63:5b:92:
         bc:1d:d3:6b:85:6e:15:40:f3:ac:e6:63:04:06:4e:ba:7d:15:
         9d:91:7f:9c:ab:47:36:94:4c:27:97:7c:4f:92:a4:b7:a1:1e:
         8c:d0:ef:49:45:c0:5e:4d:19:34:87:5f:57:15:7b:eb:e9:85:
         70:77:dd:75:02:ac:f2:ca:8c:b5:7f:61:0b:39:a7:00:e9:84:
         2d:9b:21:ff:68:35:a6:17:c7:e2:80:78:91:21:ba:3b:4f:15:
         77:2e:da:62:a3:88:b0:89:5c:f4:40:95:bd:c7:94:f6:93:3a:
         78:d6:5d:ab:be:04:bc:6a:cd:03:45:9c:36:15:b8:95:60:b8:
         da:25:8e:9c:22:4d:d6:c9:a4:db:81:54:d1:2c:45:b7:24:08:
         82:d3:78:e4:a2:04:f3:93:fb:56:cf:27:a8:39:18:5e:1f:27:
         d1:ec:ea:a1:fc:79:a9:20:f4:ff:1b:2f:79:bc:0d:64:06:26:
         c3:7d:65:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:48 2026 by rpki-client