Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft
File:                     L0SuugpVRAZYiXBbwu8c2uEVgyU.mft (raw, json)
Hash identifier:          1KNLGTjgJEEFWvleM8HUQU3RC3CEk+LGDjb4GM+mt1k=
Subject key identifier:   59:D4:8E:17:68:38:06:5F:0A:A0:90:16:10:D2:EE:73:2B:D0:C6:E7
Authority key identifier: 2F:44:AE:BA:0A:55:44:06:58:89:70:5B:C2:EF:1C:DA:E1:15:83:25
Certificate issuer:       /CN=A912B600/serialNumber=2F44AEBA0A5544065889705BC2EF1CDAE1158325
Certificate serial:       3581
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft
Manifest number:          3558
Signing time:             Sat 04 Apr 2026 14:45:33 +0000
Manifest this update:     Sat 04 Apr 2026 14:45:33 +0000
Manifest next update:     Sat 11 Apr 2026 14:45:33 +0000
Files and hashes:         1: L0SuugpVRAZYiXBbwu8c2uEVgyU.crl (hash: MxSS1XeFtwAXWEDqJFWVOtan3N+llB+gei8o/UohqOo=)
                          2: CBCF6A88358611F08913BB23C4F9AE02.roa (hash: IpjTugbacRrmVDXaQ3QI6KXxc3S9UtKA8Py8AWeqxg8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.crl
                          rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 14:45:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13697 (0x3581)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B600, serialNumber=2F44AEBA0A5544065889705BC2EF1CDAE1158325
        Validity
            Not Before: Apr  4 14:45:33 2026 GMT
            Not After : Apr 11 14:45:33 2026 GMT
        Subject: CN=69d1240d-f050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bc:f3:1c:97:09:c5:fa:5c:80:a0:c9:f9:b6:
                    66:96:26:25:97:72:a9:5f:38:91:dc:72:6c:70:eb:
                    56:39:a6:d8:6e:22:e5:7d:d0:d1:41:5f:80:6f:23:
                    c6:b8:62:55:58:bd:85:06:67:57:d8:88:fe:a3:42:
                    b9:bf:e4:f6:ea:8d:52:30:dd:19:dd:77:78:91:69:
                    3f:ea:20:99:9d:42:f1:02:28:9c:54:6c:8e:b7:f6:
                    c7:ee:84:11:19:82:bf:69:a0:a2:ef:70:3b:19:7c:
                    f9:9b:a3:f0:8d:33:04:25:e6:eb:6d:f5:85:28:80:
                    38:e7:b8:b1:ab:39:eb:b3:18:84:ed:4b:e4:9d:2f:
                    be:de:c3:2c:ab:38:8d:ca:fa:3e:42:8a:19:b2:39:
                    f0:64:d4:8b:03:e7:bc:14:bc:a0:ec:84:96:3b:3f:
                    1c:1b:04:c4:eb:69:60:c3:c4:7e:6b:ae:11:6c:b0:
                    b3:c3:2a:f7:84:c0:1b:ba:97:28:24:61:76:8b:0e:
                    76:4a:5d:10:00:44:83:5d:41:2a:89:1a:12:eb:a5:
                    c5:3f:d6:23:cc:ad:fe:00:2f:d9:39:f3:3b:46:1c:
                    5a:a7:05:3f:e9:db:cd:a1:24:20:39:44:65:f6:69:
                    b3:6e:b1:bd:a6:f6:82:8a:75:2f:ea:e8:6b:32:42:
                    33:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:D4:8E:17:68:38:06:5F:0A:A0:90:16:10:D2:EE:73:2B:D0:C6:E7
            X509v3 Authority Key Identifier:
                keyid:2F:44:AE:BA:0A:55:44:06:58:89:70:5B:C2:EF:1C:DA:E1:15:83:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:3b:36:59:88:fb:f7:f7:02:69:c9:e3:77:a7:5f:d9:c4:fd:
         b6:60:32:ed:7f:f7:72:d9:bf:b6:d1:b4:bc:72:27:63:0f:d8:
         18:f5:51:89:0d:03:94:bb:7d:c1:4f:cb:f2:e5:ca:35:82:c8:
         e9:e4:2f:82:f2:da:e4:ac:cc:f9:7e:ef:c9:06:d4:a7:4f:3f:
         a5:aa:9c:91:a2:07:38:5d:e3:88:d7:91:16:29:99:73:48:1c:
         b2:d0:8c:d8:65:60:13:6d:dd:6f:bd:f0:d2:32:a8:17:98:2d:
         9e:6e:f9:89:33:69:42:93:c8:0f:d5:ea:24:65:54:33:34:26:
         12:cb:42:be:68:d2:f4:a7:3a:d9:5b:43:c2:4b:71:1f:c7:8a:
         36:47:ff:af:3a:d4:83:1a:3d:bc:0e:87:93:ec:24:47:0a:1b:
         14:fe:4f:df:33:f7:85:2a:4f:8a:e3:f3:89:85:40:ad:50:06:
         40:72:49:60:1c:2a:3e:4d:97:1b:22:63:01:33:d0:e4:61:d0:
         f6:d0:13:1d:6b:32:79:70:cb:d6:3b:d3:f2:d5:eb:0a:29:50:
         0f:05:4f:6c:3b:14:f7:b3:c1:b3:df:33:b3:6a:43:25:65:ee:
         e3:c3:b2:b0:1f:b0:ca:55:42:96:c6:f6:11:e9:3e:11:b8:c4:
         1d:33:4b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:31:49 2026 by rpki-client