Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft
File:                     l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft (raw, json)
Hash identifier:          bwfRG9LIX29ZeJgIm0A0/UpabWRqfmXPNctpDOTNwWM=
Subject key identifier:   60:E3:9A:F7:FF:FC:8E:18:10:3F:37:CA:70:EA:15:44:C5:BB:5F:C8
Authority key identifier: 97:95:8F:FF:E6:96:D8:0C:57:63:65:24:A4:6E:18:23:41:76:FB:C1
Certificate issuer:       /CN=A91309C9/serialNumber=97958FFFE696D80C57636524A46E18234176FBC1
Certificate serial:       04AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5WP_-aW2AxXY2UkpG4YI0F2-8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft
Manifest number:          04A7
Signing time:             Sat 04 Apr 2026 23:43:26 +0000
Manifest this update:     Sat 04 Apr 2026 23:43:26 +0000
Manifest next update:     Sat 11 Apr 2026 23:43:26 +0000
Files and hashes:         1: l5WP_-aW2AxXY2UkpG4YI0F2-8E.crl (hash: aNx9gmsJwuWFOKON1oxOr5poFirCEzcgsMHUVk3NtRk=)
                          2: 46BFB17C739711ECAD333D27C4F9AE02.roa (hash: gIEs5PsSbdv2kd7fXZi9XdqKRPbKMGlmjiL9BhYFLAM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.crl
                          rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5WP_-aW2AxXY2UkpG4YI0F2-8E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:43:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1198 (0x4ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91309C9, serialNumber=97958FFFE696D80C57636524A46E18234176FBC1
        Validity
            Not Before: Apr  4 23:43:26 2026 GMT
            Not After : Apr 11 23:43:26 2026 GMT
        Subject: CN=69d1a21e-2bc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:af:4a:83:02:23:2d:00:fe:df:e0:61:02:80:
                    7c:73:61:36:80:f1:3d:4e:76:87:ad:13:4f:23:33:
                    9d:fb:68:73:42:6c:e3:92:a2:11:51:ef:b3:f3:8a:
                    1a:93:df:0d:55:da:97:b6:04:91:31:e6:50:c2:7c:
                    58:d4:42:45:20:da:ec:0b:99:2d:d9:93:5c:71:73:
                    62:e1:d7:7e:b2:d3:2d:c4:c0:7c:9d:e0:2d:94:c8:
                    0c:47:f9:6a:5f:17:07:7d:41:f9:d7:62:6b:3e:cd:
                    23:dc:86:96:03:b4:9f:d1:d6:fc:5c:56:10:48:6c:
                    c8:c0:50:60:04:f9:e7:2a:64:ed:b3:24:4d:35:e3:
                    b3:4e:85:09:db:1a:c6:ed:5d:4b:1f:18:2b:54:bc:
                    70:1c:18:3c:a0:0a:63:36:57:5b:f3:ea:9c:35:80:
                    0f:50:96:8e:10:0a:91:be:32:6b:ee:1e:96:c1:e5:
                    9a:10:47:fa:f8:9f:d2:83:80:8d:e0:44:9b:d1:3c:
                    ca:6d:da:7a:4c:7c:a9:da:58:fe:2d:74:29:6a:cb:
                    d0:8c:9a:24:f6:a3:e0:24:46:3b:dc:b1:1c:cc:bf:
                    a7:8f:c7:83:5a:b8:85:74:f7:18:59:54:c1:fb:6c:
                    96:bf:69:9f:52:53:c6:b7:61:d0:58:a0:04:57:67:
                    5e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E3:9A:F7:FF:FC:8E:18:10:3F:37:CA:70:EA:15:44:C5:BB:5F:C8
            X509v3 Authority Key Identifier:
                keyid:97:95:8F:FF:E6:96:D8:0C:57:63:65:24:A4:6E:18:23:41:76:FB:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5WP_-aW2AxXY2UkpG4YI0F2-8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:64:11:73:b9:1b:9f:75:d7:bd:a6:5e:47:51:e7:a0:b4:43:
         aa:cd:3a:ea:1a:d6:ec:9d:4b:4f:5e:76:a5:9e:ab:23:56:84:
         20:26:ae:65:4d:f2:3c:e4:06:76:17:81:0e:ae:86:4a:85:22:
         82:f2:7e:be:50:68:3d:cc:75:a1:c2:fd:55:5a:b5:b3:c1:ed:
         ed:44:ab:bb:2d:c9:e4:f4:13:94:be:d4:0a:18:0f:63:5d:3d:
         d0:46:0d:36:00:bf:ff:65:dc:62:aa:79:59:6a:86:dd:f2:31:
         e3:bc:e0:6f:d0:80:42:8d:e9:54:2d:41:05:2a:ec:a5:ff:ed:
         4a:30:72:d8:c4:c3:9e:cd:3b:22:ce:1e:ab:a6:ad:37:7b:fa:
         01:f4:21:42:b2:50:80:64:e7:d3:d0:ae:4f:97:e3:cb:71:f1:
         2e:63:cf:12:ba:94:ad:f3:72:22:31:97:b1:b9:8f:b2:03:9e:
         a3:d3:b4:64:d5:cc:1c:aa:b5:60:f4:e8:ce:a9:f4:a3:66:7c:
         0c:f5:3c:ac:b0:11:44:dc:08:c4:50:b9:6f:e3:4c:b6:b5:ff:
         0f:ce:11:31:cd:26:30:35:be:1d:85:7e:ce:04:cc:47:fa:3a:
         e4:e1:66:d5:f7:e1:b4:31:8a:e9:f5:03:e5:fa:4e:65:9a:7f:
         33:d9:f8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:59:32 2026 by rpki-client