Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft
File:                     s-lBocVdFIOrV5HZSYdQ492t7cw.mft (raw, json)
Hash identifier:          RxG2xisTIo5nDIs2HFuTwvOqMy/YNd9dXb6NpcUfRWY=
Subject key identifier:   3B:49:30:7D:43:29:33:C2:85:DA:AE:C0:C2:6E:C3:E6:AC:53:B7:EC
Authority key identifier: B3:E9:41:A1:C5:5D:14:83:AB:57:91:D9:49:87:50:E3:DD:AD:ED:CC
Certificate issuer:       /CN=A913B018/serialNumber=B3E941A1C55D1483AB5791D9498750E3DDADEDCC
Certificate serial:       019C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s-lBocVdFIOrV5HZSYdQ492t7cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft
Manifest number:          0197
Signing time:             Sun 05 Apr 2026 03:47:32 +0000
Manifest this update:     Sun 05 Apr 2026 03:47:32 +0000
Manifest next update:     Sun 12 Apr 2026 03:47:32 +0000
Files and hashes:         1: s-lBocVdFIOrV5HZSYdQ492t7cw.crl (hash: YvXNgrYDGhJBusnoDF+fwsBzMTBHu5xXFhFuaQqA38I=)
                          2: 8B097276C5F911EE8D0FDF82C4F9AE02.roa (hash: 6FaC3RWt9d1k1q8QIDmkVggro95lutrtiUauXZX6w7k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.crl
                          rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s-lBocVdFIOrV5HZSYdQ492t7cw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:47:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412 (0x19c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B018, serialNumber=B3E941A1C55D1483AB5791D9498750E3DDADEDCC
        Validity
            Not Before: Apr  5 03:47:32 2026 GMT
            Not After : Apr 12 03:47:32 2026 GMT
        Subject: CN=69d1db54-77b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7b:d8:69:8d:5c:32:ee:b2:67:3d:87:12:92:
                    b5:69:5a:7f:7e:13:f5:b2:d1:7a:74:9b:88:e6:67:
                    af:2e:55:dd:ca:84:62:4f:f7:76:98:e4:d2:7d:44:
                    4f:18:08:c2:5a:c2:42:15:2e:c3:57:03:12:fa:16:
                    d7:9c:40:cf:20:25:1f:1b:b3:1e:f3:13:31:2b:ca:
                    33:27:7a:d8:11:75:ea:d3:5d:b5:96:f1:33:10:0e:
                    9c:ac:6b:f0:4b:e3:31:d9:ab:0d:0f:a5:3a:03:88:
                    a3:5a:45:a4:66:f3:39:41:4c:c6:bf:b2:da:c8:dd:
                    62:2e:28:2b:bb:8c:69:f8:04:e4:ac:47:f4:58:bb:
                    ff:7b:2c:51:37:5f:f0:5f:37:30:6a:1a:d4:1c:c7:
                    ac:69:9a:19:a3:fe:36:e4:f5:75:36:4c:a3:23:ce:
                    90:91:b7:8b:40:25:d7:26:0c:ef:42:21:04:bf:63:
                    3a:e6:ff:c0:34:54:a2:8a:b7:d2:e0:bd:73:37:eb:
                    56:20:5b:64:cf:b5:94:56:2b:94:f3:eb:fd:4f:a7:
                    6e:31:83:f0:14:01:80:2e:53:14:d2:7f:d1:94:61:
                    da:2d:2a:98:35:0e:97:4c:0b:a4:76:e5:7b:4f:60:
                    5c:95:37:a7:86:76:c1:98:d5:7e:92:8f:e3:40:68:
                    54:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:49:30:7D:43:29:33:C2:85:DA:AE:C0:C2:6E:C3:E6:AC:53:B7:EC
            X509v3 Authority Key Identifier:
                keyid:B3:E9:41:A1:C5:5D:14:83:AB:57:91:D9:49:87:50:E3:DD:AD:ED:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s-lBocVdFIOrV5HZSYdQ492t7cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:44:73:1c:ba:a2:64:58:89:25:80:91:5c:f4:ad:0f:dd:4a:
         f1:4b:82:a6:97:32:64:d7:ea:00:a0:a4:5b:e0:af:37:10:13:
         22:9b:1a:4d:42:26:ec:26:46:e4:84:6a:01:54:0a:3f:56:6a:
         6a:27:c2:32:27:10:0b:57:34:58:9f:fc:7f:f7:56:b5:a0:b8:
         db:5f:62:ae:56:d5:1f:11:99:2e:ca:59:d5:9b:1f:13:85:fa:
         ab:a2:20:58:98:fe:23:9f:4e:22:9e:90:69:3c:4f:7a:eb:bf:
         c4:75:6e:53:fe:e8:89:9b:66:63:e7:cc:b1:99:1a:7d:af:26:
         ab:4d:2a:e1:04:8a:57:76:02:5c:1c:b9:c8:6b:3c:73:12:f7:
         33:5a:df:27:13:f6:0d:16:12:ba:f3:fc:30:d3:b1:40:a2:e3:
         f8:13:2f:2d:ea:41:00:82:05:7d:5e:e7:cc:d3:9c:f1:45:2d:
         83:2a:e1:24:fc:cd:3b:1b:74:d7:8e:cc:e6:08:23:7b:26:0b:
         4c:7f:4b:aa:cf:b0:61:7d:e4:29:1a:eb:f2:10:3e:88:23:2c:
         f2:4e:77:bb:fe:e5:19:f5:e5:da:11:d5:6a:a9:da:b3:f6:7b:
         de:7b:d1:b3:8a:dd:de:ec:d5:2f:e1:14:4f:80:a1:33:d0:11:
         88:24:9f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:13:01 2026 by rpki-client