Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
File:                     4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft (raw, json)
Hash identifier:          XtLhoBsAhcJWkEVZ+GnrcXtYwIWt5Szz4WPt4mintt4=
Subject key identifier:   32:59:A8:64:0F:3A:A1:B7:A1:3A:24:CE:5F:E8:C9:18:A8:83:C3:27
Authority key identifier: E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87
Certificate issuer:       /CN=A914E600/serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087
Certificate serial:       011B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
Manifest number:          0113
Signing time:             Tue 03 Mar 2026 05:29:31 +0000
Manifest this update:     Tue 03 Mar 2026 05:29:30 +0000
Manifest next update:     Tue 10 Mar 2026 05:29:30 +0000
Files and hashes:         1: 4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl (hash: l5jrjIPOl8M5DmUAToyotp1B7pdNa+koiC3wUvWr/CI=)
                          2: D86268E877F111EFADAB6362C4F9AE02.roa (hash: y1LKkgDaRj1ISWViw1cpYZqZzU1kENkFG+OyOnuW6h8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl
                          rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 05:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283 (0x11b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E600, serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087
        Validity
            Not Before: Mar  3 05:29:30 2026 GMT
            Not After : Mar 10 05:29:30 2026 GMT
        Subject: CN=69a671bb-302b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:06:de:39:c6:0c:9f:f4:5b:fc:ad:5a:f1:eb:
                    8a:19:1b:cd:29:e8:51:0a:34:af:42:75:5f:94:45:
                    00:64:de:80:e9:9a:22:f4:38:5a:00:8c:dc:d1:79:
                    e3:2c:d2:11:1e:18:aa:5b:b1:91:7b:ec:8c:ab:f0:
                    b6:32:61:ff:b8:ca:0c:be:19:fe:1a:54:82:9e:37:
                    1d:80:e0:fa:4f:75:df:c1:87:a3:9f:6b:d7:3f:ca:
                    50:a1:0f:d9:50:89:94:9c:8b:d3:a6:f0:78:b1:7e:
                    ab:67:22:24:c4:24:98:f1:0d:77:01:34:f6:ab:02:
                    06:77:89:a6:71:b8:e1:da:34:4a:34:1c:36:eb:f3:
                    55:75:d2:f0:7d:5f:a8:fe:72:ed:53:2e:cd:21:08:
                    f8:ed:5a:62:c3:3d:cd:55:57:66:06:fd:16:b5:df:
                    87:58:85:9c:c1:31:36:39:40:e6:b2:b1:91:9a:47:
                    bf:58:1f:79:fe:af:4d:75:96:7f:3b:fc:22:15:bc:
                    c7:15:0b:1d:24:59:6f:8d:c0:a6:21:2f:5d:59:1a:
                    75:80:4b:4b:5d:cf:a0:6a:dc:ef:30:ba:47:17:16:
                    5a:a5:7c:d8:cc:fb:aa:91:f1:be:99:d7:ea:1d:20:
                    3c:c7:f6:d2:90:e9:7d:75:41:38:5c:3f:1d:ba:62:
                    b1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:59:A8:64:0F:3A:A1:B7:A1:3A:24:CE:5F:E8:C9:18:A8:83:C3:27
            X509v3 Authority Key Identifier:
                keyid:E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:30:83:4f:d6:26:86:ba:7a:93:7d:72:11:08:8d:33:01:16:
         41:fc:56:ec:a7:5c:71:d0:9f:23:7c:d8:a8:5f:74:6a:83:11:
         de:fe:0a:94:4c:c4:67:c1:7f:58:49:b9:6d:3f:68:11:fb:10:
         95:54:a3:e4:5e:34:f4:12:b2:53:e9:2c:97:46:7a:88:6e:15:
         f8:86:f6:fa:68:7d:3f:c4:df:f4:39:6a:84:4d:7b:18:44:99:
         f1:a0:e2:3d:4d:06:aa:45:46:4a:f2:9a:3a:9c:dc:99:bf:3f:
         56:46:a1:7b:b6:e6:0c:03:03:52:70:53:5a:53:54:63:5e:2b:
         57:45:d4:61:da:3a:c5:1a:84:3c:db:77:d2:cc:53:94:97:d5:
         aa:15:53:cb:3e:82:a5:7a:29:fe:e2:4e:f9:73:3e:39:f3:1d:
         10:9e:25:d1:05:90:2d:f6:00:6d:44:5c:86:96:fe:e7:ad:86:
         89:d6:b8:ab:53:1e:2f:e5:61:b0:1e:79:95:b0:bd:71:4e:4f:
         18:9f:31:43:cc:b7:07:db:93:f8:fd:b8:bb:b3:69:62:48:74:
         46:6b:ae:3e:e1:8e:ab:82:56:b4:5c:fa:c4:4a:73:a2:98:d6:
         06:20:1f:39:f7:2d:15:ea:b1:35:25:76:e4:25:f5:74:39:b7:
         3a:1e:3c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:21:58 2026 by rpki-client