Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft
File:                     loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft (raw, json)
Hash identifier:          DGbNwRuBA27VsD9q18l3I5c1DClZrlGlctLRwa81F20=
Subject key identifier:   1B:1C:AA:A8:2E:65:26:23:12:76:D0:58:F4:66:CC:9E:6C:CD:02:89
Authority key identifier: 96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6
Certificate issuer:       /CN=A91514B1/serialNumber=9682C2ABE25323580776B1D0E275D2FD2D697EB6
Certificate serial:       05FA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft
Manifest number:          05D7
Signing time:             Thu 12 Mar 2026 22:40:32 +0000
Manifest this update:     Thu 12 Mar 2026 22:40:31 +0000
Manifest next update:     Thu 19 Mar 2026 22:40:31 +0000
Files and hashes:         1: loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl (hash: 6KlbzAs13r0QD2buT2MCetrGYjKVB0+SATF1Gzx8KmA=)
                          2: F1C7A044D91E11EFAD3C7613C4F9AE02.roa (hash: X85hHwwMk7D4YA68Yefpn/DdDekokXijChU0NLic1JM=)
                          3: D3D36BE0271011ECA0D7D95AC4F9AE02.roa (hash: 3HHpLWwhlM54c0ygayHpZ//nfGJy4YzZlrDagN2/hEE=)
                          4: AF0A3F14178911EC876F5F50C4F9AE02.roa (hash: Ae3vnYMRPKUdXa+CO5NCrtQU86FdJMZKr59EI0hk4E8=)
                          5: AE8BB766178911EC876F5F50C4F9AE02.roa (hash: +d1MUKmmVJG/vsTFf7Frn1NwsWtESd/BW6+x47gDzSQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl
                          rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 22:40:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1530 (0x5fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91514B1, serialNumber=9682C2ABE25323580776B1D0E275D2FD2D697EB6
        Validity
            Not Before: Mar 12 22:40:31 2026 GMT
            Not After : Mar 19 22:40:31 2026 GMT
        Subject: CN=69b340df-3548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:9f:0d:8a:22:02:b3:62:87:9f:b8:75:e0:f3:
                    39:f1:3e:9f:ae:19:e9:77:5a:39:56:64:aa:68:61:
                    42:0c:c4:f4:7a:ea:27:45:68:a2:2f:d9:43:5a:76:
                    c0:51:90:b9:d6:f8:c5:a4:d9:fd:7d:92:7e:6b:a9:
                    b6:5e:11:d3:33:14:8f:f1:cf:2c:6f:b3:2d:9a:2b:
                    d9:b3:02:89:13:5a:35:9d:4b:a6:bf:68:57:cf:a5:
                    ec:66:d0:ca:38:16:e5:71:b8:4d:fb:3c:73:a6:f7:
                    1e:2e:5e:24:85:15:26:89:97:d2:e2:b2:f7:07:31:
                    cd:9e:b6:1c:07:99:3c:02:2c:bb:ea:f5:37:00:cd:
                    84:da:c1:dc:b7:fd:c7:9b:32:99:ea:d8:1f:80:9a:
                    1c:90:ac:1b:8d:52:95:45:04:f2:cb:02:f9:6a:77:
                    4f:7f:d6:24:9f:cd:59:fc:eb:6d:b5:ad:4d:8e:43:
                    94:f2:2e:5b:92:ee:53:d0:a4:ed:da:29:2f:4d:28:
                    94:b5:ab:ba:0a:0d:88:af:40:05:f4:a2:ce:54:ff:
                    b3:d9:49:b3:91:09:b8:78:7e:be:ca:93:da:35:ec:
                    f7:75:1a:5d:85:b6:0f:ad:5b:86:39:4a:d4:fb:56:
                    3c:01:a4:4e:20:55:d7:d7:49:ba:fb:91:79:bd:af:
                    64:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:1C:AA:A8:2E:65:26:23:12:76:D0:58:F4:66:CC:9E:6C:CD:02:89
            X509v3 Authority Key Identifier:
                keyid:96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:c1:a0:d9:c2:1d:97:84:d0:bc:8b:ce:bd:4f:27:c2:6c:95:
         0d:e1:ef:df:54:ea:90:a7:dc:b5:04:f5:a4:08:c3:23:eb:a7:
         cd:0a:a9:84:4b:97:80:fb:1c:4b:a8:c1:bb:31:cd:08:12:8e:
         6b:f8:67:59:4e:d0:c8:85:36:62:59:3e:86:19:8e:5b:cc:bc:
         88:f7:e9:c1:79:9d:d7:4c:76:02:f3:44:f2:6e:b4:3f:54:34:
         51:f9:13:eb:4e:cf:0a:02:b4:a4:cb:c5:b0:8a:60:a7:ca:83:
         fa:9e:96:cd:69:4c:70:f7:f3:80:5d:0d:66:4b:40:2d:8d:eb:
         8e:f7:e0:b6:c1:ed:24:90:59:70:4a:2a:1b:ca:ec:0d:8f:85:
         94:29:07:ba:60:1e:f2:a0:e2:d7:44:34:3e:20:75:a7:99:46:
         63:f3:01:d0:97:6d:a8:b8:41:58:d1:8a:09:ae:dc:63:4f:cd:
         67:cd:d7:20:d2:77:00:40:66:9f:20:27:16:c8:7a:d6:56:c2:
         6a:78:70:bc:df:82:d9:3f:36:71:d0:3d:7c:21:38:da:b4:b6:
         e1:1d:74:a1:61:1e:7e:6d:e5:93:61:1b:02:2e:21:e8:3f:ed:
         09:c2:9e:26:e7:61:4c:71:cf:7e:a1:40:79:ed:4d:91:d5:6d:
         2c:5b:c1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:51:38 2026 by rpki-client