Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft
File:                     mLI8urGE2rGtANEAC4IMmyGkM-w.mft (raw, json)
Hash identifier:          R9M8EhTAF17tvkdOkaQeFDrnYNIEukUTV+/cTqP4TWA=
Subject key identifier:   85:A8:18:7E:17:2C:AF:02:B9:6B:8E:EA:61:24:14:88:A6:93:04:FE
Authority key identifier: 98:B2:3C:BA:B1:84:DA:B1:AD:00:D1:00:0B:82:0C:9B:21:A4:33:EC
Certificate issuer:       /CN=A9182FBC/serialNumber=98B23CBAB184DAB1AD00D1000B820C9B21A433EC
Certificate serial:       1261
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft
Manifest number:          123C
Signing time:             Sat 04 Apr 2026 17:01:00 +0000
Manifest this update:     Sat 04 Apr 2026 17:01:00 +0000
Manifest next update:     Sat 11 Apr 2026 17:01:00 +0000
Files and hashes:         1: mLI8urGE2rGtANEAC4IMmyGkM-w.crl (hash: +fw5KsAPR3XYE20pX55ZP3X5iXa1+Xqj6IOV0YwimDs=)
                          2: 38F5C602B18711EC9F9FA058C4F9AE02.roa (hash: V0cr8aX14uWEEWz5HgA49PAr418Rwt7O1IgwtljgIiE=)
                          3: 37BC67B4B18711EC9F9FA058C4F9AE02.roa (hash: uw3x4cCrEOXVGSx9HLNoaCGi5i7d3mdJuRAyyNS0hCQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.crl
                          rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 17:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4705 (0x1261)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182FBC, serialNumber=98B23CBAB184DAB1AD00D1000B820C9B21A433EC
        Validity
            Not Before: Apr  4 17:01:00 2026 GMT
            Not After : Apr 11 17:01:00 2026 GMT
        Subject: CN=69d143cc-5968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f0:b2:2c:d7:6c:fd:1b:1d:d1:9c:d0:11:73:
                    58:5e:c6:97:0a:71:33:65:2f:48:25:2a:f1:bd:47:
                    8f:a5:57:41:ad:38:a0:a3:0d:ba:5d:e5:93:b6:46:
                    97:cd:7f:ce:af:d5:00:60:8f:33:fa:f9:e3:8d:1c:
                    51:65:3d:87:af:22:b9:28:da:4d:11:33:ea:5f:20:
                    3d:c7:f8:54:8b:43:5c:b6:d2:e2:47:ed:f5:72:99:
                    3b:6c:0b:be:cc:84:75:5a:af:d6:1f:c8:02:b6:74:
                    31:ac:4a:91:5c:fa:b3:91:62:53:ed:94:e6:da:fc:
                    06:73:76:2d:41:6e:60:94:e1:75:95:78:de:47:5a:
                    0f:ee:38:61:71:9f:b0:07:ca:43:b0:ec:f5:78:81:
                    8e:a5:f7:7e:05:61:2a:b8:89:7e:93:c0:63:9a:53:
                    c7:c1:3a:13:e9:43:c4:0b:12:19:fb:fe:69:81:15:
                    0d:26:20:ee:0b:b4:67:53:77:ec:02:f9:33:74:5c:
                    73:7f:82:bd:28:6b:f1:e2:61:03:65:94:f6:50:56:
                    3e:36:5a:46:55:e3:e1:a1:c9:9e:7e:86:ae:fb:fe:
                    24:5c:94:ca:5f:35:1e:46:9e:4a:af:81:d1:6c:3d:
                    e0:a2:15:52:0e:3b:43:03:6d:1d:f1:70:bc:06:d1:
                    05:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A8:18:7E:17:2C:AF:02:B9:6B:8E:EA:61:24:14:88:A6:93:04:FE
            X509v3 Authority Key Identifier:
                keyid:98:B2:3C:BA:B1:84:DA:B1:AD:00:D1:00:0B:82:0C:9B:21:A4:33:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:1c:c7:cb:f5:70:6c:16:db:32:f9:49:c9:4f:bb:71:ed:e7:
         7d:96:6b:81:ce:6b:1c:b1:b6:3f:7b:2f:de:5c:7d:d0:c9:76:
         50:ae:0b:ee:4c:fd:ab:9b:b1:e0:f3:fc:23:3b:de:cb:41:e6:
         ae:c6:9f:77:37:6f:2b:f1:f3:ec:4b:24:3b:b5:4d:34:da:30:
         31:89:41:3a:9d:32:e1:f7:3c:aa:46:b5:aa:e2:62:1d:23:fd:
         de:1c:c0:f9:b9:f0:4a:c2:87:16:0c:a1:c8:d2:7c:78:56:63:
         47:2d:38:5f:29:fc:9f:03:d2:9e:38:08:2e:37:b8:bd:da:60:
         06:aa:cc:29:5d:ef:7d:3c:d8:ed:ad:3a:8e:1f:ed:b9:62:98:
         e2:ca:69:7b:a1:42:97:be:4c:a0:2d:4c:7d:67:04:b0:c9:fa:
         3f:93:68:e3:7f:36:76:44:27:7f:0b:0c:b5:0b:3c:39:a8:7f:
         9b:12:0a:3e:33:d8:37:7d:bd:be:0a:60:1c:86:31:6e:1c:90:
         f5:66:d1:d2:3a:1a:cb:6d:04:26:73:3f:0e:3b:6c:7d:3d:b9:
         e4:26:1a:37:e3:65:8b:3d:aa:17:7f:ec:ef:bd:29:13:ed:0f:
         06:89:23:fd:c6:d2:7e:c5:d5:da:ea:33:12:83:b4:c7:48:bf:
         3f:0c:40:b9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODJGQkMxMTAvBgNVBAUTKDk4QjIzQ0JBQjE4NERBQjFBRDAwRDEwMDBCODIwQzlC
MjFBNDMzRUMwHhcNMjYwNDA0MTcwMTAwWhcNMjYwNDExMTcwMTAwWjAYMRYwFAYD
VQQDEw02OWQxNDNjYy01OTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsPCyLNds/Rsd0ZzQEXNYXsaXCnEzZS9IJSrxvUePpVdBrTigow26XeWTtkaX
zX/Or9UAYI8z+vnjjRxRZT2HryK5KNpNETPqXyA9x/hUi0NcttLiR+31cpk7bAu+
zIR1Wq/WH8gCtnQxrEqRXPqzkWJT7ZTm2vwGc3YtQW5glOF1lXjeR1oP7jhhcZ+w
B8pDsOz1eIGOpfd+BWEquIl+k8BjmlPHwToT6UPECxIZ+/5pgRUNJiDuC7RnU3fs
AvkzdFxzf4K9KGvx4mEDZZT2UFY+NlpGVePhocmefoau+/4kXJTKXzUeRp5Kr4HR
bD3gohVSDjtDA20d8XC8BtEFuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIWoGH4X
LK8CuWuO6mEkFIimkwT+MB8GA1UdIwQYMBaAFJiyPLqxhNqxrQDRAAuCDJshpDPs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkZCQy9BMzM1QjI1OEZD
RTQxMUU4OTBGQzFFMzdDNEY5QUUwMi9tTEk4dXJHRTJyR3RBTkVBQzRJTW15R2tN
LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21MSTh1ckdFMnJHdEFORUFDNElNbXlHa00tdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MkZCQy9BMzM1QjI1OEZDRTQxMUU4OTBGQzFFMzdDNEY5QUUwMi9tTEk4dXJHRTJy
R3RBTkVBQzRJTW15R2tNLXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoxzHy/VwbBbbMvlJyU+7ce3nfZZrgc5rHLG2P3sv3lx90Ml2UK4L7kz9q5ux
4PP8Izvey0HmrsafdzdvK/Hz7EskO7VNNNowMYlBOp0y4fc8qka1quJiHSP93hzA
+bnwSsKHFgyhyNJ8eFZjRy04Xyn8nwPSnjgILje4vdpgBqrMKV3vfTzY7a06jh/t
uWKY4sppe6FCl75MoC1MfWcEsMn6P5No4382dkQnfwsMtQs8Oah/mxIKPjPYN329
vgpgHIYxbhyQ9WbR0joay20EJnM/DjtsfT255CYaN+Nliz2qF3/s770pE+0PBokj
/cbSfsXV2uozEoO0x0i/PwxAuQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 15:16:34 2026 by rpki-client