Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.mft
File:                     Lfmh43Whe46lYCe0WovWb5Z0fYY.mft (raw, json)
Hash identifier:          umh1I1rpbE3G0I5W4o296OE/78sw6k7nmuiyeKDlbRw=
Subject key identifier:   8C:FC:D6:19:14:0B:18:5A:CB:12:08:B5:B0:79:D2:33:CE:A9:51:73
Authority key identifier: 2D:F9:A1:E3:75:A1:7B:8E:A5:60:27:B4:5A:8B:D6:6F:96:74:7D:86
Certificate issuer:       /CN=A9185B6D/serialNumber=2DF9A1E375A17B8EA56027B45A8BD66F96747D86
Certificate serial:       01B2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Lfmh43Whe46lYCe0WovWb5Z0fYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.mft
Manifest number:          019C
Signing time:             Fri 17 Apr 2026 04:13:55 +0000
Manifest this update:     Fri 17 Apr 2026 04:13:55 +0000
Manifest next update:     Fri 24 Apr 2026 04:13:55 +0000
Files and hashes:         1: Lfmh43Whe46lYCe0WovWb5Z0fYY.crl (hash: e7KbFZCUzpAOZikagdE9dOi/VewYgin2nAhKbhlEtrc=)
                          2: BA6555344DEE11F0B209371DC4F9AE02.roa (hash: EVXt3bTmFBpg7tvfSnoRf14VmLrxNNDyv7kNCjZE6JI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.crl
                          rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Lfmh43Whe46lYCe0WovWb5Z0fYY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:13:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434 (0x1b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185B6D, serialNumber=2DF9A1E375A17B8EA56027B45A8BD66F96747D86
        Validity
            Not Before: Apr 17 04:13:55 2026 GMT
            Not After : Apr 24 04:13:55 2026 GMT
        Subject: CN=69e1b383-1d7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c8:2b:09:1a:f0:3c:16:c7:df:30:d5:7f:fb:
                    20:1f:4a:45:15:c1:08:23:84:51:69:b3:f9:8c:2a:
                    c2:e2:e1:b5:6a:93:ef:20:5c:f9:30:25:fe:11:0d:
                    17:b5:18:fd:e8:d3:19:c0:7b:7a:2c:d4:0e:7b:a3:
                    58:6b:10:71:48:d3:6a:88:39:90:a7:4e:6e:7a:d4:
                    bd:3b:90:d6:73:cf:28:a3:07:c2:85:93:14:6b:2b:
                    a8:4d:88:49:fd:28:c4:fd:92:9a:7d:d4:1c:55:6c:
                    96:2f:a6:7c:b0:7e:a8:13:14:cb:e2:5e:96:05:f8:
                    cd:37:d6:97:97:aa:7c:c3:ba:98:95:8a:ca:82:98:
                    e7:0f:26:47:04:09:c5:c9:6d:1a:b0:d6:5e:f3:b5:
                    d4:00:70:69:e4:16:cc:f7:4b:01:13:a1:98:e9:89:
                    dc:62:ea:de:68:39:34:9c:98:2f:37:d9:e5:a6:a6:
                    18:f4:76:d7:09:bb:a1:a2:77:cf:09:ef:88:51:03:
                    fe:7a:0a:d7:e0:4a:1e:11:39:86:ef:3a:b9:79:14:
                    ca:5f:33:5a:dc:99:0f:2f:7b:bb:7b:3c:14:4b:c2:
                    46:ec:b6:c1:ed:12:b0:73:ce:e1:cf:a9:37:a6:17:
                    f5:1d:26:8e:9d:98:6a:0c:5a:fe:1b:dd:88:46:ac:
                    52:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:FC:D6:19:14:0B:18:5A:CB:12:08:B5:B0:79:D2:33:CE:A9:51:73
            X509v3 Authority Key Identifier:
                keyid:2D:F9:A1:E3:75:A1:7B:8E:A5:60:27:B4:5A:8B:D6:6F:96:74:7D:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Lfmh43Whe46lYCe0WovWb5Z0fYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:f1:bc:2d:88:6d:c5:0a:55:66:a8:1c:fd:83:87:cd:6c:17:
         a9:66:f9:f4:6b:a1:b9:f7:8c:12:d8:b7:8b:37:f4:cf:ba:85:
         33:c6:6b:b8:95:7f:7f:27:15:bb:43:86:51:78:86:71:64:c2:
         d0:ca:ce:ca:d3:d5:d0:52:6a:9b:aa:73:da:0e:93:3b:da:f4:
         35:a6:ba:62:09:29:a5:65:d6:60:3c:10:1c:3e:42:4e:03:16:
         94:47:27:c8:aa:ca:85:51:07:28:2b:83:ea:39:08:aa:8a:3d:
         96:b9:7d:9d:35:ff:b1:04:06:89:84:25:17:df:0f:e4:6d:37:
         39:e2:63:17:75:cb:63:a8:ef:02:a5:dd:19:8f:0d:10:8e:c1:
         92:59:e7:4d:49:ca:6b:40:2f:b1:00:b1:c6:8e:68:8c:2f:b1:
         58:70:64:cb:c8:0a:25:36:71:50:b9:8b:91:74:e0:de:0c:97:
         d0:1c:54:23:b6:d3:36:dc:bf:e3:7e:76:02:91:ab:fa:eb:7c:
         11:30:c3:f4:bb:a0:b6:91:cc:a4:59:1e:4c:7a:28:05:80:16:
         85:92:85:c1:54:8e:fd:18:fa:3d:63:ae:a0:39:5c:3d:d9:50:
         b6:e2:61:04:74:7f:e2:f4:60:09:20:40:9d:82:07:7d:c3:f9:
         7b:72:9b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:06:00 2026 by rpki-client