Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
File:                     LgN_IhyajV_cyIxDyosl1ENrsDk.mft (raw, json)
Hash identifier:          G1KGic1paiVgPuzRal6EmE5RGtHk+MA4eYivJEY1QAE=
Subject key identifier:   10:1F:4A:EB:BD:97:8A:F8:48:4B:F9:86:CF:06:27:32:48:D8:5D:25
Authority key identifier: 2E:03:7F:22:1C:9A:8D:5F:DC:C8:8C:43:CA:8B:25:D4:43:6B:B0:39
Certificate issuer:       /CN=A9196285/serialNumber=2E037F221C9A8D5FDCC88C43CA8B25D4436BB039
Certificate serial:       C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
Manifest number:          BC
Signing time:             Fri 13 Mar 2026 05:57:12 +0000
Manifest this update:     Fri 13 Mar 2026 05:57:12 +0000
Manifest next update:     Fri 20 Mar 2026 05:57:12 +0000
Files and hashes:         1: LgN_IhyajV_cyIxDyosl1ENrsDk.crl (hash: dK7MdYAA9pds8vxIoB/WCHlLWFFxH1iAuaZ2AdxqFTA=)
                          2: D3E69766027B11F0ACFB0B53C4F9AE02.roa (hash: KwucprH89zI40KlMGp9yYI7Eo1rslTO1XAG7Mp4YGYs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.crl
                          rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 05:57:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196 (0xc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196285, serialNumber=2E037F221C9A8D5FDCC88C43CA8B25D4436BB039
        Validity
            Not Before: Mar 13 05:57:12 2026 GMT
            Not After : Mar 20 05:57:12 2026 GMT
        Subject: CN=69b3a738-bb41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8d:09:05:f7:b5:c9:97:ac:2e:9f:87:8d:db:
                    a0:e6:db:08:90:c5:d1:c6:a0:dd:89:f8:a9:58:5f:
                    8c:58:07:0b:27:eb:5d:8e:ca:a1:3e:d0:9e:c3:28:
                    a4:6a:48:8c:14:3f:1d:27:17:96:7c:12:17:b3:b7:
                    78:94:f3:e9:ca:f8:7c:fd:73:ea:92:2d:ff:f5:49:
                    27:28:09:73:e5:ff:48:ea:a3:05:68:08:56:f5:7f:
                    7c:5a:7c:77:04:8e:b5:69:74:aa:f6:5b:c8:d8:47:
                    9a:ed:dd:4a:17:a4:b1:89:c9:c2:d8:ac:bf:7a:94:
                    54:99:d4:59:46:7d:50:63:01:dc:57:4f:85:3b:c3:
                    a0:d8:0b:b1:be:b5:ba:75:36:ae:f9:5e:ad:c0:8c:
                    0b:49:e6:d2:3a:e4:af:58:4c:a7:0b:3e:f2:f0:a4:
                    b0:c1:a8:8c:1a:a7:92:9a:e1:10:52:a9:40:f3:44:
                    7e:2b:0a:c2:87:c7:6e:40:f6:c4:25:5f:5a:79:7c:
                    eb:5f:a5:1f:29:c8:84:e5:1b:e8:15:83:7a:14:ca:
                    0b:f1:1c:83:b7:65:63:d3:cc:64:14:89:cf:80:66:
                    03:ff:61:90:77:aa:af:6f:0c:9c:20:a4:b9:60:91:
                    15:e7:27:c9:57:aa:7c:df:4e:68:4d:97:65:3b:62:
                    58:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:1F:4A:EB:BD:97:8A:F8:48:4B:F9:86:CF:06:27:32:48:D8:5D:25
            X509v3 Authority Key Identifier:
                keyid:2E:03:7F:22:1C:9A:8D:5F:DC:C8:8C:43:CA:8B:25:D4:43:6B:B0:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:78:63:8b:c5:22:fc:4c:48:b9:be:74:f3:5c:60:c1:87:55:
         3a:31:fa:df:8e:1a:71:43:dc:0c:da:5e:8a:f2:06:4a:8b:6a:
         44:e5:06:19:44:28:d5:f2:06:3b:a8:2c:e4:1e:bb:10:cb:f2:
         76:7c:38:a5:c0:28:81:00:d7:3a:78:e7:d1:46:ba:28:8e:de:
         7e:f5:85:63:57:59:de:36:3c:d6:a7:44:42:af:4d:d1:6e:83:
         88:06:f5:4a:b0:91:57:1e:75:a5:8f:04:a9:fe:5c:d4:b4:ca:
         cd:24:a6:d0:90:67:7e:12:96:f6:f7:9d:a9:01:95:51:6c:ad:
         8d:0e:07:7b:20:86:6f:6a:65:9e:c8:6f:0a:f7:78:9a:b4:e5:
         e1:46:55:44:d8:73:6d:90:cb:68:de:96:f7:52:6e:de:53:51:
         6b:38:8b:85:0b:70:e0:fa:be:9c:26:56:50:4d:66:8b:23:fc:
         b6:ad:8a:59:5e:d5:fa:e1:ec:ad:5d:a1:e0:da:b9:75:2d:9f:
         f9:4d:bd:33:c0:b3:97:59:a2:9e:18:56:3b:ba:64:bb:91:95:
         06:50:98:02:21:94:f0:40:fc:2a:32:0b:84:c4:44:99:dd:a4:
         7b:74:7d:e0:86:cb:0f:f1:3f:0a:be:2f:f5:c8:9c:a3:1b:7d:
         67:64:55:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 20:56:03 2026 by rpki-client