Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft
File:                     lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft (raw, json)
Hash identifier:          +m1hsx4hbijC1MysagxLoUni1pQg/YHfq3XAA5sUOG8=
Subject key identifier:   78:D8:5A:2D:C1:3B:0A:1D:8E:FA:5B:EF:B6:C7:DD:24:FA:06:2B:15
Authority key identifier: 96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2
Certificate issuer:       /CN=A919EFDE/serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2
Certificate serial:       35D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft
Manifest number:          3559
Signing time:             Sat 04 Apr 2026 14:24:58 +0000
Manifest this update:     Sat 04 Apr 2026 14:24:57 +0000
Manifest next update:     Sat 11 Apr 2026 14:24:57 +0000
Files and hashes:         1: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl (hash: 0MB7ixwrkKvoBhKb79wBygWyei3cvux+a2htAPr4+BI=)
                          2: 5113BF7CFE6011EA9D63505CC4F9AE02.roa (hash: M4WBswg1YJ4TezL6E7iYouHn8KwdFBvWXJuWc2T2coA=)
                          3: 1B513B10FA3011E9BF5A291EC4F9AE02.roa (hash: P3ZRq1xA8QtDqTnLHnRb3kjohttdnDktPk8gMx+p6lU=)
                          4: A769D0DEB0CA11E59BE6876FC4F9AE02.roa (hash: g0qbK+AgDky7jS+tfKk3FPH4lZwss0lhqd032VOFuPI=)
                          5: B2690D6CCA5511EE9683413FC4F9AE02.roa (hash: A+a3H+TI3Fy7ECqMtSSHf3q0bX9LrpXD0sKYqQLyRzM=)
                          6: A9D92784B0CA11E59BE6876FC4F9AE02.roa (hash: khATrdo5z+GWLARkNlA8hcKpjIC1yChn98ttcidrqFs=)
                          7: F6D63E40054A11EAA00FB024C4F9AE02.roa (hash: 7jOIbaiPNEQ5tv45ewj5Fz6f7M91EZnlJBs6MK56S3w=)
                          8: 19DE7DB0FA3011E9BF5A291EC4F9AE02.roa (hash: IrGm+0rrhe6nwg8fMZphy3bLySRgbqK4gCqvkr1SaPY=)
                          9: 1A7891D4FA3011E9BF5A291EC4F9AE02.roa (hash: KeE1mpgZhkEhqP2LCs6EXDMfZu6Zxoag+TQ3ftbgOYk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl
                          rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 14:24:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13777 (0x35d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EFDE, serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2
        Validity
            Not Before: Apr  4 14:24:57 2026 GMT
            Not After : Apr 11 14:24:57 2026 GMT
        Subject: CN=69d11f39-6ba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0e:50:54:b4:7b:60:a9:e9:0d:5e:5e:c0:8b:
                    88:5c:fd:eb:e4:fa:4a:46:6b:79:ec:11:39:8f:a9:
                    7f:d0:da:79:a1:94:2e:34:cc:84:15:a1:a2:22:fc:
                    7d:07:dc:2f:db:e8:1d:77:c5:d8:06:a8:75:5f:6e:
                    ac:9c:48:09:04:a9:09:66:70:fc:c6:d7:b8:0e:e2:
                    64:76:a6:c7:7e:d3:ed:9c:ca:61:92:de:79:f2:3c:
                    dc:bb:c7:81:23:2b:01:d3:e3:49:e9:2b:c8:c6:ad:
                    79:97:56:30:e7:cf:d5:bf:db:79:fb:2d:1c:ba:1f:
                    fb:cc:57:0c:b2:3c:aa:83:5b:ca:65:4a:22:99:30:
                    bb:56:3b:6f:c7:ca:14:ad:9f:26:e7:8d:de:1c:7d:
                    78:90:47:e9:78:77:ad:ad:5a:64:0e:6c:ee:b1:75:
                    74:60:fd:47:75:90:e1:6d:e8:ab:3d:4c:33:89:55:
                    94:e9:15:3f:8c:6d:31:34:f9:c8:bf:ff:fb:d2:b4:
                    c7:4c:63:5b:7e:15:e8:ff:3f:8d:74:4f:f8:b9:3c:
                    a8:39:4b:81:98:cb:e3:c4:c8:b6:38:45:cc:95:da:
                    af:12:e9:cc:59:15:b2:76:b1:4b:42:5a:5a:35:6f:
                    e1:b9:f7:43:19:be:e2:77:17:30:14:6f:70:15:63:
                    24:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D8:5A:2D:C1:3B:0A:1D:8E:FA:5B:EF:B6:C7:DD:24:FA:06:2B:15
            X509v3 Authority Key Identifier:
                keyid:96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:b6:2c:5d:dc:e5:30:f9:b6:ab:99:ef:28:7e:ac:6e:95:a6:
         b3:08:b0:ab:9c:be:3e:5d:ae:a5:62:95:02:dc:d7:42:96:15:
         3a:f5:2c:1f:d6:a5:38:83:4f:76:b6:27:fd:26:ae:37:0d:48:
         60:c4:28:21:84:f5:05:8c:11:4f:f8:03:2d:68:1d:96:f0:d0:
         96:30:b5:94:e4:3c:f6:05:41:5a:42:6e:51:37:e0:01:ec:b7:
         21:59:30:16:bf:16:ab:c1:a5:68:18:44:58:57:96:21:da:c0:
         44:35:ab:d9:05:e1:6c:bd:1c:19:5e:e7:e0:8d:c0:f6:f9:5f:
         7c:d6:24:1e:72:21:5c:c4:af:d7:06:a9:e3:79:12:88:df:23:
         86:be:47:ad:39:0c:ce:5a:36:f4:f7:26:5b:f5:5c:0e:bc:dd:
         07:45:b3:1a:e3:d3:12:88:52:85:32:b3:27:56:29:ea:08:f8:
         b9:7f:43:9e:be:c7:1b:2c:d6:9a:5f:5f:9c:6c:16:9a:fb:be:
         d4:cf:91:d6:67:36:82:25:d4:56:93:22:b3:ad:df:ac:f2:17:
         57:68:28:8a:29:26:f1:2b:a7:24:16:97:f3:a6:9d:1e:b8:aa:
         9f:b6:bc:b3:d2:e2:af:7e:32:23:52:9e:fe:d5:71:25:fd:8b:
         dd:b8:8f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:02 2026 by rpki-client