Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.mft
File:                     LJql-YLItE-ibfCM6iQx15qsN1U.mft (raw, json)
Hash identifier:          RmJnYYW1sdvMiQSWKEekOa5srNJjQoFWaG3YchHGJ1o=
Subject key identifier:   58:51:CF:C1:EC:ED:E9:6A:59:D5:54:B4:AA:DA:23:D4:82:9E:E2:52
Authority key identifier: 2C:9A:A5:F9:82:C8:B4:4F:A2:6D:F0:8C:EA:24:31:D7:9A:AC:37:55
Certificate issuer:       /CN=A91A4ACD/serialNumber=2C9AA5F982C8B44FA26DF08CEA2431D79AAC3755
Certificate serial:       45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJql-YLItE-ibfCM6iQx15qsN1U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.mft
Manifest number:          45
Signing time:             Sun 05 Apr 2026 07:43:59 +0000
Manifest this update:     Sun 05 Apr 2026 07:43:59 +0000
Manifest next update:     Sun 12 Apr 2026 07:43:59 +0000
Files and hashes:         1: LJql-YLItE-ibfCM6iQx15qsN1U.crl (hash: +LKMFuitQ+dkPMwyRj1UW5fRN8BBKAfRyvv5lvtx77M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.crl
                          rsync://rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJql-YLItE-ibfCM6iQx15qsN1U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:43:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4ACD, serialNumber=2C9AA5F982C8B44FA26DF08CEA2431D79AAC3755
        Validity
            Not Before: Apr  5 07:43:59 2026 GMT
            Not After : Apr 12 07:43:59 2026 GMT
        Subject: CN=69d212bf-52ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0f:06:5d:9c:96:f6:99:3d:f2:40:48:30:31:
                    4b:a3:a0:fe:86:6a:db:74:67:a0:9d:9f:f0:c9:2d:
                    c1:4a:a0:b9:7f:b9:e0:6b:dc:6b:e2:2a:d0:7b:86:
                    de:65:18:cd:39:eb:6f:87:ff:17:2d:27:ed:82:47:
                    08:a6:9b:44:6d:98:ce:ce:44:c1:ff:91:27:fa:8e:
                    1a:49:7b:8e:22:0e:cf:0c:91:f3:fe:29:f0:45:16:
                    33:f3:a4:d1:47:4d:fa:73:fb:02:c3:8a:09:5d:ce:
                    2e:a5:dd:bd:48:f1:1b:9a:aa:0f:4e:30:08:4b:23:
                    32:fb:70:1a:61:31:fe:5a:de:41:1b:0c:c3:d9:5d:
                    5b:35:c0:ef:39:fa:c8:cf:ce:49:ab:e6:bd:e8:5e:
                    7c:c9:f9:12:87:99:1d:5a:5b:10:9d:a4:c3:88:e7:
                    e2:b7:df:27:03:88:45:42:e7:4a:6a:62:d1:b5:9d:
                    17:b6:26:48:3f:20:cf:2b:d2:bb:5a:d4:89:db:49:
                    a8:08:3f:61:b7:18:88:bd:70:8a:32:ba:ad:82:52:
                    31:73:0f:06:58:72:20:36:35:ff:f6:4e:08:fc:35:
                    4c:4b:7a:d2:2a:4b:47:79:3f:25:69:1f:c2:bc:76:
                    82:b6:1b:da:68:f4:d1:34:14:4c:69:0b:07:df:51:
                    dd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:51:CF:C1:EC:ED:E9:6A:59:D5:54:B4:AA:DA:23:D4:82:9E:E2:52
            X509v3 Authority Key Identifier:
                keyid:2C:9A:A5:F9:82:C8:B4:4F:A2:6D:F0:8C:EA:24:31:D7:9A:AC:37:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJql-YLItE-ibfCM6iQx15qsN1U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4ACD/BCDBD4E4CB9A11F0B700C116C4F9AE02/LJql-YLItE-ibfCM6iQx15qsN1U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:c3:d6:d3:42:06:dc:a4:50:82:83:0e:32:d6:41:e2:bc:2a:
         c8:6e:5f:3a:e7:99:ef:c4:5b:dd:06:18:86:f1:e6:e3:56:2b:
         de:e8:25:7c:b6:55:fa:d9:0e:31:a2:10:c5:de:9c:c6:57:61:
         7e:36:55:29:d3:82:b6:02:91:e4:07:da:c7:dd:b5:ad:8d:be:
         29:44:4d:cc:09:b1:93:a4:36:0a:cd:75:5e:46:be:66:07:51:
         3c:84:fd:0b:27:fc:a8:0a:e4:20:7c:b9:13:dd:e4:1b:46:38:
         5f:5f:67:1a:4c:1a:52:dc:4e:83:3f:e2:d4:12:12:a1:f6:7e:
         69:e6:7d:b8:88:ce:b8:6d:2e:95:0a:23:6e:88:3f:ea:66:48:
         1b:9d:5b:e2:71:2a:ab:62:83:2c:cc:f4:3d:de:34:53:86:7e:
         1a:90:aa:2f:61:8a:6c:85:ca:5a:59:50:83:56:5f:86:69:67:
         08:f7:c2:39:23:89:69:3f:97:ca:5d:8d:c4:e1:df:ab:d5:54:
         d0:b7:e2:20:7a:07:7e:0d:df:33:ce:de:2d:2b:d1:34:92:5d:
         01:d4:77:c8:30:24:a4:49:aa:f4:bb:b0:7a:64:c5:59:47:d5:
         24:1c:aa:87:69:51:21:28:bf:c6:e9:ba:d1:b2:b7:5e:19:51:
         00:4f:ea:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:37 2026 by rpki-client