Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
File:                     Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft (raw, json)
Hash identifier:          Vxommx2aM9m5KRTjl+7cP2NdXoIvIN1L1VIk9Str7yA=
Subject key identifier:   72:0B:72:7D:6F:9B:69:B8:5F:CA:A9:57:A4:FB:C6:F5:BA:38:0B:3F
Authority key identifier: 2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2
Certificate issuer:       /CN=A91A8A85/serialNumber=2EAF60095334E7F0BAA065A92F653F5C744895C2
Certificate serial:       0795
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
Manifest number:          0782
Signing time:             Sat 04 Apr 2026 21:24:47 +0000
Manifest this update:     Sat 04 Apr 2026 21:24:47 +0000
Manifest next update:     Sat 11 Apr 2026 21:24:47 +0000
Files and hashes:         1: Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl (hash: MZr6SSXVQktgd51gsoNyDv25sZZAFeMu29zwzu5jaAg=)
                          2: 6FBFD196C3B811EF82B40031C4F9AE02.roa (hash: r2E33zBN68DzdFBxJzHPWNCremEV/5Gpjhm3sPaTCEM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl
                          rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 21:24:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1941 (0x795)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8A85, serialNumber=2EAF60095334E7F0BAA065A92F653F5C744895C2
        Validity
            Not Before: Apr  4 21:24:47 2026 GMT
            Not After : Apr 11 21:24:47 2026 GMT
        Subject: CN=69d1819f-d531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5e:f5:51:af:4c:6b:ae:46:35:29:05:d2:5b:
                    e3:fa:68:7d:78:03:f9:e8:d3:a6:2c:30:33:2f:6e:
                    7b:ab:b6:e4:76:93:63:20:52:8c:5f:6e:ed:9f:2e:
                    39:95:73:d4:2a:8c:4f:54:09:4f:b9:d6:c1:b9:2d:
                    fb:8c:17:b2:86:d9:7c:47:c4:92:71:24:88:b9:11:
                    41:0d:84:08:08:93:3a:33:13:d2:56:36:7d:82:fb:
                    ac:b3:b9:d9:d7:2c:67:08:8d:69:ea:54:fd:65:12:
                    bd:52:16:c1:ee:d8:9b:ee:36:25:97:7c:51:2c:c7:
                    8e:ba:63:c6:73:f5:e9:b7:d4:5c:b8:fe:c4:52:21:
                    89:30:f7:04:f2:7a:cb:28:1d:65:72:58:c8:d7:ae:
                    6c:23:7c:38:9f:f9:fb:d5:7c:cf:c9:b4:2a:a8:17:
                    ac:2e:9d:b0:c5:1b:99:5e:d8:40:55:c5:cf:98:42:
                    74:74:33:7f:70:fb:80:22:65:0e:38:34:e8:ba:5f:
                    f7:c5:2a:56:01:b7:b1:18:b5:b2:f1:9d:0b:c5:80:
                    40:28:59:87:a0:26:7b:72:04:c2:a7:fd:62:2c:6e:
                    09:2b:46:85:97:81:e9:1c:2d:fd:82:ae:ef:33:3a:
                    56:cb:c0:3b:2e:4f:7e:de:1c:b9:1b:b1:a0:57:7f:
                    35:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:0B:72:7D:6F:9B:69:B8:5F:CA:A9:57:A4:FB:C6:F5:BA:38:0B:3F
            X509v3 Authority Key Identifier:
                keyid:2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:fb:05:87:9b:70:82:6b:9e:c1:15:30:0a:28:5b:f8:c1:bd:
         9e:72:71:8a:10:26:bb:be:76:ca:1f:bb:c1:c2:e3:10:9e:88:
         4c:a6:e8:d9:cc:09:ad:e2:27:8d:86:05:84:58:fa:76:82:cf:
         98:d7:96:9e:bd:51:78:be:b9:62:39:a8:ba:1d:75:a7:8f:f3:
         a3:11:17:69:05:f9:f5:ac:24:d8:82:84:a3:b9:f6:ec:99:dd:
         71:52:16:6c:6e:92:e0:81:d3:17:09:c8:56:09:0f:34:a0:da:
         1e:6b:f6:e6:25:94:8f:a4:c7:f1:ec:18:90:1a:31:34:c7:d3:
         74:92:ec:3c:31:47:be:62:39:1d:a7:4e:d7:b4:76:bb:16:ac:
         7f:81:4e:46:11:6d:cb:92:f7:e3:8e:70:2b:00:87:de:d9:b6:
         c2:af:90:fc:c3:24:a7:4b:45:4a:b5:33:67:2e:6d:34:1c:64:
         36:67:11:39:f2:01:b7:51:5c:7a:48:fb:ed:3c:c1:c6:e9:95:
         1d:61:c7:a2:d2:e3:f8:ea:95:89:61:64:77:2b:23:94:32:2d:
         b3:67:2a:e4:50:2c:d5:76:7c:9c:f3:08:98:2f:ff:93:87:29:
         c2:ca:d0:df:ba:fe:ed:70:87:a9:c2:4b:53:08:da:1a:0b:a2:
         be:80:cb:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:54:34 2026 by rpki-client