Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft
File:                     lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft (raw, json)
Hash identifier:          olW2w1y/t0GRgrGNngqNIzW6kKsczGbEMsfswjqNelw=
Subject key identifier:   5D:BA:9B:0B:10:1B:C1:43:D4:9C:19:0C:B7:8A:5E:FA:33:21:BE:C8
Authority key identifier: 94:C6:43:E1:6D:04:A7:73:8B:C7:2B:5B:10:7E:05:B1:61:61:40:13
Certificate issuer:       /CN=A91CAA8A/serialNumber=94C643E16D04A7738BC72B5B107E05B161614013
Certificate serial:       35
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lMZD4W0Ep3OLxytbEH4FsWFhQBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft
Manifest number:          33
Signing time:             Fri 17 Apr 2026 08:21:23 +0000
Manifest this update:     Fri 17 Apr 2026 08:21:23 +0000
Manifest next update:     Fri 24 Apr 2026 08:21:23 +0000
Files and hashes:         1: lMZD4W0Ep3OLxytbEH4FsWFhQBM.crl (hash: 5XA3B/qicWY6yEEHyNeNOZPJEVIvZuxOYNMoBcwXopQ=)
                          2: 537A2262F2D211F0BAE73FD33C6F56BC.roa (hash: dMndGGXMF1UUV3V1XnDiN6BWOBr7tp/sHPGvsw6xkRE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.crl
                          rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lMZD4W0Ep3OLxytbEH4FsWFhQBM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:21:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CAA8A, serialNumber=94C643E16D04A7738BC72B5B107E05B161614013
        Validity
            Not Before: Apr 17 08:21:23 2026 GMT
            Not After : Apr 24 08:21:23 2026 GMT
        Subject: CN=69e1ed83-b976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f6:d5:12:cb:3f:f2:3a:c5:ab:9c:57:26:67:
                    e2:9f:b0:7e:56:f2:88:8d:6b:fa:8f:47:e4:26:c6:
                    eb:12:a3:0a:e3:36:75:2c:48:53:2b:45:ef:08:0d:
                    81:4a:00:e9:59:c9:99:6d:2a:46:bf:a4:a5:05:e2:
                    b1:64:18:55:21:36:e4:e3:37:c1:28:db:ea:35:a5:
                    68:f5:e3:13:6f:5e:fa:a3:8a:01:9c:a8:17:68:69:
                    ee:c5:11:bf:b9:71:30:72:4a:93:e9:b1:f9:6e:8f:
                    86:23:85:48:d8:ed:b5:22:83:58:a0:71:c6:68:d5:
                    b6:e9:e9:df:a1:0d:56:98:c0:f3:59:35:f2:98:f6:
                    29:dc:be:97:cf:f5:60:5f:fd:08:57:9f:00:ff:b1:
                    a5:a5:48:2a:69:f5:34:28:ba:7f:08:d0:72:9a:93:
                    d8:6c:37:12:5f:71:f9:cc:1e:14:fb:9f:1d:18:99:
                    6e:ea:06:1a:11:16:13:8e:77:ea:19:36:f0:4f:e1:
                    bc:3f:91:4f:3e:85:88:f7:e5:b0:fb:43:5d:0c:26:
                    4c:19:54:3a:9e:bb:9a:da:05:50:3b:6b:bb:3c:67:
                    fd:5e:0e:d6:ba:72:d4:9d:9b:5d:5b:7c:bc:34:29:
                    b3:26:2e:b8:85:25:5b:45:99:45:a6:ac:2d:43:77:
                    04:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:BA:9B:0B:10:1B:C1:43:D4:9C:19:0C:B7:8A:5E:FA:33:21:BE:C8
            X509v3 Authority Key Identifier:
                keyid:94:C6:43:E1:6D:04:A7:73:8B:C7:2B:5B:10:7E:05:B1:61:61:40:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lMZD4W0Ep3OLxytbEH4FsWFhQBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:71:89:c1:78:1a:b3:b2:d3:5c:6f:64:2b:43:0f:3e:22:4b:
         8e:e5:e7:a2:ac:6c:90:33:ad:5c:f2:d5:54:17:ae:b3:2e:58:
         02:31:bf:b5:fb:2d:95:3e:1f:09:09:19:a3:df:73:e3:a6:08:
         6b:2c:2f:9e:d6:13:49:13:d8:c1:46:d1:30:72:02:a2:bb:d5:
         5c:64:dd:4a:d7:81:97:e8:9d:22:cf:08:1a:ec:7d:4e:51:15:
         78:a6:2b:e6:2c:97:22:9f:47:8d:44:a0:5a:6e:54:12:a2:77:
         7b:59:70:22:05:6f:74:2e:96:59:b7:54:d0:6c:08:d3:f4:91:
         26:7a:05:39:ab:b3:e5:ac:c6:46:80:be:41:5a:71:95:f9:51:
         66:f6:d6:11:16:e3:5a:56:f6:53:56:41:32:69:e7:6e:ef:2b:
         45:76:e4:8b:c2:f7:fc:6a:67:c8:88:d9:05:4f:42:12:52:37:
         4d:93:6a:9b:f9:a9:f7:f0:8f:c6:5c:ff:ac:e4:5b:c8:cb:3f:
         1e:60:b0:0c:61:c9:5d:09:a7:c7:54:96:c4:78:32:5e:41:ba:
         64:ab:4b:a8:6a:c7:e7:c4:80:d7:14:4f:e4:7c:18:85:55:52:
         7d:dd:f2:83:f1:71:3d:a5:aa:d0:88:3c:e8:dc:2e:de:49:6e:
         6f:e6:b3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 22:24:01 2026 by rpki-client