Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.mft
File:                     LsoZlE2psLqHJb5wu-9Unl0huTc.mft (raw, json)
Hash identifier:          oem7wvdOJWVe53O00Px4DQV0M7IGkp9//bqw73y4Gr4=
Subject key identifier:   27:41:5A:35:71:C4:2A:FA:A4:B1:C7:17:F6:6E:2A:EF:3B:26:DE:5E
Authority key identifier: 2E:CA:19:94:4D:A9:B0:BA:87:25:BE:70:BB:EF:54:9E:5D:21:B9:37
Certificate issuer:       /CN=A91F0C55/serialNumber=2ECA19944DA9B0BA8725BE70BBEF549E5D21B937
Certificate serial:       0851
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsoZlE2psLqHJb5wu-9Unl0huTc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.mft
Manifest number:          0848
Signing time:             Sat 04 Apr 2026 20:37:43 +0000
Manifest this update:     Sat 04 Apr 2026 20:37:42 +0000
Manifest next update:     Sat 11 Apr 2026 20:37:42 +0000
Files and hashes:         1: LsoZlE2psLqHJb5wu-9Unl0huTc.crl (hash: Gth2oZDlWctoM4bjpDy5a69kj8c18nEJ2QiZXlVrIWI=)
                          2: 29B0FABC031511EB8CE8EF17C4F9AE02.roa (hash: 4fBuoHY1aMFnEZVyrM9kK7WExJGfPRlEzazH9d4YXTs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.crl
                          rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsoZlE2psLqHJb5wu-9Unl0huTc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 20:37:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2129 (0x851)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0C55, serialNumber=2ECA19944DA9B0BA8725BE70BBEF549E5D21B937
        Validity
            Not Before: Apr  4 20:37:42 2026 GMT
            Not After : Apr 11 20:37:42 2026 GMT
        Subject: CN=69d17697-797a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:04:a2:fb:6b:39:6d:2a:03:b7:53:64:75:c6:
                    d0:7e:02:34:df:19:94:5c:a6:b8:c6:4d:a3:aa:5b:
                    78:48:70:0b:66:40:8d:43:da:30:31:56:9a:26:b7:
                    15:4c:aa:d1:d0:cf:29:d4:f9:be:98:c7:e7:f3:86:
                    1e:23:a4:e6:11:e8:78:09:e5:32:a2:62:ec:41:c3:
                    83:67:9b:6c:1c:7b:78:43:2a:2d:18:26:07:c5:7b:
                    c3:82:a7:51:09:56:6e:f0:c0:1d:cf:a5:93:77:6b:
                    d8:7c:bf:ac:cd:00:23:64:6f:c2:22:90:ae:9c:b9:
                    19:f0:32:6e:d3:2f:fc:ad:b0:d5:14:72:f2:fe:b5:
                    6b:9c:44:2b:55:59:aa:0c:05:8f:64:4b:a7:fd:a1:
                    7f:0e:62:f3:9c:5f:58:72:b9:b7:12:75:1f:50:3c:
                    b5:e1:14:eb:cc:d6:59:3b:4e:fc:16:01:b7:18:c8:
                    3e:be:a4:de:c8:35:c9:76:63:ed:1d:d1:d8:28:d7:
                    6f:e7:66:1f:20:1f:48:7b:45:8c:bd:dd:83:79:f9:
                    10:f1:05:44:eb:b3:45:5c:72:5a:91:12:9a:00:53:
                    92:d2:2d:21:fe:50:04:d5:95:e4:df:62:6a:a4:12:
                    98:ca:e5:cc:ae:85:bf:6c:99:d6:e7:4a:96:8d:27:
                    c8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:41:5A:35:71:C4:2A:FA:A4:B1:C7:17:F6:6E:2A:EF:3B:26:DE:5E
            X509v3 Authority Key Identifier:
                keyid:2E:CA:19:94:4D:A9:B0:BA:87:25:BE:70:BB:EF:54:9E:5D:21:B9:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsoZlE2psLqHJb5wu-9Unl0huTc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:bb:1c:98:cc:2b:e0:6c:47:18:ad:e9:24:23:2d:43:d7:a9:
         f3:6b:cd:1e:e4:7f:2c:10:75:f4:ac:23:9b:62:7d:09:1f:bb:
         10:14:db:43:97:fe:f0:d1:b1:a1:e6:e6:3f:0a:55:19:8d:a2:
         eb:9d:6e:6b:f1:0f:86:c6:0b:67:97:d2:f3:67:63:58:1b:da:
         f7:32:7f:58:2f:93:4b:9e:3c:21:22:19:85:54:7f:2e:77:df:
         49:d9:6c:1c:70:14:e4:e7:84:c0:33:86:20:be:50:ab:98:8e:
         26:19:1d:93:a7:0e:d6:ac:82:1d:7e:25:1a:97:ae:60:0c:d8:
         44:31:5b:3a:9e:9d:93:19:ee:d1:51:2e:4e:bc:68:4e:a2:7d:
         af:40:b6:60:80:13:db:96:55:5b:6d:3b:f1:f7:bd:82:83:21:
         53:9b:29:74:79:d2:36:59:b2:ef:a8:eb:8b:63:9b:aa:2c:f1:
         1f:b5:1f:6c:fa:f7:a6:ef:53:5e:b9:40:18:91:43:f7:56:85:
         22:d1:44:d9:ae:35:16:50:75:9d:10:d0:df:e1:f0:3a:55:88:
         e3:9d:65:f6:ae:1d:3a:5a:0c:5c:00:f6:d2:23:7e:39:16:5f:
         73:47:fc:4b:b9:b1:21:eb:0e:0b:27:b6:69:23:4a:e6:11:0b:
         84:3b:cf:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:50:34 2026 by rpki-client