Manifest

$ rpki-client -vvf rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
File:                     lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft (raw, json)
Hash identifier:          6MNpQ5Ih76VJaEde1e5xC5yUs1FVedR3uCeSl6k7rTk=
Subject key identifier:   E3:2D:67:2D:83:CB:55:70:18:A0:90:57:80:B5:88:BE:42:BA:21:2F
Authority key identifier: 96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
Certificate issuer:       /CN=A90DC5BE/serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Certificate serial:       494F
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
Subject info access:      rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
Manifest number:          4940
Signing time:             Wed 11 Mar 2026 14:50:25 +0000
Manifest this update:     Wed 11 Mar 2026 14:50:25 +0000
Manifest next update:     Wed 18 Mar 2026 14:50:25 +0000
Files and hashes:         1: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl (hash: Y3Sp/6WA5QBWEWvFu+OzrC3nYZMxvGOtlhHJ1V/UlEE=)
                          2: V2i_S72Luw3lwVz_jwqRSKCyLtU.cer (hash: fV23EOKOQ2uckiTmtDtK1711Y2atvjgTwc7thiZrIec=)
                          3: Ak2PFao5dyF1iDou3BZQFOGSiho.cer (hash: NRcDr6REbVzbTiHoNzZyK4YoKwtLqg9UeS+C5SRci4o=)
                          4: m8SNrBAOdU7o4cpqupQk4z013mo.cer (hash: DAx7UlAvMbUwqFlgbX2D8PwGFIpgUqf+UohgpZy64Zs=)
                          5: 4kPzvoJVabsWrLN0vJjavmkLF8E.cer (hash: fxyUaruAjaaco/fzq2Q5nRs7XM9NtVdLWIcLFflk+gY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Mar 2026 14:50:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18767 (0x494f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
        Validity
            Not Before: Mar 11 14:50:25 2026 GMT
            Not After : Mar 18 14:50:25 2026 GMT
        Subject: CN=69b18131-bef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4e:63:24:88:ea:d3:e4:1c:8f:5a:87:1e:6c:
                    b7:6f:41:3b:29:8b:19:18:c2:17:13:87:ef:62:9d:
                    86:65:37:e7:65:84:36:bc:a2:62:3a:20:08:41:d4:
                    ce:65:70:69:ab:e5:69:bf:e1:8c:05:c7:a7:43:58:
                    60:6d:e1:60:be:a3:6a:d1:d0:03:19:38:de:45:6d:
                    de:9b:4d:eb:6f:00:c5:38:a5:61:ff:33:52:f3:56:
                    31:26:42:f4:5e:d8:4e:85:ec:b5:df:74:98:92:17:
                    a5:50:76:c3:2d:03:17:5b:c2:44:b2:9c:7c:db:8a:
                    d0:12:a6:2a:f4:9b:f3:83:e0:06:cc:95:06:d4:2f:
                    9b:22:f9:94:02:f1:d9:ac:c3:b2:e9:0b:4d:c2:46:
                    ce:c6:dd:8e:03:55:12:00:9f:86:9d:f8:b0:67:40:
                    7d:aa:f9:2b:e9:88:d1:5b:fa:44:59:19:84:b4:64:
                    b5:f1:db:c9:07:5d:1a:5c:0a:ec:b3:52:37:30:81:
                    9e:1c:0e:92:fd:5b:dc:f9:35:14:bb:15:a5:88:33:
                    e6:c6:3c:8c:6a:7c:66:44:fb:de:e9:48:49:c5:42:
                    3d:7c:2a:8f:ef:a4:42:74:bf:17:97:5a:88:7e:7e:
                    18:e4:f3:f6:ee:aa:96:b6:6f:16:a6:d6:d6:2b:ae:
                    1e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2D:67:2D:83:CB:55:70:18:A0:90:57:80:B5:88:BE:42:BA:21:2F
            X509v3 Authority Key Identifier:
                keyid:96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:fb:6a:63:1e:fd:29:44:57:a4:da:a9:80:1f:e6:01:e4:35:
         02:49:25:1f:91:9f:59:68:02:f7:1b:00:65:8b:3e:fd:7c:5b:
         2c:9a:a5:3e:5e:61:fb:fd:70:ee:4e:0b:9e:fa:9d:56:8f:82:
         cd:66:67:84:3e:4b:13:3f:3b:fe:c6:21:d2:d2:8e:d7:fc:02:
         a9:56:34:f0:13:75:5d:ec:d8:aa:75:df:5f:29:c3:a5:ab:5a:
         24:15:1b:79:19:e2:77:65:b0:ca:7d:08:6b:71:21:7d:7d:e5:
         65:7a:fa:42:73:ef:fe:4c:43:af:ad:6e:6c:68:87:ea:a6:83:
         00:2b:5b:81:c1:d2:50:73:7f:6d:68:1e:40:ab:72:9d:70:e6:
         44:e3:a8:f9:d3:c0:e4:04:f1:17:7e:99:1f:b9:07:33:c9:20:
         29:c2:aa:ff:d8:67:0f:fb:27:36:04:11:86:7d:df:eb:0d:85:
         a4:f9:2d:6b:ea:f0:d0:20:53:32:53:8a:04:ad:f0:7e:c0:3c:
         27:39:47:cd:f2:2c:3c:98:01:17:f8:ad:82:28:7a:d3:d5:e8:
         29:af:af:dd:42:97:7c:33:68:08:a3:b6:93:2f:8a:9a:0c:23:
         50:40:23:67:64:ff:03:eb:21:a5:4d:4a:95:28:8a:d7:40:a0:
         d0:f9:50:09
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgICSU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDk2QTg1RUY0QjhDQUY1RDRDMzVBMTU3RjRFMTI1RUU0
OTRCQUY5MzkwHhcNMjYwMzExMTQ1MDI1WhcNMjYwMzE4MTQ1MDI1WjAYMRYwFAYD
VQQDEw02OWIxODEzMS1iZWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArU5jJIjq0+Qcj1qHHmy3b0E7KYsZGMIXE4fvYp2GZTfnZYQ2vKJiOiAIQdTO
ZXBpq+Vpv+GMBcenQ1hgbeFgvqNq0dADGTjeRW3em03rbwDFOKVh/zNS81YxJkL0
XthOhey133SYkhelUHbDLQMXW8JEspx824rQEqYq9Jvzg+AGzJUG1C+bIvmUAvHZ
rMOy6QtNwkbOxt2OA1USAJ+GnfiwZ0B9qvkr6YjRW/pEWRmEtGS18dvJB10aXArs
s1I3MIGeHA6S/Vvc+TUUuxWliDPmxjyManxmRPve6UhJxUI9fCqP76RCdL8Xl1qI
fn4Y5PP27qqWtm8WptbWK64e4wIDAQABo4ICTzCCAkswHQYDVR0OBBYEFOMtZy2D
y1VwGKCQV4C1iL5CuiEvMB8GA1UdIwQYMBaAFJaoXvS4yvXUw1oVf04SXuSUuvk5
MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYxRDY2MTFFMkIyQ0Q4QjdDNzJG
RDFGRjIvbHFoZTlMaks5ZFREV2hWX1RoSmU1SlM2LVRrLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9scWhlOUxqSzlk
VERXaFZfVGhKZTVKUzYtVGsuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw
MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk
ZjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5hcG5p
Yy5uZXQvcmVwb3NpdG9yeS9CNEExQkVBNjFENjYxMUUyQjJDRDhCN0M3MkZEMUZG
Mi9scWhlOUxqSzlkVERXaFZfVGhKZTVKUzYtVGsubWZ0MBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkq
hkiG9w0BAQsFAAOCAQEAavtqYx79KURXpNqpgB/mAeQ1AkklH5GfWWgC9xsAZYs+
/XxbLJqlPl5h+/1w7k4LnvqdVo+CzWZnhD5LEz87/sYh0tKO1/wCqVY08BN1XezY
qnXfXynDpataJBUbeRnid2Wwyn0Ia3EhfX3lZXr6QnPv/kxDr61ubGiH6qaDACtb
gcHSUHN/bWgeQKtynXDmROOo+dPA5ATxF36ZH7kHM8kgKcKq/9hnD/snNgQRhn3f
6w2FpPkta+rw0CBTMlOKBK3wfsA8JzlHzfIsPJgBF/itgih609XoKa+v3UKXfDNo
CKO2ky+KmgwjUEAjZ2T/A+shpU1KlSiK10Cg0PlQCQ==
-----END CERTIFICATE-----
Generated at Wed Mar 11 20:08:14 2026 by rpki-client