Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft
File:                     l9pBnzurP2V6paXATgV8StlhvFs.mft (raw, json)
Hash identifier:          +uKi0LYPnrMJ5XebkSV/N5/Sypr7NRu4qiLpLX8HJo8=
Subject key identifier:   B8:0C:76:52:E5:73:18:49:54:2B:74:64:47:CD:A3:FE:80:C9:8A:DE
Authority key identifier: 97:DA:41:9F:3B:AB:3F:65:7A:A5:A5:C0:4E:05:7C:4A:D9:61:BC:5B
Certificate issuer:       /CN=A911251C/serialNumber=97DA419F3BAB3F657AA5A5C04E057C4AD961BC5B
Certificate serial:       0288
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9pBnzurP2V6paXATgV8StlhvFs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft
Manifest number:          0281
Signing time:             Sun 19 Apr 2026 01:38:23 +0000
Manifest this update:     Sun 19 Apr 2026 01:38:22 +0000
Manifest next update:     Sun 26 Apr 2026 01:38:22 +0000
Files and hashes:         1: l9pBnzurP2V6paXATgV8StlhvFs.crl (hash: F6Qv2GN4YWUKt87bk3XCCu2d7oxxvWmtucMX9+D2DeQ=)
                          2: B2F017A26BE311ED8B83B484C4F9AE02.roa (hash: rpUyfZdW5IUbk6NgGsW43Rz/PEOzmhBfAVdBu5w6gaY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.crl
                          rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9pBnzurP2V6paXATgV8StlhvFs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 01:38:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 648 (0x288)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911251C, serialNumber=97DA419F3BAB3F657AA5A5C04E057C4AD961BC5B
        Validity
            Not Before: Apr 19 01:38:22 2026 GMT
            Not After : Apr 26 01:38:22 2026 GMT
        Subject: CN=69e4320f-54b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ab:73:dd:ce:5d:6f:e3:03:1a:83:55:65:67:
                    64:4e:29:f8:e1:ce:9a:64:a0:1b:ac:48:58:c8:97:
                    aa:71:f0:f6:a7:64:ed:00:b1:79:12:9e:94:71:c8:
                    79:8b:68:f9:ff:09:d0:5b:58:93:4c:a8:57:dd:bb:
                    9a:6e:f9:85:2d:5a:6b:17:b4:b3:bb:56:02:2f:2a:
                    d5:f3:de:8b:35:63:70:99:c6:54:74:43:49:5d:c1:
                    c0:e3:be:cf:0c:67:12:b8:7d:bc:67:e5:2d:ea:cb:
                    15:95:7b:af:bd:5b:a2:0f:0e:e4:c9:28:54:e2:54:
                    f1:b1:dd:9f:0a:2b:3f:7b:2a:9d:19:1d:3c:ac:ff:
                    8e:0c:bd:42:62:22:d3:e9:69:3f:eb:be:ee:9b:cf:
                    a2:0a:b5:a1:b2:b3:1f:eb:ea:67:eb:21:7b:e8:c8:
                    bd:f6:0d:9f:e5:9f:01:8c:f3:44:0e:10:5d:8d:fb:
                    36:19:24:e5:06:41:e4:25:f7:2f:28:81:1b:e3:d7:
                    7d:d9:e1:ca:ee:eb:4f:23:e7:c3:73:81:77:01:cb:
                    a4:c2:c2:1c:13:48:32:e3:f2:5c:d5:db:02:d9:ff:
                    fb:c0:41:2a:2c:e9:94:ca:82:76:91:0f:aa:9d:c9:
                    df:e3:73:ba:6c:24:75:ec:ef:aa:82:98:07:aa:ac:
                    99:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:0C:76:52:E5:73:18:49:54:2B:74:64:47:CD:A3:FE:80:C9:8A:DE
            X509v3 Authority Key Identifier:
                keyid:97:DA:41:9F:3B:AB:3F:65:7A:A5:A5:C0:4E:05:7C:4A:D9:61:BC:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9pBnzurP2V6paXATgV8StlhvFs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:1e:1e:9f:21:c1:62:c5:c1:d7:28:8b:44:e1:32:a5:3e:be:
         30:b3:6c:4a:16:64:32:79:fb:ef:1f:6b:fd:97:16:bd:85:56:
         79:22:3a:0a:9b:81:0a:9d:ab:21:40:29:e2:f3:84:7f:d1:2d:
         2d:f0:fc:6c:bc:65:1e:6b:ab:ab:4a:3d:36:73:86:cf:84:6b:
         4c:73:92:c9:01:95:98:1f:54:3f:00:51:0f:95:13:ae:7a:ed:
         9d:f8:6a:96:85:72:f8:5a:25:ef:40:27:21:8d:2a:1d:3a:13:
         21:ab:f3:e5:1e:93:9d:5a:d9:bd:0c:23:af:76:65:35:4d:d8:
         91:fd:68:f0:04:8c:13:e5:38:cc:ff:14:0d:8f:64:af:ed:ff:
         a5:88:99:65:f3:4f:5e:b9:cb:38:eb:6c:42:23:57:1f:54:c8:
         64:bd:17:35:8a:91:3a:48:12:bf:01:6e:80:42:90:b0:e6:a5:
         0e:31:c3:6a:65:3c:5c:95:17:f6:9a:a6:ad:42:8c:e8:70:f5:
         ab:a7:9b:4f:da:5d:ee:fa:ff:29:05:4d:43:01:c3:fd:f6:3f:
         f0:27:95:5d:fc:a8:32:cc:33:b8:f4:90:f7:91:52:ef:67:23:
         de:f2:05:fa:12:b7:ca:d7:e5:23:18:7a:63:eb:cf:e6:ef:59:
         23:e4:91:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:39:47 2026 by rpki-client