Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft
File:                     lBEWOnNX79ihLWm2yUdlT0Xebio.mft (raw, json)
Hash identifier:          51FDV5Yr6mUCt3ymiBUTNzrUWego6uinauR3oKlSKsc=
Subject key identifier:   39:DD:92:77:FB:15:BD:D9:71:CD:D4:CA:30:0F:3E:1D:8A:3A:80:AB
Authority key identifier: 94:11:16:3A:73:57:EF:D8:A1:2D:69:B6:C9:47:65:4F:45:DE:6E:2A
Certificate issuer:       /CN=A911695A/serialNumber=9411163A7357EFD8A12D69B6C947654F45DE6E2A
Certificate serial:       56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft
Manifest number:          50
Signing time:             Fri 17 Apr 2026 07:58:49 +0000
Manifest this update:     Fri 17 Apr 2026 07:58:49 +0000
Manifest next update:     Fri 24 Apr 2026 07:58:49 +0000
Files and hashes:         1: lBEWOnNX79ihLWm2yUdlT0Xebio.crl (hash: KrQ3Zm8qSRkz3wTKyYaRZ4VIn2wa5qiCFCe+ceFrQ9Q=)
                          2: 1E74642AEEC611F0B6553517716F56BC.roa (hash: hIhATxrqSrR5A4qFNRmOtul5smZBw7ayiN7X2oLfAaI=)
                          3: 1F740B32EEC611F0B6553517716F56BC.roa (hash: gopwfSKGN1mCCHSx58qmeTC4uj/Dhy9G5y6duhNO4mg=)
                          4: 1EF20696EEC611F0B6553517716F56BC.roa (hash: C2HYiXqh9FrGOeUUq4VM0nBBKKmKPJMXcJIwTDA1cJw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.crl
                          rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911695A, serialNumber=9411163A7357EFD8A12D69B6C947654F45DE6E2A
        Validity
            Not Before: Apr 17 07:58:49 2026 GMT
            Not After : Apr 24 07:58:49 2026 GMT
        Subject: CN=69e1e839-3de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4c:b2:ea:4e:48:15:c0:2f:73:80:d5:86:6f:
                    81:b6:72:79:12:cb:52:e7:b2:d1:d4:ab:4e:eb:2a:
                    59:af:ab:89:4e:8d:7d:62:9a:82:8d:4e:a3:ed:28:
                    dd:36:4f:e1:72:6f:2b:0c:18:af:f4:db:47:96:16:
                    1a:51:85:75:47:b1:ea:dd:db:bf:95:18:20:ad:d6:
                    f5:84:ec:1e:1d:1a:6c:01:59:48:b2:25:7f:bb:da:
                    11:91:1d:67:a2:fc:cd:14:72:49:9c:a3:d6:3f:90:
                    93:55:f5:77:9c:9a:a9:b7:67:78:c4:79:4e:ad:b0:
                    20:2b:0e:cb:64:ee:da:32:51:f6:97:19:05:77:20:
                    54:fc:f0:07:26:e9:8f:e5:a7:26:66:01:8a:f5:49:
                    cd:eb:9b:4b:83:93:78:fc:f5:ae:0f:f6:70:91:ed:
                    71:90:e0:d9:cd:26:66:ca:7b:de:e2:6a:e5:05:54:
                    ae:75:c5:d9:d7:cf:ff:4f:d3:4a:bd:d2:29:0a:11:
                    37:fe:6b:a2:a3:df:bc:06:ee:08:69:3f:e0:8d:0a:
                    91:bd:38:29:2b:6c:56:da:93:3b:63:82:c8:6f:7a:
                    77:46:7a:af:f0:7d:3e:61:b8:4a:31:d5:5f:a4:51:
                    33:f8:13:e4:bd:18:2a:55:80:e1:b9:06:63:e9:c5:
                    23:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:DD:92:77:FB:15:BD:D9:71:CD:D4:CA:30:0F:3E:1D:8A:3A:80:AB
            X509v3 Authority Key Identifier:
                keyid:94:11:16:3A:73:57:EF:D8:A1:2D:69:B6:C9:47:65:4F:45:DE:6E:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:59:8f:87:4a:e1:78:ae:09:9f:5a:ae:33:9d:47:2c:c3:90:
         ab:6a:2f:d8:34:d7:95:6e:bf:ba:49:53:30:88:83:19:c2:26:
         3e:7c:4e:73:c1:d3:bc:20:56:6c:d2:0d:51:ac:5f:21:90:37:
         24:bb:d7:92:20:ad:3b:b3:60:a4:ea:49:eb:ed:f6:d8:57:43:
         95:ad:b2:4e:60:7a:a8:16:0d:ca:8c:67:49:9d:c8:c7:0f:f3:
         4c:2a:d9:93:da:1e:b2:04:3b:13:57:ad:a0:55:f0:26:14:35:
         95:4d:05:d9:a8:73:48:4d:7e:32:be:18:27:2c:98:4f:71:bc:
         e8:a9:f5:2c:03:df:5c:70:28:05:9d:d1:84:b7:fe:d1:f7:1a:
         35:65:32:7c:e8:29:3c:b1:e6:c3:14:9f:c4:00:03:f3:d0:a2:
         8f:af:88:1a:da:43:2d:10:cb:03:b8:1d:97:91:d7:95:cb:9a:
         95:53:7b:35:26:7d:84:88:7d:43:3c:5f:c7:c2:18:b1:9d:3e:
         7f:dc:51:fd:c1:24:98:a9:a9:85:2c:19:b3:5d:bd:14:3d:1b:
         8c:6a:5c:8b:75:79:a8:cf:54:a9:da:7f:c1:91:94:bc:be:c8:
         17:c8:a0:33:29:f6:79:70:ee:36:a3:0d:7a:cd:e6:18:36:09:
         c1:56:81:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:03:49 2026 by rpki-client