Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.mft
File:                     lFCLKqsDKqM_mgAoJYI_mrhccBI.mft (raw, json)
Hash identifier:          gE37YRKdiAbgvzEgV9n/Xjm5C6CpT4vWrBavv+Waxys=
Subject key identifier:   EB:D8:C0:1F:1B:50:58:58:2F:D0:B0:64:B9:72:3E:5C:85:48:A1:A5
Authority key identifier: 94:50:8B:2A:AB:03:2A:A3:3F:9A:00:28:25:82:3F:9A:B8:5C:70:12
Certificate issuer:       /CN=A9125532/serialNumber=94508B2AAB032AA33F9A002825823F9AB85C7012
Certificate serial:       C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFCLKqsDKqM_mgAoJYI_mrhccBI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.mft
Manifest number:          C0
Signing time:             Fri 17 Apr 2026 06:41:05 +0000
Manifest this update:     Fri 17 Apr 2026 06:41:04 +0000
Manifest next update:     Fri 24 Apr 2026 06:41:04 +0000
Files and hashes:         1: lFCLKqsDKqM_mgAoJYI_mrhccBI.crl (hash: xE5C1pt8Cxx2PSq861rTW1mpZRDTSKOXM7pv7gLfzh4=)
                          2: CB08B0C019C811F0958CB24EC4F9AE02.roa (hash: oU1YzucoXB7KyIdRvg/07TuDKK4MCzNm2V2SoNLMLi0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.crl
                          rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFCLKqsDKqM_mgAoJYI_mrhccBI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:41:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125532, serialNumber=94508B2AAB032AA33F9A002825823F9AB85C7012
        Validity
            Not Before: Apr 17 06:41:04 2026 GMT
            Not After : Apr 24 06:41:04 2026 GMT
        Subject: CN=69e1d600-357d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9d:21:1d:ea:48:6f:40:34:d9:f6:f7:c6:e5:
                    ca:88:6e:18:6a:de:4b:ba:84:39:4e:e8:39:e7:c4:
                    70:21:fc:1c:02:15:d9:1d:63:54:93:74:49:63:65:
                    36:c0:57:d1:94:6d:0a:10:d1:42:97:1d:c5:a1:55:
                    55:57:b8:59:13:8d:6f:8b:4a:55:50:4b:8f:c5:b3:
                    ad:a6:21:e0:be:27:b2:f0:e1:79:5b:4b:c4:f7:81:
                    b8:d5:94:9f:dc:8f:a8:d9:f7:87:89:e4:e4:4a:07:
                    55:22:d5:96:d1:3b:1f:46:b7:db:a8:3d:a8:9e:5b:
                    7a:33:99:78:c9:f7:b7:e3:f7:36:a7:65:e9:57:89:
                    d9:50:2d:d6:24:5b:58:ae:c6:d7:cd:38:27:30:e6:
                    b8:ca:03:b2:62:6a:c0:f5:80:9b:5f:42:c7:e8:d2:
                    9c:5f:a0:a3:2b:72:fd:b7:f0:91:30:67:01:d8:6f:
                    30:93:36:f5:e7:d6:4f:5f:c6:05:69:6c:6a:bc:d0:
                    9d:54:a3:bb:40:bd:89:f9:f6:b7:4c:a1:28:29:ad:
                    0a:c2:b9:24:61:b3:a7:59:d3:07:02:6f:2a:1b:bf:
                    29:2a:1d:7d:24:e6:e4:97:c2:c6:35:c9:66:14:91:
                    19:7b:34:32:e3:10:cf:08:ff:09:16:d0:93:f1:2c:
                    08:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D8:C0:1F:1B:50:58:58:2F:D0:B0:64:B9:72:3E:5C:85:48:A1:A5
            X509v3 Authority Key Identifier:
                keyid:94:50:8B:2A:AB:03:2A:A3:3F:9A:00:28:25:82:3F:9A:B8:5C:70:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFCLKqsDKqM_mgAoJYI_mrhccBI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:6d:86:31:a5:5c:d6:f5:61:96:ac:14:30:eb:43:7b:92:c8:
         e1:64:22:ad:6f:f4:8a:6b:d2:d8:15:33:2f:85:65:e7:18:f6:
         36:61:17:b8:c4:c2:70:d4:9d:81:9a:65:20:a6:83:08:d1:e3:
         c3:48:c5:ed:7c:7c:cf:2a:36:5f:82:b0:cc:16:ea:f1:76:c9:
         3b:be:e2:61:68:3c:da:70:df:44:5f:e3:bf:3f:18:55:a4:ce:
         db:79:06:06:45:bf:aa:1c:92:16:72:cf:fa:42:bd:5b:fc:90:
         64:93:6c:26:bb:e0:de:8c:3c:ea:5e:52:3e:e4:80:49:aa:f5:
         70:84:af:2f:04:67:ce:4f:20:91:61:90:59:7a:ae:d8:0d:35:
         93:76:6b:39:bd:2c:c3:e6:71:66:07:ee:5f:ab:5a:2f:49:cc:
         c1:a8:1a:54:71:e6:8d:05:45:a3:33:3c:fd:a6:7b:7d:5d:44:
         13:09:51:5c:cb:b5:ab:4a:f6:e7:d1:26:b6:51:61:1c:9c:a5:
         69:91:75:cd:cb:07:94:2a:b5:38:cf:95:78:ac:8f:be:95:d5:
         19:26:72:e4:d5:74:a3:c1:74:88:2a:b3:88:bf:9b:0c:4a:53:
         d3:96:24:13:47:6f:4b:af:a5:1b:4a:42:3f:8c:51:36:09:76:
         c1:e9:65:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:49:10 2026 by rpki-client