Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.mft
File:                     LToKI8WbTfbb4BpMXzt8i___cA0.mft (raw, json)
Hash identifier:          CtspFWk8/MjOAkHMPtkLu6QzpjPrkAp4cxtCl6vERrQ=
Subject key identifier:   1D:E4:26:EB:29:01:6F:BE:5D:FD:52:52:59:C6:5F:07:F0:FC:26:4F
Authority key identifier: 2D:3A:0A:23:C5:9B:4D:F6:DB:E0:1A:4C:5F:3B:7C:8B:FF:FF:70:0D
Certificate issuer:       /CN=A912D0BC/serialNumber=2D3A0A23C59B4DF6DBE01A4C5F3B7C8BFFFF700D
Certificate serial:       02C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LToKI8WbTfbb4BpMXzt8i___cA0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.mft
Manifest number:          02BD
Signing time:             Fri 17 Apr 2026 01:20:26 +0000
Manifest this update:     Fri 17 Apr 2026 01:20:25 +0000
Manifest next update:     Fri 24 Apr 2026 01:20:25 +0000
Files and hashes:         1: LToKI8WbTfbb4BpMXzt8i___cA0.crl (hash: lpiDjFeLx30Sinz7uSMS/BdVTyaQWwvTIR7pR5gbSU0=)
                          2: C202E82834B611ED815AAB32C4F9AE02.roa (hash: FkAIc4PkSrjwjHI3WuneOyjO69joINPbfIEPkCYw/A0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.crl
                          rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LToKI8WbTfbb4BpMXzt8i___cA0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:20:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 708 (0x2c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D0BC, serialNumber=2D3A0A23C59B4DF6DBE01A4C5F3B7C8BFFFF700D
        Validity
            Not Before: Apr 17 01:20:25 2026 GMT
            Not After : Apr 24 01:20:25 2026 GMT
        Subject: CN=69e18ad9-ccc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3c:f8:61:7c:5f:eb:58:50:f0:88:9e:67:86:
                    69:df:9e:33:9e:a8:01:92:67:a6:81:77:ef:ff:af:
                    62:19:2e:06:a9:7e:7c:f2:98:3e:a1:57:17:ae:f9:
                    40:7e:68:d0:0e:7f:c9:ba:7f:8e:56:28:0e:23:47:
                    0c:4e:55:b1:41:da:84:c9:d1:9a:8a:24:32:8e:ed:
                    1f:9c:97:f2:a5:1d:92:9b:01:d0:8d:50:95:17:ed:
                    b5:6d:38:46:0c:db:0d:aa:18:a3:af:32:0d:3c:50:
                    68:5d:2c:74:fb:db:19:6d:20:6e:ee:ef:44:f7:82:
                    02:7b:c4:f3:0b:78:01:0f:ed:41:a0:33:1c:3a:2e:
                    04:c1:82:d0:7c:a8:8e:d7:b7:3e:4c:1c:75:45:9b:
                    07:2a:29:c7:88:a6:85:b8:1a:c2:fd:41:04:d6:1a:
                    ef:e3:ac:94:b0:ce:54:9a:5d:bc:20:e0:34:24:30:
                    03:7e:27:37:19:10:66:b8:94:a1:d2:7a:4b:8c:af:
                    34:db:8e:02:96:2b:4a:ae:ff:ed:de:80:b0:5f:0b:
                    ce:98:c5:96:b0:7c:79:1a:db:fe:db:c2:e5:88:5b:
                    be:64:05:91:d2:6e:28:c3:86:62:3a:18:15:55:b0:
                    bd:bd:7b:e5:b4:ae:0b:2c:19:db:ba:63:8f:17:c3:
                    cb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E4:26:EB:29:01:6F:BE:5D:FD:52:52:59:C6:5F:07:F0:FC:26:4F
            X509v3 Authority Key Identifier:
                keyid:2D:3A:0A:23:C5:9B:4D:F6:DB:E0:1A:4C:5F:3B:7C:8B:FF:FF:70:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LToKI8WbTfbb4BpMXzt8i___cA0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:40:ed:3b:38:bb:d0:e1:37:0d:57:ae:f6:1e:01:0f:ec:7e:
         44:3f:1a:c1:02:b9:01:bf:eb:62:72:ad:a0:86:71:b1:83:e3:
         bc:78:7f:a8:1e:09:61:67:50:0b:3b:ff:d7:92:2b:0b:5b:56:
         47:ee:52:b5:dd:5b:5c:a5:51:f7:55:f5:83:f7:83:3e:29:8c:
         10:4a:d6:02:85:0c:13:a4:24:59:a3:82:06:c3:3d:0f:a9:72:
         6c:a5:7b:0b:ef:14:ea:85:9e:7f:4f:f4:5f:48:d8:74:50:92:
         61:06:26:51:89:63:7b:49:69:3e:f6:bc:5b:53:eb:ca:b9:25:
         29:00:58:a3:12:2a:8b:c9:37:00:46:e7:05:18:28:3c:93:ad:
         54:02:19:17:bf:79:d1:4f:06:76:05:39:c9:ad:b3:ff:36:e3:
         92:25:4f:88:e5:d4:d8:88:d2:e9:9c:30:04:41:ba:e9:5f:eb:
         e1:73:9f:46:d5:b5:2d:6e:9e:f7:2b:df:ec:49:b6:cc:66:b1:
         52:49:ff:ac:34:ef:05:ed:ae:a6:45:9e:68:2f:4d:5a:7a:63:
         2c:9c:90:09:5c:b4:53:8c:77:54:59:9d:c1:dd:46:2d:ca:ee:
         44:57:52:37:e3:08:82:1b:75:5c:7d:86:d8:1a:0c:68:0a:b5:
         e8:c2:36:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:56:02 2026 by rpki-client