Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.mft
File:                     lSgWDkwwThMH2_ZvGQFjKt-fGmQ.mft (raw, json)
Hash identifier:          /2Ab51u7bUx5N3yesMCUBaYyUce9GoZ6cApwoebPi+c=
Subject key identifier:   BD:00:0E:47:47:DD:4C:1F:7D:1A:FA:1C:DC:A4:42:C5:8D:53:73:6C
Authority key identifier: 95:28:16:0E:4C:30:4E:13:07:DB:F6:6F:19:01:63:2A:DF:9F:1A:64
Certificate issuer:       /CN=A9132457/serialNumber=9528160E4C304E1307DBF66F1901632ADF9F1A64
Certificate serial:       0240
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.mft
Manifest number:          023A
Signing time:             Fri 17 Apr 2026 02:19:42 +0000
Manifest this update:     Fri 17 Apr 2026 02:19:42 +0000
Manifest next update:     Fri 24 Apr 2026 02:19:42 +0000
Files and hashes:         1: lSgWDkwwThMH2_ZvGQFjKt-fGmQ.crl (hash: JdFNMXB/g4BA1PZHwi4f5BJCkxXhwjKeDmoF7HwvHyc=)
                          2: 8E10E282D81B11EDAB75C13EC4F9AE02.roa (hash: GKFjPcvO4ucG2wu+o52C6baSSl36UQN43VyTX2VF8tY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.crl
                          rsync://rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:19:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 576 (0x240)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132457, serialNumber=9528160E4C304E1307DBF66F1901632ADF9F1A64
        Validity
            Not Before: Apr 17 02:19:42 2026 GMT
            Not After : Apr 24 02:19:42 2026 GMT
        Subject: CN=69e198be-1113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:50:6f:72:a0:f6:38:1e:c4:7c:d5:10:6e:ad:
                    8d:2d:16:e1:ef:29:5c:e6:fd:bd:79:48:1a:55:49:
                    0a:34:ab:63:fb:fc:a4:18:a3:e2:7e:53:f2:a1:0c:
                    9c:f3:68:ff:af:e7:b7:fe:b7:01:99:0d:93:7d:d2:
                    9d:7a:93:a0:7c:c0:a9:aa:c4:84:28:81:74:2d:0f:
                    a4:c4:e3:8b:06:06:53:8d:0b:27:30:6d:d0:88:39:
                    d0:81:34:da:27:85:1b:ba:96:a1:23:66:a5:56:7d:
                    fe:4c:bf:0e:8c:02:2f:e5:7e:89:fb:18:35:8b:8a:
                    e7:ae:a2:75:17:f6:de:a5:27:45:38:c4:05:9e:78:
                    3a:77:79:6c:24:2c:30:8b:02:13:e2:c0:9b:8b:6e:
                    92:8c:3d:f7:b9:a9:59:d8:3f:fa:d5:82:81:2e:9f:
                    9e:4e:b3:41:be:65:05:fc:f2:17:31:ec:a0:d2:fd:
                    f8:c0:59:dd:81:f2:59:e7:9c:9a:3a:e3:41:d4:51:
                    51:e7:9d:e1:34:55:61:46:3a:31:d9:87:c1:25:08:
                    3b:e9:3e:f6:64:9c:38:c5:6d:9d:a3:40:2e:37:41:
                    16:b5:88:d8:9e:64:c4:18:f5:41:11:3d:af:e2:7d:
                    5f:58:2c:36:df:d9:1f:e4:fd:8f:49:0c:f4:e1:d6:
                    f5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:00:0E:47:47:DD:4C:1F:7D:1A:FA:1C:DC:A4:42:C5:8D:53:73:6C
            X509v3 Authority Key Identifier:
                keyid:95:28:16:0E:4C:30:4E:13:07:DB:F6:6F:19:01:63:2A:DF:9F:1A:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:c5:c9:43:8d:7e:85:99:6d:c8:dd:2d:be:a0:2e:8f:42:a7:
         8a:3f:f7:2a:9d:d2:89:4a:5f:4e:66:6d:18:c4:ee:c8:84:1e:
         90:f2:1a:e5:c0:37:fa:4a:5b:ea:3e:16:74:ea:ef:09:d8:af:
         20:31:69:e3:2d:65:46:da:91:14:7b:41:20:85:62:87:d2:6d:
         d3:ab:8c:af:9e:6b:31:1e:9e:51:7b:b7:26:62:45:a7:89:f4:
         62:75:3e:b6:36:81:30:8b:74:f5:d9:f2:d1:9c:d8:92:9e:a2:
         6e:6e:1d:a3:8a:bc:ce:fd:89:66:43:c7:b1:af:e8:ee:69:31:
         14:4e:8e:61:97:4a:5c:27:e0:a7:fe:c4:de:7b:1c:4c:4e:fc:
         c2:4e:6c:05:2d:48:2a:e1:ee:bc:be:61:07:58:11:c3:0e:c1:
         ca:c9:00:5a:ac:4c:c3:99:df:60:c6:ff:75:72:05:45:91:f6:
         7a:d2:cc:78:73:85:30:48:09:9b:29:ce:1b:08:ec:b5:81:3a:
         0c:27:46:5b:21:15:b6:8e:54:dd:fa:94:bd:55:44:07:75:10:
         0e:87:98:7b:73:bd:62:c1:a6:6f:23:8e:0e:7c:ce:7f:35:e1:
         bd:93:33:7d:eb:dc:49:63:42:0d:fc:43:5f:18:74:00:be:57:
         13:ae:29:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:13:46 2026 by rpki-client