Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.mft
File:                     lyuQ2cUZIlatlkdbOSurGnp5zC0.mft (raw, json)
Hash identifier:          aFUEIlg6J311VM0Q2vIoAZkdJX4/f4E+nyAFR/IJAts=
Subject key identifier:   1E:49:90:2A:FA:67:62:36:06:BD:7C:D3:9F:B4:F9:27:2A:7A:83:48
Authority key identifier: 97:2B:90:D9:C5:19:22:56:AD:96:47:5B:39:2B:AB:1A:7A:79:CC:2D
Certificate issuer:       /CN=A9132FD9/serialNumber=972B90D9C5192256AD96475B392BAB1A7A79CC2D
Certificate serial:       B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lyuQ2cUZIlatlkdbOSurGnp5zC0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.mft
Manifest number:          B4
Signing time:             Wed 15 Apr 2026 06:41:13 +0000
Manifest this update:     Wed 15 Apr 2026 06:41:13 +0000
Manifest next update:     Wed 22 Apr 2026 06:41:13 +0000
Files and hashes:         1: lyuQ2cUZIlatlkdbOSurGnp5zC0.crl (hash: AMtHKH1QxCM9V5YvQ1Mu1N1j+t7BQW5ZXXDboEeDH6Y=)
                          2: DCC2224A313011F0BE214A64C4F9AE02.roa (hash: QFbRVf66lkbe54l2PG3KMXf9eXUVn8c/LsTJGZHTzRc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.crl
                          rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lyuQ2cUZIlatlkdbOSurGnp5zC0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 06:41:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185 (0xb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132FD9, serialNumber=972B90D9C5192256AD96475B392BAB1A7A79CC2D
        Validity
            Not Before: Apr 15 06:41:13 2026 GMT
            Not After : Apr 22 06:41:13 2026 GMT
        Subject: CN=69df3309-3a14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e8:26:3e:cc:68:05:dc:32:9c:b2:b2:2c:cc:
                    ad:63:14:c9:64:0e:d0:37:07:2e:51:08:78:b8:2c:
                    8c:ba:28:26:2f:d2:c9:b6:d1:e1:6a:bc:da:e6:72:
                    33:db:62:ac:28:7f:c9:cb:b5:bc:d8:60:40:c8:5f:
                    f0:c8:70:31:d6:70:fc:5e:be:09:29:15:f9:f6:03:
                    e7:e3:a0:c9:d7:b9:04:45:40:33:47:86:60:d2:79:
                    fb:05:0d:80:b7:bc:52:e3:3e:14:c2:da:7c:bd:ca:
                    da:66:c1:1f:54:c8:27:b9:fa:7f:4a:05:a9:3c:e2:
                    05:6b:76:71:47:98:2a:fa:27:00:3e:5a:58:e2:80:
                    4d:d9:22:4b:36:3d:4d:6d:cc:35:2c:31:f8:c9:12:
                    38:fb:ff:31:80:fa:0a:73:5c:b8:18:6f:02:cb:19:
                    3a:22:62:25:d0:c7:ae:c4:09:59:9b:ad:bb:c6:19:
                    f6:0c:dc:36:f3:e5:16:32:1b:54:7c:72:43:d7:4c:
                    28:03:a3:9f:50:ff:40:cd:70:07:91:32:b0:44:9e:
                    b5:44:41:e8:76:a4:63:79:48:7a:0a:53:1d:f7:84:
                    ba:b9:3f:73:aa:a3:c0:b6:15:b5:d9:47:08:0c:2c:
                    68:2b:28:e1:71:8a:dc:f7:6e:68:bc:86:d5:c7:22:
                    af:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:49:90:2A:FA:67:62:36:06:BD:7C:D3:9F:B4:F9:27:2A:7A:83:48
            X509v3 Authority Key Identifier:
                keyid:97:2B:90:D9:C5:19:22:56:AD:96:47:5B:39:2B:AB:1A:7A:79:CC:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lyuQ2cUZIlatlkdbOSurGnp5zC0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:93:b9:1f:64:bf:5f:3d:48:5b:41:af:06:d5:de:be:a2:a9:
         c6:06:cc:de:b6:02:2f:10:ca:b0:59:63:78:74:65:26:b8:7d:
         17:3a:8c:9e:93:65:09:e0:66:c5:a1:80:df:ca:f4:85:23:af:
         d2:7c:1c:f5:29:0b:6c:c9:69:5d:68:96:8b:46:90:8c:b1:f6:
         a9:d2:d7:55:19:77:26:03:4e:59:19:68:45:96:14:28:43:c6:
         0d:a1:93:60:a3:03:cc:29:2e:7d:fa:af:79:6e:24:fe:23:4b:
         cc:ce:1b:83:06:61:aa:4b:4a:7c:09:ce:d0:51:41:70:b7:ca:
         b9:63:e6:0e:f5:c5:36:bf:a6:7a:0b:03:fd:d0:6a:92:a5:22:
         77:92:7c:34:35:a8:f0:e8:e0:89:48:97:f5:73:46:c8:f8:d6:
         41:35:f8:d7:b0:97:03:4f:94:16:9d:d0:0a:aa:9a:91:be:e5:
         d2:d1:2d:37:2e:09:f0:b2:61:a1:4b:54:91:6f:b1:5e:ef:2b:
         a5:31:e7:93:10:d2:96:e2:18:45:9b:81:df:87:99:b0:b1:78:
         6c:eb:43:82:f6:c4:55:89:1e:f9:0a:7d:a9:20:69:ac:95:b6:
         73:61:08:46:d9:d8:18:8b:8a:4f:89:d8:85:35:60:a7:a3:56:
         76:a6:39:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:55:54 2026 by rpki-client