Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft
File:                     l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft (raw, json)
Hash identifier:          SP+O4VG8VSCwWVBrns6rY7VanvUP+1+ZaywaC1jgtAs=
Subject key identifier:   E2:91:A6:6A:B0:EB:17:6F:06:6B:ED:2B:48:75:8F:FA:EB:D5:84:84
Authority key identifier: 97:D0:41:59:FB:B3:7E:A6:74:62:B8:96:97:6C:11:40:C9:59:E6:91
Certificate issuer:       /CN=A913F2BD/serialNumber=97D04159FBB37EA67462B896976C1140C959E691
Certificate serial:       0159
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft
Manifest number:          0151
Signing time:             Fri 17 Apr 2026 04:47:13 +0000
Manifest this update:     Fri 17 Apr 2026 04:47:12 +0000
Manifest next update:     Fri 24 Apr 2026 04:47:12 +0000
Files and hashes:         1: l9BBWfuzfqZ0YriWl2wRQMlZ5pE.crl (hash: jhpzmU6klv1H3ZMTapsaQVnwAyGhBSSlsXTL/lGLDnA=)
                          2: 470E849A389E11EF83D66176C4F9AE02.roa (hash: MkXldkwwGPBMNO0p6m3CW8J6w5UO09g/B7IP6QByn5c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.crl
                          rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:47:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 345 (0x159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F2BD, serialNumber=97D04159FBB37EA67462B896976C1140C959E691
        Validity
            Not Before: Apr 17 04:47:12 2026 GMT
            Not After : Apr 24 04:47:12 2026 GMT
        Subject: CN=69e1bb51-60fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3f:2d:51:39:d4:bd:ce:11:d0:98:51:d8:cb:
                    67:2d:b1:1d:df:ea:9a:ee:63:fa:64:07:b7:96:bf:
                    6d:73:ef:9b:f8:9c:fc:ae:a2:66:f5:cf:7f:24:41:
                    9b:f5:be:60:a7:bf:33:23:14:a7:8a:9e:a7:07:28:
                    45:c5:87:e0:15:56:76:d3:77:e5:0e:d1:a2:fe:41:
                    33:ac:c2:ee:ee:33:79:2f:a3:8b:33:41:8e:b1:1a:
                    38:4d:ab:0f:32:24:ca:fd:11:b1:32:09:45:bf:91:
                    10:db:e8:dd:7c:5e:f5:c8:cb:ef:db:5f:a0:47:93:
                    d8:8b:a6:91:fc:0a:7b:5d:c7:f7:1e:1e:e6:16:ac:
                    e8:0a:40:ac:eb:b9:53:cc:24:71:c5:c7:88:6c:ad:
                    2f:ef:d5:d1:44:69:7d:03:7d:99:c0:5c:80:83:de:
                    3c:37:14:5e:92:bd:85:d2:16:52:87:33:4d:38:9b:
                    bc:c1:5a:59:a3:07:31:d4:01:f3:9e:8d:5d:aa:d7:
                    71:f1:b8:bf:ee:61:21:e6:57:3f:e0:44:af:6e:3b:
                    44:db:53:e6:67:05:be:06:88:4d:aa:1b:80:9b:53:
                    14:a7:df:8e:37:4a:84:28:77:64:07:4d:c7:08:48:
                    50:9c:b0:3c:58:66:ac:7a:d9:28:64:3c:b5:2c:ce:
                    fb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:91:A6:6A:B0:EB:17:6F:06:6B:ED:2B:48:75:8F:FA:EB:D5:84:84
            X509v3 Authority Key Identifier:
                keyid:97:D0:41:59:FB:B3:7E:A6:74:62:B8:96:97:6C:11:40:C9:59:E6:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:47:f6:6b:ee:30:3e:bb:e4:fb:c3:11:b5:d5:90:8a:c9:6d:
         45:45:dd:13:ea:89:9c:f3:61:18:b1:ae:51:f3:c2:55:84:15:
         f5:a9:ae:b5:1f:64:2a:1b:67:9b:88:f0:98:e2:20:e9:bd:fe:
         d1:6f:d0:2c:77:6b:a3:ea:7c:9a:4b:e1:96:7a:8c:e3:78:f6:
         3b:41:5c:ed:fa:bc:e7:e1:de:19:53:44:97:56:5a:5d:09:43:
         41:7a:62:b3:3e:35:9a:2f:33:b6:12:fd:9e:1e:0e:f9:e7:29:
         ef:24:10:27:dd:a1:b1:32:95:d2:5c:29:8e:03:3c:57:cf:61:
         e6:12:cf:90:94:f5:ed:7f:3d:8e:a0:cc:9a:70:01:43:5b:2c:
         65:99:bc:2e:89:c4:8d:02:bb:3c:e1:79:9a:70:7a:32:22:c6:
         cf:62:95:85:ee:89:f0:3a:57:35:a4:2f:5e:78:82:c6:59:40:
         8c:26:20:1a:ab:e4:81:57:fd:88:a8:03:5b:36:c3:7e:66:d7:
         fb:cd:58:82:82:73:99:73:08:4a:ab:c0:9f:93:46:06:6d:15:
         58:5d:94:36:83:9b:92:80:07:37:7d:62:71:15:f5:ea:14:25:
         a2:d1:a4:af:c9:af:ef:f3:3d:a3:68:1f:cc:a1:36:c0:34:ce:
         ec:54:96:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:32:25 2026 by rpki-client