Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft
File:                     lqY1AntkplTYCJRduDWp4ox5SwE.mft (raw, json)
Hash identifier:          /RcWEVMROSCemzy9EiGYl0FPMt1hnfHPx/NK4aL2ii0=
Subject key identifier:   E3:1A:C9:F0:8C:C9:24:BD:37:F2:A6:8C:F8:F9:97:97:BC:1A:40:73
Authority key identifier: 96:A6:35:02:7B:64:A6:54:D8:08:94:5D:B8:35:A9:E2:8C:79:4B:01
Certificate issuer:       /CN=A9144391/serialNumber=96A635027B64A654D808945DB835A9E28C794B01
Certificate serial:       0153
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lqY1AntkplTYCJRduDWp4ox5SwE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft
Manifest number:          0132
Signing time:             Fri 17 Apr 2026 05:16:38 +0000
Manifest this update:     Fri 17 Apr 2026 05:16:37 +0000
Manifest next update:     Fri 24 Apr 2026 05:16:37 +0000
Files and hashes:         1: lqY1AntkplTYCJRduDWp4ox5SwE.crl (hash: EgQprB0ctc5bB/RDdar8dqk3+mODPH7l8ZDP2FgahZY=)
                          2: BBA8F97C70AF11EF9C9B2C0EC4F9AE02.roa (hash: saMe9HqgEFlkQr1sv6V0sUsEY0lWYPJ0Mi2x6rYexCc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.crl
                          rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lqY1AntkplTYCJRduDWp4ox5SwE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:16:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 339 (0x153)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144391, serialNumber=96A635027B64A654D808945DB835A9E28C794B01
        Validity
            Not Before: Apr 17 05:16:37 2026 GMT
            Not After : Apr 24 05:16:37 2026 GMT
        Subject: CN=69e1c236-b473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d0:4d:06:bc:f3:02:33:59:7b:2a:ad:40:45:
                    c3:06:c4:b4:c3:96:a0:0a:e9:aa:e6:0d:50:40:6c:
                    e3:bb:b8:04:3d:3a:05:7e:fe:f3:a0:c6:42:ae:78:
                    38:a4:a3:ab:7c:01:7d:bb:6e:a0:f8:69:81:83:b5:
                    ff:f6:92:e5:29:59:7e:84:2c:68:79:fb:08:40:84:
                    1f:d0:ed:ac:c1:2e:4f:56:ab:d5:7e:88:3a:74:c4:
                    17:63:80:04:5b:c8:02:59:43:25:e1:23:de:c1:db:
                    e6:34:90:c9:8f:c8:f1:96:2e:cd:a6:69:37:87:61:
                    de:5e:bc:30:56:35:6e:85:fc:08:09:52:81:c5:75:
                    6e:69:ec:a9:70:5f:79:fc:ac:76:64:98:d5:2c:17:
                    55:4e:c1:2c:8d:f9:93:34:3f:a3:05:aa:cd:d5:b1:
                    00:a7:bf:ed:af:8f:7a:3d:5b:80:af:6b:80:9b:ed:
                    ef:25:cf:21:da:29:48:2e:ee:af:7f:be:3e:a1:9b:
                    00:42:5d:f7:52:16:fa:29:19:59:0c:5b:8f:e9:1b:
                    d8:bb:c0:cd:5c:9d:f7:88:8e:9d:38:06:6c:bf:59:
                    26:3f:e7:c0:b8:98:cd:ee:8e:71:2e:f3:70:b9:68:
                    fc:cf:28:04:6e:7b:c5:7f:19:34:48:56:69:68:d9:
                    f1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:1A:C9:F0:8C:C9:24:BD:37:F2:A6:8C:F8:F9:97:97:BC:1A:40:73
            X509v3 Authority Key Identifier:
                keyid:96:A6:35:02:7B:64:A6:54:D8:08:94:5D:B8:35:A9:E2:8C:79:4B:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lqY1AntkplTYCJRduDWp4ox5SwE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:c7:d3:5d:0f:e8:7d:d2:20:e1:f9:f1:29:ce:6b:a4:61:a8:
         b6:20:cd:e3:cd:af:d0:9b:5c:e1:99:a9:44:c5:d3:21:48:44:
         b0:c9:4b:bc:1f:d2:a9:b3:2d:a9:e2:db:d5:8d:69:f7:06:03:
         fe:69:ac:56:94:22:23:cf:43:3d:77:30:ed:15:b5:a0:86:bf:
         35:da:30:78:22:81:3f:ff:2f:77:26:d4:ab:14:77:18:3c:91:
         00:1f:ac:fb:c0:a1:12:2b:5e:c2:5b:44:96:b6:ab:c6:66:ca:
         d3:e3:72:16:0b:41:9c:a3:71:ee:53:65:66:d8:0d:af:f5:34:
         6e:a3:6d:1d:47:a2:d9:1b:2e:b5:aa:4f:b0:de:49:b0:4d:b7:
         1d:a5:1e:6d:3b:c8:fc:2a:e3:8f:79:d9:fb:ec:8e:33:43:af:
         fb:33:57:ab:74:ad:c4:c3:86:b2:d8:b1:e2:57:51:83:58:5c:
         a6:9f:50:72:66:c8:c4:4b:99:73:3a:80:b0:ad:3f:32:82:c1:
         c8:94:10:32:47:0a:52:f1:e3:d2:93:1e:55:4a:53:7b:5b:82:
         87:16:18:8a:a1:5b:77:7f:95:e0:44:94:f6:62:09:36:66:6a:
         55:d4:84:73:5a:2d:dc:5d:dc:b5:60:cd:24:50:60:01:df:19:
         a9:84:8b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:36:06 2026 by rpki-client