Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft
File:                     lqY1AntkplTYCJRduDWp4ox5SwE.mft (raw, json)
Hash identifier:          H6pWofGb6j3vu78H4K78kf8PfPQHWsFdLrOdalHecFQ=
Subject key identifier:   AF:2B:C1:60:4B:B0:00:DC:98:B6:73:A3:F6:A0:A6:15:03:F3:86:01
Authority key identifier: 96:A6:35:02:7B:64:A6:54:D8:08:94:5D:B8:35:A9:E2:8C:79:4B:01
Certificate issuer:       /CN=A9144391/serialNumber=96A635027B64A654D808945DB835A9E28C794B01
Certificate serial:       011C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lqY1AntkplTYCJRduDWp4ox5SwE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft
Manifest number:          0117
Signing time:             Sun 01 Mar 2026 06:56:28 +0000
Manifest this update:     Sun 01 Mar 2026 06:56:28 +0000
Manifest next update:     Sun 08 Mar 2026 06:56:28 +0000
Files and hashes:         1: lqY1AntkplTYCJRduDWp4ox5SwE.crl (hash: IoK5tuAf8jv7deQkmvuZWmQ4+mb/FA/abl+NFehyS7A=)
                          2: BBA8F97C70AF11EF9C9B2C0EC4F9AE02.roa (hash: +8jBRpghwFfo1F3h7+S0bDrvFBVOSwK0s/1hp0fqnzI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.crl
                          rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lqY1AntkplTYCJRduDWp4ox5SwE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:56:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144391, serialNumber=96A635027B64A654D808945DB835A9E28C794B01
        Validity
            Not Before: Mar  1 06:56:28 2026 GMT
            Not After : Mar  8 06:56:28 2026 GMT
        Subject: CN=69a3e31c-5214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:44:70:6e:20:2d:25:8e:1a:e5:4b:63:86:99:
                    2c:af:b3:20:fd:d2:8c:b3:58:9c:c6:39:92:a3:8b:
                    d8:48:60:0b:d6:a3:fc:6b:06:68:25:1a:06:bd:dd:
                    e6:12:2d:e5:92:00:7a:d8:4d:65:84:ab:55:b2:08:
                    45:f3:87:44:f1:cc:4a:3e:57:d6:9d:d0:78:a2:c2:
                    fc:9e:95:f6:73:58:3a:90:9e:1e:a2:86:bb:c5:d4:
                    63:7d:89:ae:d6:4c:7c:17:df:f3:b8:6f:57:d0:88:
                    33:92:be:40:1c:c6:c8:3f:42:27:55:d8:20:34:c0:
                    ff:1e:68:b7:f7:68:88:24:be:ed:7a:f8:14:02:63:
                    62:ad:84:f2:57:10:5d:78:85:58:8d:a4:24:4f:a8:
                    20:aa:7f:6b:28:14:e1:e6:c5:7b:1f:89:a0:1c:ab:
                    cd:a7:92:f5:b0:72:96:f2:0e:b9:dd:d5:83:b2:6f:
                    84:ed:a0:0c:7a:e9:cf:00:50:6c:2e:97:7d:fa:59:
                    72:a7:00:67:e6:8f:63:bd:f5:ef:9a:0c:12:53:ec:
                    67:7c:5b:38:72:73:46:59:47:78:ac:6b:dc:0e:43:
                    e5:b1:84:2c:e4:3c:26:f7:68:02:2c:41:21:8b:f6:
                    0e:69:83:2d:3e:71:bf:a9:35:7d:ca:1d:0b:3a:e9:
                    17:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:2B:C1:60:4B:B0:00:DC:98:B6:73:A3:F6:A0:A6:15:03:F3:86:01
            X509v3 Authority Key Identifier:
                keyid:96:A6:35:02:7B:64:A6:54:D8:08:94:5D:B8:35:A9:E2:8C:79:4B:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lqY1AntkplTYCJRduDWp4ox5SwE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:db:4c:66:17:0b:9d:50:47:cc:9a:e2:30:52:73:aa:1a:76:
         c0:e4:81:1a:d9:3c:e1:f5:ef:e9:04:3b:ff:f9:14:ea:90:69:
         57:16:97:94:c6:75:8c:23:92:35:0b:04:cb:07:7e:93:65:1a:
         ad:86:45:54:75:84:8d:af:18:dc:61:03:51:67:82:0c:0f:08:
         ed:ad:7d:a2:09:2c:73:9f:f3:f4:61:1c:cf:56:6b:7a:09:2c:
         a9:2e:f8:7d:27:98:51:8e:75:f4:6c:bb:b4:37:38:b6:79:86:
         2c:1f:ec:e2:b4:28:6f:82:e8:e7:11:f1:3c:6a:9c:e7:6d:c2:
         78:c8:7d:ce:a3:97:57:be:2e:6f:76:18:66:42:6a:5e:a5:9c:
         45:69:f2:a6:02:76:40:7c:6b:12:ed:3c:31:8b:f1:4f:13:4e:
         d4:40:64:d2:e5:02:ca:73:d4:65:1b:fc:10:db:16:8a:c1:3f:
         97:f7:8b:e6:cd:d0:14:4e:ca:0b:bc:33:5a:27:8f:72:98:da:
         49:1b:f8:c3:9b:09:9d:01:b9:a6:5f:f1:12:d1:4f:c4:24:64:
         04:44:3e:f5:71:55:83:8f:da:e6:e1:8a:89:4a:87:26:e5:b3:
         f7:c1:9a:9a:83:c5:0f:18:5f:f0:c9:69:f2:11:2d:51:2d:c9:
         c5:e2:40:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:52:09 2026 by rpki-client