Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft
File:                     l5f3hScG7hxCxopeRQtXL47lCBg.mft (raw, json)
Hash identifier:          Yolp2bdxjFnABSv7ps5RFR9SJ8VhgGpa6vCjUfJrarQ=
Subject key identifier:   F1:F1:38:F9:6B:31:7C:D5:07:B5:B9:48:F8:9B:B9:AB:DE:C1:5F:A1
Authority key identifier: 97:97:F7:85:27:06:EE:1C:42:C6:8A:5E:45:0B:57:2F:8E:E5:08:18
Certificate issuer:       /CN=A9149063/serialNumber=9797F7852706EE1C42C68A5E450B572F8EE50818
Certificate serial:       0AB6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft
Manifest number:          0AAE
Signing time:             Thu 16 Apr 2026 19:24:38 +0000
Manifest this update:     Thu 16 Apr 2026 19:24:37 +0000
Manifest next update:     Thu 23 Apr 2026 19:24:37 +0000
Files and hashes:         1: l5f3hScG7hxCxopeRQtXL47lCBg.crl (hash: it7SxjR6qx+r9ieQMCijD8vhcnPM0tS0a4r9JjBWpHw=)
                          2: 1EDD32B274BE11EA97202132C4F9AE02.roa (hash: 5OPogG3ZOrkKX2Cbkuzk/+A/+LB9+L5qaFthCEEqGN0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.crl
                          rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:24:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2742 (0xab6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149063, serialNumber=9797F7852706EE1C42C68A5E450B572F8EE50818
        Validity
            Not Before: Apr 16 19:24:37 2026 GMT
            Not After : Apr 23 19:24:37 2026 GMT
        Subject: CN=69e13776-ca56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:94:64:e9:d9:0e:90:d4:e1:1b:0d:9d:02:8a:
                    6f:c6:94:5e:ff:aa:62:9a:3a:9b:33:b7:7f:ef:ea:
                    5b:dd:10:bd:b2:98:03:36:5a:13:60:d5:49:de:48:
                    44:60:da:7e:f8:d9:fc:48:de:28:fe:3e:0d:0b:3e:
                    ae:26:c0:9a:94:94:3b:77:3a:9e:b8:6b:54:a8:5c:
                    e4:3c:ed:01:ed:89:0c:29:24:7d:67:8d:5d:9b:ac:
                    24:8f:4f:00:c9:db:57:f6:e2:d1:0b:75:2d:70:05:
                    7a:13:9b:cb:c0:d6:52:b5:7e:23:f8:93:08:f1:e5:
                    77:f7:25:6b:c2:b0:54:56:26:c2:d7:ea:ff:26:8a:
                    23:e4:8e:79:4b:3c:33:85:ec:b2:bc:1f:8c:02:5c:
                    92:24:9b:01:fc:04:6c:c5:cc:45:8c:1b:3b:b2:3f:
                    c4:0a:c3:2c:e9:6c:37:2c:fe:88:17:e4:c3:16:4c:
                    be:4e:65:61:e6:a2:ed:f6:ce:f2:20:d3:07:77:fd:
                    fc:17:c8:1a:f4:94:d2:51:98:68:62:ac:68:8f:63:
                    3c:1b:b5:58:41:c2:af:73:67:5c:6b:d8:ac:03:d3:
                    ab:03:b1:6e:10:66:a6:26:e1:af:26:40:cc:ea:61:
                    1a:54:8b:85:2b:55:4c:90:63:a7:62:70:48:a8:f2:
                    76:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F1:38:F9:6B:31:7C:D5:07:B5:B9:48:F8:9B:B9:AB:DE:C1:5F:A1
            X509v3 Authority Key Identifier:
                keyid:97:97:F7:85:27:06:EE:1C:42:C6:8A:5E:45:0B:57:2F:8E:E5:08:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:39:88:76:3c:24:a6:d1:4e:8d:7e:7c:79:7b:7d:99:67:0c:
         f3:79:db:8a:a5:74:9b:c0:b9:d0:ad:da:7f:b9:9b:f1:56:0a:
         47:cf:eb:1e:66:1f:39:21:f4:13:30:13:89:25:f8:5b:04:03:
         7d:82:26:8e:7d:ca:3a:e6:69:7d:1e:e4:1d:c1:a4:0c:ad:ca:
         04:18:63:a0:8b:a6:a7:64:17:41:70:98:09:6e:e3:2d:39:af:
         d5:80:06:a6:3e:86:66:b8:bf:00:ad:48:6c:08:be:79:b2:8c:
         d3:00:6e:05:76:d4:05:55:95:73:a3:3c:b7:ab:25:7c:ad:08:
         7b:af:b8:8e:d2:7e:de:02:d0:18:f0:8a:2e:58:6e:45:93:61:
         96:94:b4:bb:ea:1c:00:11:2d:1e:3d:ac:a6:58:1f:86:b8:e4:
         f2:b4:88:89:33:dc:3b:4d:88:d1:ee:8f:eb:17:8a:99:13:c1:
         2b:a8:d3:dc:f8:af:e2:4a:93:aa:bb:fd:e3:a1:45:86:4c:7e:
         c0:08:e8:b8:0c:06:2a:68:14:36:05:27:82:4b:88:8c:31:4f:
         b2:a7:f2:d1:bd:25:cb:94:48:01:17:4f:a0:23:8c:a2:09:db:
         fc:13:7f:3d:d3:d3:69:1b:ad:8b:31:29:43:f8:73:13:79:0b:
         50:5b:d7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:29:47 2026 by rpki-client