Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
File:                     LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft (raw, json)
Hash identifier:          qKVGdkC2e9dAvZBY8wetWVYad26gaSxcH+irVnQa7tI=
Subject key identifier:   42:29:F4:8C:BD:1F:99:EA:08:09:1D:10:D1:94:05:C0:C5:34:A8:F5
Authority key identifier: 2D:7D:5C:5F:76:CA:3A:68:F6:49:80:2C:9D:8B:66:A7:F2:6F:65:25
Certificate issuer:       /CN=A914B462/serialNumber=2D7D5C5F76CA3A68F649802C9D8B66A7F26F6525
Certificate serial:       B0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
Manifest number:          AD
Signing time:             Wed 15 Apr 2026 06:44:57 +0000
Manifest this update:     Wed 15 Apr 2026 06:44:56 +0000
Manifest next update:     Wed 22 Apr 2026 06:44:56 +0000
Files and hashes:         1: LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl (hash: +PQLpkbeKUpx1hRFHR39MOZbxrn/mF1XP5qfbU1zX40=)
                          2: 5176F30C330911F0B6109345C4F9AE02.roa (hash: u3inMiIK4DpIEunyB1TcEeJ9La/HJuiKvKXJQu7jAtw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl
                          rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 06:44:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176 (0xb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B462, serialNumber=2D7D5C5F76CA3A68F649802C9D8B66A7F26F6525
        Validity
            Not Before: Apr 15 06:44:56 2026 GMT
            Not After : Apr 22 06:44:56 2026 GMT
        Subject: CN=69df33e9-604d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9e:3d:5d:18:30:e4:53:c2:e4:fc:44:1f:48:
                    68:b1:39:2b:99:30:98:cb:de:e0:96:ac:b4:56:a7:
                    20:0f:fd:ec:9c:60:1b:75:af:60:30:eb:9f:d5:89:
                    6f:6d:ce:ff:62:94:35:88:d3:3a:cb:b9:bf:71:a0:
                    cc:d1:1a:c4:d2:5a:4e:cb:35:3a:98:d5:05:46:94:
                    f3:65:79:66:8a:e4:1a:c1:d5:10:77:87:a3:93:fb:
                    af:c9:ce:a1:45:b8:6f:11:d0:ff:bc:51:b8:9f:94:
                    10:85:43:98:1e:68:c7:10:77:4d:55:c5:be:80:93:
                    36:0c:14:eb:43:40:75:ad:da:f1:62:70:16:b8:76:
                    38:c6:4c:8e:86:72:eb:77:b4:6c:a2:9c:d9:73:d6:
                    34:72:b3:04:ea:dd:f9:fe:00:1d:9c:cd:30:5b:e7:
                    17:e6:3e:a2:5e:a3:b7:8f:8b:07:9b:94:d6:a2:bc:
                    47:ce:c2:8c:53:70:84:0f:82:d0:cd:33:da:27:9a:
                    79:a4:d4:c1:17:58:9a:6d:85:72:cd:e9:2a:9d:06:
                    5c:3e:b3:6e:60:00:8a:8a:b4:b9:b3:c3:f3:10:87:
                    b1:01:d8:55:ed:36:9d:48:40:70:20:4f:59:31:3e:
                    e9:53:c3:fa:b0:c6:ae:0e:a5:1b:15:3a:a5:f1:dd:
                    0e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:29:F4:8C:BD:1F:99:EA:08:09:1D:10:D1:94:05:C0:C5:34:A8:F5
            X509v3 Authority Key Identifier:
                keyid:2D:7D:5C:5F:76:CA:3A:68:F6:49:80:2C:9D:8B:66:A7:F2:6F:65:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:d3:7a:04:06:7b:6d:f0:ee:92:24:de:49:fa:02:1d:d8:19:
         41:6f:77:d3:8c:c2:5d:16:05:62:20:19:f0:94:d6:6d:31:90:
         f5:e0:97:df:32:6d:34:c2:e5:fc:70:49:42:3f:82:1f:fd:e0:
         f2:86:f5:3a:0a:d8:2f:f0:70:9d:a6:7f:e0:8c:ba:c4:a9:49:
         32:7c:09:01:68:9f:0e:cd:6c:77:2b:94:ca:13:14:a5:8f:fd:
         4d:22:83:f7:c2:55:2e:ba:10:a0:0e:1f:08:cd:0e:68:f1:19:
         4c:46:d1:84:fb:19:08:ff:06:54:9e:2c:a1:d5:b6:1e:c1:01:
         c8:69:16:14:25:50:d3:0c:48:64:52:a0:ec:b7:77:a8:e2:25:
         b7:c2:14:47:95:58:9e:70:0f:d0:75:ad:a2:aa:ea:5c:1a:ce:
         b0:50:48:df:c0:23:56:ab:22:12:55:22:13:94:c9:4e:90:1c:
         16:3f:20:55:ef:dd:b0:75:97:2f:c1:e0:cb:84:46:4b:8c:df:
         e9:cd:73:ce:42:cd:e3:2d:10:05:f0:82:83:2a:bc:00:7b:c5:
         be:fa:1b:09:43:45:3d:f6:13:ba:3f:e4:9e:9e:b0:86:1b:99:
         06:7a:da:80:82:ff:8b:43:1e:aa:f7:5c:cc:cc:ed:57:20:28:
         85:5c:86:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:35 2026 by rpki-client