Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
File:                     4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft (raw, json)
Hash identifier:          EG7NzlCp7O/7BzjkPSCIjorF/wD0A4aGyRT05sJg524=
Subject key identifier:   98:92:B8:6C:33:2C:AF:F6:0D:4A:5D:45:10:5D:FF:C8:B7:7E:07:7D
Authority key identifier: E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87
Certificate issuer:       /CN=A914E600/serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087
Certificate serial:       0132
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
Manifest number:          012A
Signing time:             Fri 17 Apr 2026 05:19:31 +0000
Manifest this update:     Fri 17 Apr 2026 05:19:31 +0000
Manifest next update:     Fri 24 Apr 2026 05:19:31 +0000
Files and hashes:         1: 4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl (hash: JXXo89kuhvJU0DdbpPlMypJio2Yo1WB4vfQhR+l0xBc=)
                          2: D86268E877F111EFADAB6362C4F9AE02.roa (hash: y1LKkgDaRj1ISWViw1cpYZqZzU1kENkFG+OyOnuW6h8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl
                          rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 306 (0x132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E600, serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087
        Validity
            Not Before: Apr 17 05:19:31 2026 GMT
            Not After : Apr 24 05:19:31 2026 GMT
        Subject: CN=69e1c2e3-c93b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:34:f6:45:b9:8b:c3:e7:e7:35:e5:02:b2:69:
                    25:a0:fb:6d:ea:bc:46:eb:54:7e:b1:ac:09:ba:67:
                    c9:c5:52:77:ee:b2:c3:36:12:29:0d:ba:e3:47:88:
                    14:c3:9c:20:c7:0e:32:02:12:d5:f4:63:d5:bf:ba:
                    87:bc:b3:d0:0e:f7:d9:84:ac:a2:aa:74:c8:2f:42:
                    0c:5f:f0:20:ac:27:bb:78:50:7a:33:a7:7c:51:6a:
                    2a:90:64:a7:dc:82:71:03:84:32:33:1a:49:78:16:
                    e2:44:10:03:e6:a6:2d:7c:8f:ad:fb:47:00:2f:76:
                    e1:7f:73:fd:55:e4:6b:43:d2:bb:3b:17:c0:70:53:
                    3f:f4:13:24:0c:a0:33:1d:9a:77:37:cb:6d:0c:d3:
                    0d:69:a4:89:d1:86:29:38:76:b7:9e:5c:dc:c4:58:
                    33:27:31:c0:ed:e2:82:a3:5b:cf:8f:92:c5:33:86:
                    cc:5c:6f:cb:38:40:a7:03:ad:f6:41:db:55:8e:12:
                    04:ce:f3:9d:57:7e:19:a3:3f:5a:e0:33:b8:4b:08:
                    ec:a5:48:47:39:90:9f:01:77:d5:a8:fe:d5:17:6d:
                    d8:b7:55:5f:18:e3:60:a1:50:c6:88:94:a0:c8:b9:
                    57:ec:5b:02:e9:f6:20:9a:2a:4f:18:b0:e2:ea:84:
                    85:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:92:B8:6C:33:2C:AF:F6:0D:4A:5D:45:10:5D:FF:C8:B7:7E:07:7D
            X509v3 Authority Key Identifier:
                keyid:E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:92:dc:09:8d:88:3f:b1:af:98:02:6d:34:ea:b3:7f:56:f9:
         1e:4c:ce:98:4e:6f:4f:2f:c6:c1:16:c9:8e:0d:c6:bf:4f:09:
         f8:27:56:fc:7d:65:47:03:87:6c:18:ac:60:ee:69:22:64:58:
         55:65:1b:3b:fa:e5:3e:62:83:e6:ab:99:65:e2:26:39:63:36:
         36:d3:33:57:3b:c8:13:32:f3:e8:23:da:d8:e8:44:88:84:c5:
         ce:9c:cb:3d:df:be:93:1d:34:28:8d:e1:05:88:d4:cd:d0:9b:
         e6:51:6e:8e:11:9c:e1:60:6d:d6:bb:34:6a:4e:9b:d1:5f:a7:
         68:d3:11:77:06:f0:1b:fb:9a:55:b3:9c:4c:90:f0:04:3b:f8:
         a2:11:3d:82:9c:7b:36:36:ea:86:96:d2:09:79:3c:5b:b3:9c:
         77:65:63:12:56:80:a4:0a:4b:80:86:17:f9:60:f2:b3:b4:76:
         2e:8b:54:7e:04:fa:50:98:6b:43:7a:b0:10:53:62:57:ef:88:
         ff:41:16:c5:71:65:ce:c3:45:47:7e:02:a7:d3:2d:a8:d7:44:
         92:a6:7a:48:19:1d:39:4d:90:2d:f6:e9:08:f4:64:8b:e0:90:
         1c:80:ce:51:4b:9b:c9:fe:70:a3:d3:3e:5e:95:fc:ec:7c:86:
         ab:7a:0b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:08:48 2026 by rpki-client