Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.mft
File:                     llSi8IRZeiuRrAAqdgfhPBXQlJE.mft (raw, json)
Hash identifier:          bR+h2bs8kjT9v3ofLYlGCXoicgKBVnqUCni/qU4KH48=
Subject key identifier:   CF:19:A7:C9:8D:17:1A:68:57:83:D1:2A:E3:CF:AF:17:AF:16:D9:9C
Authority key identifier: 96:54:A2:F0:84:59:7A:2B:91:AC:00:2A:76:07:E1:3C:15:D0:94:91
Certificate issuer:       /CN=A9153303/serialNumber=9654A2F084597A2B91AC002A7607E13C15D09491
Certificate serial:       0154
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/llSi8IRZeiuRrAAqdgfhPBXQlJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.mft
Manifest number:          014C
Signing time:             Fri 17 Apr 2026 04:51:23 +0000
Manifest this update:     Fri 17 Apr 2026 04:51:23 +0000
Manifest next update:     Fri 24 Apr 2026 04:51:23 +0000
Files and hashes:         1: llSi8IRZeiuRrAAqdgfhPBXQlJE.crl (hash: 02V1U4wu5ooL3XkUfP+YNeLpA41NFLm0MYmne17I4m8=)
                          2: 29A436623FE111EFB5A50814C4F9AE02.roa (hash: 21CMC+4jrqt9R3YVeyqV8PFYMlUBz4//FXWyuGoWN2w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.crl
                          rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/llSi8IRZeiuRrAAqdgfhPBXQlJE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:51:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153303, serialNumber=9654A2F084597A2B91AC002A7607E13C15D09491
        Validity
            Not Before: Apr 17 04:51:23 2026 GMT
            Not After : Apr 24 04:51:23 2026 GMT
        Subject: CN=69e1bc4b-36e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b8:e7:83:ed:2a:24:46:86:56:08:1f:3c:8c:
                    31:c8:7b:bc:c8:dd:8f:e2:b5:f2:3e:ec:bc:4d:fa:
                    00:4a:1c:c1:47:f3:a8:83:5e:c1:07:0a:ec:ee:3c:
                    70:48:ad:f5:c2:f8:8d:6f:7b:88:e7:43:8d:9e:27:
                    de:89:2c:bf:f0:8a:99:92:97:94:7f:61:bf:a3:93:
                    79:a6:fd:a0:71:b3:96:df:6d:8f:aa:35:bf:3b:ec:
                    df:1d:c5:b0:40:d1:6c:fc:41:08:d0:1b:45:5f:3e:
                    55:5c:ec:4c:93:c9:da:57:30:c0:51:33:9c:8e:45:
                    16:83:5f:15:fa:48:b0:65:ef:03:26:27:98:1e:38:
                    1b:5c:ce:ec:74:f2:1e:4c:f8:22:45:68:93:37:64:
                    6f:65:7a:b0:76:c7:0b:63:a6:4a:10:d8:44:ef:61:
                    e1:fc:7e:07:9d:98:2a:17:31:20:97:85:a4:b6:49:
                    fd:36:f3:a0:0d:30:60:c4:34:bd:ee:43:23:65:0f:
                    fc:c6:a3:72:98:49:d1:0f:63:ac:43:50:65:4c:46:
                    61:e5:e7:ed:5a:5b:ad:e0:8b:fe:dc:23:08:e5:76:
                    8f:a7:51:d5:8f:57:be:c0:6d:50:8e:c8:be:c4:71:
                    2a:6b:b7:e0:de:69:bf:af:66:9f:43:66:41:87:6a:
                    03:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:19:A7:C9:8D:17:1A:68:57:83:D1:2A:E3:CF:AF:17:AF:16:D9:9C
            X509v3 Authority Key Identifier:
                keyid:96:54:A2:F0:84:59:7A:2B:91:AC:00:2A:76:07:E1:3C:15:D0:94:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/llSi8IRZeiuRrAAqdgfhPBXQlJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:b5:ad:22:1f:9c:59:73:d7:94:b4:d1:c7:ee:58:57:8b:b6:
         91:97:f2:8f:60:8d:4f:d1:ef:b1:84:6a:b2:37:2f:d8:f3:39:
         88:2c:2e:c5:2f:cb:d3:a0:e5:09:e3:16:ff:c2:ae:52:29:80:
         55:ea:96:cf:47:e3:9a:2a:d9:9f:27:dc:5c:86:aa:42:d2:0a:
         dd:91:96:c4:19:7f:1c:e0:74:d4:a4:db:7e:d4:b4:e6:50:a9:
         94:69:c1:3a:71:f0:9c:9b:91:7e:6f:c6:20:d7:2e:28:74:8a:
         9f:41:4c:50:75:a3:e3:b4:3d:ba:cb:28:35:bb:69:76:37:9f:
         34:3d:33:19:f6:8a:e8:77:0f:5b:cd:71:30:11:b0:d5:b4:f7:
         4c:c2:3f:46:76:6f:a0:47:f6:9a:f7:30:8a:6e:68:39:40:56:
         7a:8e:2b:8a:73:97:ab:79:5d:4f:08:dd:4c:79:6f:db:b3:02:
         51:bb:c0:58:16:aa:9a:96:5b:aa:95:24:99:42:c7:c9:b7:b6:
         6c:75:37:9d:54:80:62:fc:e9:d6:18:3d:37:a4:17:5d:9a:08:
         37:f9:90:88:b6:15:b4:4d:c9:d8:18:5d:a4:e5:80:d5:e0:5b:
         91:59:4a:ab:67:d9:9a:23:67:a3:a1:9b:fa:2c:9b:95:ed:74:
         aa:d8:a7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:17:35 2026 by rpki-client