Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft
File:                     l3a_sejqihq8j4z9b2Yic23YyjQ.mft (raw, json)
Hash identifier:          8CCHMYvNC0U2gvAZ0qZ/h8YUcsp0dzXrI2njEUFrsiQ=
Subject key identifier:   C0:D1:D0:18:6B:60:BD:BA:25:6E:BC:AE:2E:4C:26:24:FB:36:F6:E4
Authority key identifier: 97:76:BF:B1:E8:EA:8A:1A:BC:8F:8C:FD:6F:66:22:73:6D:D8:CA:34
Certificate issuer:       /CN=A91616DC/serialNumber=9776BFB1E8EA8A1ABC8F8CFD6F6622736DD8CA34
Certificate serial:       0D35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft
Manifest number:          0D04
Signing time:             Thu 16 Apr 2026 18:16:47 +0000
Manifest this update:     Thu 16 Apr 2026 18:16:46 +0000
Manifest next update:     Thu 23 Apr 2026 18:16:46 +0000
Files and hashes:         1: l3a_sejqihq8j4z9b2Yic23YyjQ.crl (hash: aGckb7UoveAAbGK9Ki6yBF11Ivih8SFHQf7IIHXRseU=)
                          2: 64A2C96E919E11EEA5241125C4F9AE02.roa (hash: 8PpRKr88j1UQz0on0wf3wxEYqhe8qTzmSyhtAroOiwc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.crl
                          rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:16:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3381 (0xd35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91616DC, serialNumber=9776BFB1E8EA8A1ABC8F8CFD6F6622736DD8CA34
        Validity
            Not Before: Apr 16 18:16:46 2026 GMT
            Not After : Apr 23 18:16:46 2026 GMT
        Subject: CN=69e1278f-1aa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:35:97:84:c1:98:71:74:8f:96:d6:73:87:ff:
                    85:3f:89:e5:a3:f5:17:ef:ac:c6:82:c3:7e:f6:cc:
                    f9:f9:c8:c4:4b:f3:ea:67:3c:c6:3a:0f:b2:94:40:
                    80:76:08:0a:61:1b:47:eb:90:7f:3d:a0:ee:d2:4a:
                    30:03:06:fa:e5:a9:7d:27:61:bf:71:9e:02:13:f6:
                    47:3f:71:1f:fc:f9:0b:3d:ca:13:92:d1:46:53:5e:
                    e1:d2:df:d2:f7:7c:fe:5b:e5:92:ba:e8:cf:7c:f3:
                    d5:dc:af:a4:a8:99:2b:66:21:4a:9e:54:d8:f6:c3:
                    88:d7:d1:c3:43:32:6d:f4:f1:f1:0b:99:c4:28:a8:
                    24:95:d4:d1:26:73:12:01:dd:99:ee:9b:d4:b1:0d:
                    aa:76:47:14:a9:81:d4:25:fd:75:a6:9f:74:3f:db:
                    6a:4f:df:c5:b6:35:4c:1c:63:0d:3e:d1:d1:f8:e1:
                    89:05:11:9c:12:65:a8:ea:8c:33:85:10:41:b2:c7:
                    1c:4e:cd:12:3e:ae:6f:86:dd:86:80:9f:9c:e7:c3:
                    b6:88:ed:67:5f:eb:f6:1e:60:a6:f2:7a:28:1e:17:
                    d5:a2:16:72:88:95:5b:3c:8d:f9:b9:bf:66:45:45:
                    d8:22:fc:35:de:41:8d:02:69:d4:4d:f1:14:46:0e:
                    1e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D1:D0:18:6B:60:BD:BA:25:6E:BC:AE:2E:4C:26:24:FB:36:F6:E4
            X509v3 Authority Key Identifier:
                keyid:97:76:BF:B1:E8:EA:8A:1A:BC:8F:8C:FD:6F:66:22:73:6D:D8:CA:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:0a:80:f4:d1:65:70:2b:d4:e1:3d:b1:bd:3c:4e:f4:4e:7c:
         ed:1f:34:fe:fd:ae:e9:62:9d:3d:c5:d6:77:b7:55:88:f4:bc:
         69:54:4a:34:57:a5:68:9e:aa:80:9c:1f:a9:b3:48:f0:98:16:
         15:fa:47:5d:dd:64:39:b6:ee:f5:de:80:4b:b0:c3:8f:19:5e:
         18:f6:4e:60:91:3b:39:ea:bd:66:80:03:5f:6e:32:d0:42:ae:
         1b:a4:03:0b:84:fc:19:83:9e:50:55:b5:73:16:c8:3a:10:d2:
         07:a2:82:a2:61:86:cb:d4:0e:8e:04:c5:b4:cb:a9:49:fe:58:
         7e:6f:ed:1a:d1:ac:b3:c9:1b:c7:a3:e8:7e:33:db:03:9e:93:
         81:8c:4a:49:9e:50:69:ac:b9:81:5f:69:b9:bc:4b:7c:3a:1b:
         f5:8f:df:52:92:56:ed:f0:21:40:f2:10:85:f3:1a:ed:b9:d0:
         ec:2c:3e:8c:e1:9b:7a:c2:06:9c:00:e8:07:6f:ac:8c:3f:de:
         ee:06:92:3f:be:eb:f9:70:ce:9e:32:14:aa:63:93:03:bf:77:
         4a:6e:4e:a9:1c:9d:0a:87:aa:6f:b0:34:37:71:8f:c6:bb:4a:
         3d:a6:c0:1c:10:0a:cf:6b:3d:71:c0:12:a2:23:e8:e4:03:8a:
         ed:63:9d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:15:28 2026 by rpki-client