Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
File:                     0LR5KL_bnbNR4dQlatArZyj5XPU.mft (raw, json)
Hash identifier:          lk7Ea8S/8ghZE0KsYn/tT6moJMpX2VBpBI5p+T3crhY=
Subject key identifier:   7D:4E:BD:0F:A8:8F:5D:BA:77:DE:18:39:11:A7:04:3C:01:9E:2A:A4
Authority key identifier: D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5
Certificate issuer:       /CN=A9174306/serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5
Certificate serial:       01C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
Manifest number:          01B8
Signing time:             Fri 17 Apr 2026 03:42:40 +0000
Manifest this update:     Fri 17 Apr 2026 03:42:40 +0000
Manifest next update:     Fri 24 Apr 2026 03:42:40 +0000
Files and hashes:         1: 0LR5KL_bnbNR4dQlatArZyj5XPU.crl (hash: jxGiWJH1FWr7uIlPVNlsRgZlny5Elyn56aP+SEE7Eu8=)
                          2: BF9A82FE1C3D11F188759CE93A3D8C67.roa (hash: ZuwsvyCFnlRH97lSSpze4by6vXPNWBp8bBdjxC9A6Vs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl
                          rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:42:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 450 (0x1c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174306, serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5
        Validity
            Not Before: Apr 17 03:42:40 2026 GMT
            Not After : Apr 24 03:42:40 2026 GMT
        Subject: CN=69e1ac30-7413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:30:a4:d9:32:e4:28:5d:75:50:c4:04:58:61:
                    79:b0:3b:36:27:16:0c:26:55:29:b4:67:bc:ac:34:
                    33:b4:2f:2d:b5:e7:23:99:2f:c8:2f:5a:01:6c:a6:
                    31:b7:0d:5f:08:65:34:a2:8d:2f:28:27:d7:2c:ba:
                    1a:0e:10:3b:d5:a3:fb:69:ec:1c:fa:e4:43:60:d7:
                    42:08:2c:ab:30:48:dd:33:c0:05:f9:5d:78:ea:39:
                    76:84:30:34:a7:ba:00:36:cc:53:fa:6a:be:06:f7:
                    46:8f:ef:e1:51:3f:a4:9c:43:cb:e5:57:03:fc:84:
                    cb:00:f5:55:a1:30:06:90:b7:29:88:0f:d2:80:1c:
                    64:44:1b:73:4d:0b:42:12:cc:bc:a4:fa:a0:73:d5:
                    5b:78:89:fa:44:bc:58:54:a8:28:0c:68:bd:e5:c1:
                    fe:8b:c4:4c:90:a4:37:2c:7a:a0:a3:8b:55:d4:c6:
                    6f:02:2e:b1:a4:14:78:82:39:53:f0:b0:48:fa:24:
                    fb:c5:b2:a8:df:ff:d0:5e:79:ca:6a:c5:ff:be:cb:
                    b3:ef:4d:8a:74:31:ef:57:b5:0c:e0:ad:08:0b:a9:
                    f3:63:13:cd:b2:d8:43:c5:e8:70:4d:5f:74:57:38:
                    68:6f:ec:d3:4a:73:b9:d9:7c:9e:42:b5:ad:37:f0:
                    e7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:4E:BD:0F:A8:8F:5D:BA:77:DE:18:39:11:A7:04:3C:01:9E:2A:A4
            X509v3 Authority Key Identifier:
                keyid:D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:e4:cb:6e:e3:59:22:f1:a4:b0:c8:3b:7a:74:28:4e:18:80:
         af:dd:26:61:75:e1:5b:83:04:f1:48:4c:7f:36:30:fb:ee:ab:
         ea:85:79:c7:3b:dc:ec:d8:0b:c4:fb:8c:e4:43:eb:36:30:8b:
         1f:64:a9:6f:20:00:95:a6:f0:aa:08:16:3b:1c:f3:03:a1:5e:
         a6:1d:ba:e7:8f:96:5f:41:91:26:fd:b5:a7:29:df:82:7f:33:
         7b:b3:ad:f7:e5:87:e7:02:6e:8c:a2:37:68:cb:1c:ae:1b:f0:
         f9:76:87:f7:05:9c:6f:60:65:b5:3e:ba:b9:6d:6b:08:c4:6d:
         a5:36:eb:7d:28:85:f5:4f:94:1c:29:a5:42:9f:fa:1b:2d:95:
         54:c2:ca:87:1e:56:c9:72:9c:72:cd:e5:ee:13:5a:ef:78:c6:
         9c:b9:b3:c8:39:fe:ed:bb:70:7f:75:5f:ee:f7:75:f5:d4:67:
         65:fc:4e:57:3a:f8:b5:54:af:8b:5d:f9:a0:46:2f:7b:64:f0:
         b0:e1:5d:92:d6:d9:4c:04:16:4b:d5:05:eb:5e:04:c8:b9:a1:
         7d:a6:31:b5:0b:4b:38:9b:b8:a5:1b:20:a6:0b:bd:20:06:e1:
         7c:eb:68:8b:7a:c0:b4:17:15:23:45:66:57:52:b8:35:b8:eb:
         48:ca:e2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:31:05 2026 by rpki-client