Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft
File:                     lJtkel-MefbaSuNtngDETgKpp6Q.mft (raw, json)
Hash identifier:          WKSOEzFrSevRroJ6mD9Hy+oXMnuWq7sCQwxT+KybB+8=
Subject key identifier:   20:B3:8C:2E:FA:7F:A2:DD:14:F0:1B:BD:17:CC:69:3F:7A:FC:10:81
Authority key identifier: 94:9B:64:7A:5F:8C:79:F6:DA:4A:E3:6D:9E:00:C4:4E:02:A9:A7:A4
Certificate issuer:       /CN=A9175D84/serialNumber=949B647A5F8C79F6DA4AE36D9E00C44E02A9A7A4
Certificate serial:       01D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJtkel-MefbaSuNtngDETgKpp6Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft
Manifest number:          01CB
Signing time:             Fri 17 Apr 2026 03:29:50 +0000
Manifest this update:     Fri 17 Apr 2026 03:29:50 +0000
Manifest next update:     Fri 24 Apr 2026 03:29:50 +0000
Files and hashes:         1: lJtkel-MefbaSuNtngDETgKpp6Q.crl (hash: 0x9AgOgrb+fJaB9+fZPBysECl1DFNVkVpE7ngCG/K1Q=)
                          2: 1FB96962DA1311EE81216D86C4F9AE02.roa (hash: 3sL7Xm3lCFFmiBXDKobVdIRkWOYUubW0iwN8SBMNhsU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.crl
                          rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJtkel-MefbaSuNtngDETgKpp6Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:29:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 469 (0x1d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175D84, serialNumber=949B647A5F8C79F6DA4AE36D9E00C44E02A9A7A4
        Validity
            Not Before: Apr 17 03:29:50 2026 GMT
            Not After : Apr 24 03:29:50 2026 GMT
        Subject: CN=69e1a92e-a833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b5:67:e6:ab:3a:39:62:7c:71:34:ca:90:b7:
                    8c:7d:11:b8:a1:d6:f0:62:11:d2:0d:b9:50:6c:4a:
                    f2:c0:8c:8d:ef:bf:ae:dc:77:89:d4:2b:43:12:74:
                    19:7d:a2:5d:38:7f:95:2b:aa:61:0d:d6:60:62:10:
                    74:25:ec:c3:85:1c:70:56:f8:7b:70:95:59:55:2f:
                    b0:1f:21:be:97:ab:9d:76:4a:71:a1:38:89:2b:f3:
                    b1:fe:0c:8e:66:3d:82:6c:c3:37:f1:46:10:df:04:
                    06:28:97:07:6e:fb:df:c3:39:3c:1a:04:51:1a:00:
                    46:ba:91:df:43:a3:1f:d1:f6:bf:1c:fb:e0:f3:11:
                    c3:8c:b1:7e:cf:d5:9a:fc:a1:e0:d6:fc:b6:f4:4d:
                    d9:12:7e:ea:38:da:ae:03:e3:cf:47:a2:0d:80:a7:
                    6e:44:55:c7:ec:51:8d:95:54:2a:3a:7d:7f:88:de:
                    f1:5e:13:bb:d7:e2:2b:71:41:ae:b7:f7:97:e1:e2:
                    d2:a6:db:ec:ae:ac:7a:39:ee:d0:5f:18:83:3a:ea:
                    a9:03:43:37:df:61:0d:22:f8:b8:1b:b5:07:bc:57:
                    08:ff:c6:cd:b8:3e:54:d3:9c:4a:ea:19:2e:d2:1c:
                    62:fb:82:5b:40:47:03:5c:9c:29:64:54:f8:87:ff:
                    08:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B3:8C:2E:FA:7F:A2:DD:14:F0:1B:BD:17:CC:69:3F:7A:FC:10:81
            X509v3 Authority Key Identifier:
                keyid:94:9B:64:7A:5F:8C:79:F6:DA:4A:E3:6D:9E:00:C4:4E:02:A9:A7:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJtkel-MefbaSuNtngDETgKpp6Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:d4:b2:fb:9b:97:cc:87:98:4e:71:d6:d2:8f:ae:61:cf:e3:
         3f:a7:25:e5:91:5e:2a:a1:f4:e0:a1:93:f9:c7:48:44:ec:15:
         32:87:7b:e7:3e:47:3c:bc:ad:50:e4:0e:7a:19:a2:31:1b:73:
         0a:9b:67:fe:aa:ce:be:b7:8a:94:c6:75:58:66:0f:a3:c3:ab:
         2d:be:06:aa:df:7a:68:5b:07:fe:7c:c4:04:84:e3:fb:83:96:
         28:0b:3c:33:d5:0e:64:87:c7:82:0d:92:71:6e:3f:32:f9:fc:
         7f:2c:7a:b5:8c:65:fb:68:5d:0d:03:fb:da:f3:21:5c:48:0f:
         74:54:38:62:5d:5a:63:07:63:d5:ec:5d:b1:a1:68:ff:4b:66:
         da:be:9d:42:39:95:3d:02:ed:d2:49:70:21:7c:1d:45:24:c0:
         e6:c9:d2:a6:52:64:14:db:60:c7:89:9e:17:f9:fb:69:74:41:
         44:94:76:7b:21:d3:3b:98:47:ad:53:3d:30:fb:3d:b3:79:4b:
         a1:9b:66:91:ee:c6:9f:6e:a5:30:85:46:6b:9e:39:34:d6:c2:
         a4:14:bc:af:f1:a8:9d:81:f5:08:7b:11:08:9d:27:66:36:81:
         d2:30:7b:60:7b:e3:62:c6:c4:4a:6e:f2:c8:5b:9a:40:c6:87:
         6b:61:cc:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:09:00 2026 by rpki-client