Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/lslPY1zHgehZd0oRr3Nii2CmVs8.mft
File:                     lslPY1zHgehZd0oRr3Nii2CmVs8.mft (raw, json)
Hash identifier:          5qBU23n6Bk3tzF9qPzz9iTT1axjrcxOijH5sCkbg48g=
Subject key identifier:   F8:64:B3:3C:AC:D1:51:88:92:D1:FB:86:7E:2A:E3:06:BF:EA:FD:66
Authority key identifier: 96:C9:4F:63:5C:C7:81:E8:59:77:4A:11:AF:73:62:8B:60:A6:56:CF
Certificate issuer:       /CN=A9181803/serialNumber=96C94F635CC781E859774A11AF73628B60A656CF
Certificate serial:       2D
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lslPY1zHgehZd0oRr3Nii2CmVs8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/lslPY1zHgehZd0oRr3Nii2CmVs8.mft
Manifest number:          2A
Signing time:             Fri 17 Apr 2026 08:30:30 +0000
Manifest this update:     Fri 17 Apr 2026 08:30:30 +0000
Manifest next update:     Fri 24 Apr 2026 08:30:30 +0000
Files and hashes:         1: lslPY1zHgehZd0oRr3Nii2CmVs8.crl (hash: 3vWV8t1y/nVlLOQlJ40T8H2Ch1Rdt74RvJs8B46nzho=)
                          2: 38D7A57E02B311F1B5A042A33E3D8C67.roa (hash: i+cONdh4kL/zy5o+bEmmDqg3gYQAN5WXBgxD3TrRI7w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/lslPY1zHgehZd0oRr3Nii2CmVs8.crl
                          rsync://rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/lslPY1zHgehZd0oRr3Nii2CmVs8.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lslPY1zHgehZd0oRr3Nii2CmVs8.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:30:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181803, serialNumber=96C94F635CC781E859774A11AF73628B60A656CF
        Validity
            Not Before: Apr 17 08:30:30 2026 GMT
            Not After : Apr 24 08:30:30 2026 GMT
        Subject: CN=69e1efa6-a74e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:73:07:92:1c:5a:05:89:59:b1:2c:eb:26:c4:
                    6e:47:67:de:eb:a8:5a:77:73:87:d8:ff:9c:e0:78:
                    ab:41:5b:3e:30:17:3c:b4:53:9e:2c:77:81:dc:a4:
                    de:b6:76:97:8c:86:c7:a9:22:f7:78:e0:36:a9:98:
                    c6:ff:6c:ef:11:32:3e:b2:0c:d0:b8:fc:b0:34:b5:
                    3f:58:96:5f:58:f3:38:b9:dc:7f:b7:7b:5d:29:84:
                    4e:79:53:4a:95:1b:18:a2:e2:58:0e:b3:43:1a:45:
                    8d:fe:0d:ad:dd:b5:6e:96:6e:11:6f:4c:a8:00:86:
                    c1:72:ae:c5:81:38:77:ed:0d:35:47:99:ff:4f:06:
                    16:c6:9a:a1:da:40:f5:c8:60:58:97:25:0f:94:ca:
                    2d:a1:60:a0:54:6d:f1:a4:b6:a9:2a:be:71:0d:00:
                    6c:34:d6:8d:3a:66:ef:5d:c2:3e:be:52:ff:3c:b4:
                    f8:9d:41:5e:54:6e:fd:f2:22:0d:02:46:79:59:17:
                    c6:7c:bd:f8:2c:ea:69:2c:c4:a7:aa:86:94:18:21:
                    73:a7:a5:0d:19:1b:05:af:70:91:05:5d:e4:df:a2:
                    0e:d0:60:b4:a9:88:67:a4:c6:9a:22:45:79:7a:37:
                    b8:22:6d:40:fd:20:8c:13:1f:74:3f:22:8d:15:a9:
                    22:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:64:B3:3C:AC:D1:51:88:92:D1:FB:86:7E:2A:E3:06:BF:EA:FD:66
            X509v3 Authority Key Identifier:
                keyid:96:C9:4F:63:5C:C7:81:E8:59:77:4A:11:AF:73:62:8B:60:A6:56:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/lslPY1zHgehZd0oRr3Nii2CmVs8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lslPY1zHgehZd0oRr3Nii2CmVs8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/lslPY1zHgehZd0oRr3Nii2CmVs8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:a0:90:44:e8:5e:f0:7b:ac:ac:ae:ba:e9:3b:61:68:a2:f5:
         c5:fa:17:4a:d0:b8:bc:1f:f7:96:39:0f:5e:45:85:77:0e:2d:
         83:3e:3b:f9:26:51:ec:18:3f:88:f6:5f:40:72:e2:7e:6f:2d:
         18:ed:25:85:d4:13:9f:af:45:9f:b4:e3:c2:f0:10:4b:ce:f4:
         98:68:59:67:9a:19:42:ff:e4:b3:db:66:e2:3d:a9:0a:7f:de:
         36:ab:1f:dd:33:f4:71:2d:79:59:fa:73:f6:72:5a:b9:c0:90:
         46:cd:a9:d9:4d:d6:e6:46:87:3a:b8:db:b0:83:3d:ec:cd:90:
         c9:01:2c:bc:c8:2e:e8:43:c7:8d:c6:13:f0:23:e9:f3:93:72:
         4e:46:79:3a:eb:30:b3:7f:db:e8:ea:76:24:27:87:bd:2e:0a:
         5b:aa:b8:9d:ae:8a:61:15:d4:70:18:44:ef:38:42:df:74:bd:
         1a:17:2a:5a:d8:cd:7f:bb:85:04:d9:56:29:ad:6d:4d:6c:6c:
         61:d0:58:9c:1d:b1:33:10:a8:16:c9:e5:d5:40:9f:67:8f:0b:
         06:95:31:c9:fe:52:f1:8b:b1:c4:4a:ca:f1:04:5d:b2:55:54:
         0c:9e:83:34:a9:62:8f:68:4f:e4:f7:da:75:1a:a4:ab:ae:19:
         c1:05:c4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:02:10 2026 by rpki-client