Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft
File:                     LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft (raw, json)
Hash identifier:          5QPChVYtzyCkRhF53crWabZl8YwdZQY31fxppPPc0tY=
Subject key identifier:   5E:73:65:33:1A:65:A7:64:6A:82:20:CC:5E:A6:9E:A3:94:9C:2D:74
Authority key identifier: 2D:01:A1:94:2B:AF:D9:D3:B3:1D:DB:FE:75:32:4B:AD:62:B6:09:58
Certificate issuer:       /CN=A91855B3/serialNumber=2D01A1942BAFD9D3B31DDBFE75324BAD62B60958
Certificate serial:       B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft
Manifest number:          B0
Signing time:             Sun 19 Apr 2026 06:44:47 +0000
Manifest this update:     Sun 19 Apr 2026 06:44:47 +0000
Manifest next update:     Sun 26 Apr 2026 06:44:47 +0000
Files and hashes:         1: LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl (hash: t6SQBFQkrBQq49zWLMh4uvyPzQietZL94QGcAWzCnvw=)
                          2: E62BCC784C9211F09A2E3014C4F9AE02.roa (hash: xT5qy146gRzAu39NzX0c8OhjswZUhA9rByvpjRnnGOU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl
                          rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91855B3, serialNumber=2D01A1942BAFD9D3B31DDBFE75324BAD62B60958
        Validity
            Not Before: Apr 19 06:44:47 2026 GMT
            Not After : Apr 26 06:44:47 2026 GMT
        Subject: CN=69e479df-882e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2e:c2:10:93:83:dc:36:9d:bb:fa:89:15:dd:
                    db:7e:e8:8d:01:74:50:a5:ef:84:88:10:2e:45:f1:
                    bd:d2:05:7c:da:d3:15:89:5d:aa:97:19:5b:b4:26:
                    76:f6:c8:c0:67:41:13:3d:ff:7f:6b:50:67:c9:7c:
                    b2:b2:17:0c:29:04:9d:a6:b7:83:e0:5e:d3:93:7a:
                    61:e5:35:2e:d8:a7:37:4c:95:60:ba:0d:d9:f2:16:
                    47:b1:db:23:f5:67:3a:85:d9:08:17:6e:24:45:b7:
                    a4:10:34:ff:f1:d5:3f:d2:70:07:49:13:2e:d6:55:
                    a7:9c:90:17:d8:f5:10:d0:db:f8:2d:38:21:e4:07:
                    98:92:26:85:19:5b:3a:ab:8b:8d:18:32:33:4a:a6:
                    8b:46:52:d4:b0:1e:4f:94:55:42:ad:5b:c2:e2:b3:
                    a0:f2:84:96:6c:74:ae:6e:21:ac:0f:e6:32:31:83:
                    4a:03:f3:98:cb:2d:f0:b1:f2:bd:87:a7:76:1f:30:
                    cc:a7:27:71:a2:03:c1:c8:a6:51:90:2d:22:55:8d:
                    ec:a3:74:5f:3e:2c:fb:e6:fa:d4:bc:08:1f:26:bb:
                    4e:2a:fd:9f:8b:8d:f1:7c:45:9c:e0:53:dc:18:56:
                    46:d7:fd:3c:ba:0e:a4:64:cc:17:d1:ac:c4:34:5a:
                    57:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:73:65:33:1A:65:A7:64:6A:82:20:CC:5E:A6:9E:A3:94:9C:2D:74
            X509v3 Authority Key Identifier:
                keyid:2D:01:A1:94:2B:AF:D9:D3:B3:1D:DB:FE:75:32:4B:AD:62:B6:09:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:c5:8d:5f:d1:1f:d1:b6:2e:69:42:76:01:f8:c6:49:f0:60:
         f1:52:d1:61:a1:9d:91:1f:36:d1:aa:3a:01:b3:17:a9:da:c0:
         6b:26:80:5e:db:c4:7f:b6:47:b3:e5:3c:a5:0a:21:19:da:d2:
         41:03:83:79:0d:ee:05:92:f5:da:c1:db:7d:d4:ef:1f:e2:68:
         c6:e5:67:51:f7:71:a8:27:c4:b0:30:d5:3e:54:00:d4:2a:92:
         5c:b9:29:73:a9:5a:5b:18:65:d8:f1:49:f5:2c:46:82:03:c5:
         64:ba:24:6d:0b:6b:a1:d9:f7:b5:7e:a7:fb:1d:47:d3:14:b4:
         67:fd:ab:c6:44:c6:3b:65:b0:eb:5e:4c:fa:68:08:dd:00:3d:
         d9:58:ed:ef:08:cc:db:71:c7:51:ec:8f:0b:f4:51:0a:ae:b0:
         0a:b7:8e:97:74:2a:20:ce:7d:57:c9:63:bd:78:f1:7a:66:ae:
         f8:13:b4:68:6f:f2:31:ab:64:9e:b9:0a:8f:2a:6d:82:b2:a9:
         be:92:5d:ac:92:da:36:7a:31:60:1e:cb:4f:1f:ab:dc:7a:0f:
         7e:50:02:bb:76:7e:0f:41:76:97:e4:42:01:27:9c:eb:b2:cb:
         2d:6e:01:f6:ae:2b:9c:9b:3d:7a:79:db:a2:b1:0d:4d:c8:8b:
         04:91:cc:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:16:03 2026 by rpki-client