Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
File:                     LgN_IhyajV_cyIxDyosl1ENrsDk.mft (raw, json)
Hash identifier:          W7tKFdMlg2NycYLKg/E2TbIMNxobFpw9S1l4yTUTDNM=
Subject key identifier:   D6:86:A2:EE:BA:7C:79:2C:AB:C7:F8:DE:E8:AD:A9:A2:EF:CA:EB:76
Authority key identifier: 2E:03:7F:22:1C:9A:8D:5F:DC:C8:8C:43:CA:8B:25:D4:43:6B:B0:39
Certificate issuer:       /CN=A9196285/serialNumber=2E037F221C9A8D5FDCC88C43CA8B25D4436BB039
Certificate serial:       D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
Manifest number:          CE
Signing time:             Fri 17 Apr 2026 06:30:13 +0000
Manifest this update:     Fri 17 Apr 2026 06:30:12 +0000
Manifest next update:     Fri 24 Apr 2026 06:30:12 +0000
Files and hashes:         1: LgN_IhyajV_cyIxDyosl1ENrsDk.crl (hash: yHwpEOD8XkSb7uYvavLVW5Y88Tafkp6ccwFJQVf3nAI=)
                          2: D3E69766027B11F0ACFB0B53C4F9AE02.roa (hash: KwucprH89zI40KlMGp9yYI7Eo1rslTO1XAG7Mp4YGYs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.crl
                          rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:30:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 214 (0xd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196285, serialNumber=2E037F221C9A8D5FDCC88C43CA8B25D4436BB039
        Validity
            Not Before: Apr 17 06:30:12 2026 GMT
            Not After : Apr 24 06:30:12 2026 GMT
        Subject: CN=69e1d374-83f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e0:37:6a:ef:3a:14:00:ce:38:ec:3d:d2:5e:
                    28:11:b7:08:e2:af:de:06:7b:d9:a6:10:44:de:fb:
                    d0:d7:44:67:4f:88:39:06:e8:2f:61:0f:fd:43:88:
                    9a:6d:c9:43:cf:d6:d6:04:73:82:33:79:62:31:79:
                    9a:76:24:d4:a1:d2:2d:2b:30:81:50:08:1a:0b:7e:
                    a0:c6:76:66:99:94:56:d6:a7:19:6b:2a:18:c6:e3:
                    37:88:36:e7:8a:68:0d:6c:17:c0:9a:8f:f7:6f:2d:
                    d7:ab:8e:aa:f9:b5:d2:f0:55:d1:56:48:98:b9:ae:
                    dd:33:16:2a:dd:35:4c:48:0d:e6:b7:c9:8c:4b:44:
                    f6:dd:68:9e:e3:75:f5:a9:ac:1a:8e:db:45:04:b5:
                    3e:d6:34:ba:b3:26:61:16:26:45:32:48:3a:07:9d:
                    ec:65:05:63:74:c6:0f:2a:eb:7e:fc:9b:c6:a3:f3:
                    69:ef:f7:fb:64:c1:49:f6:a5:2b:7e:57:7a:a3:68:
                    c1:75:4e:65:86:56:fa:47:df:07:b1:e2:9a:0f:63:
                    a6:de:a7:8c:c2:ae:86:81:01:aa:e6:22:53:a0:af:
                    15:e3:06:98:66:41:00:e6:40:f0:d2:11:61:1e:fc:
                    38:f0:3b:e9:50:9b:ae:2d:e9:de:a0:4c:4b:07:4a:
                    0c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:86:A2:EE:BA:7C:79:2C:AB:C7:F8:DE:E8:AD:A9:A2:EF:CA:EB:76
            X509v3 Authority Key Identifier:
                keyid:2E:03:7F:22:1C:9A:8D:5F:DC:C8:8C:43:CA:8B:25:D4:43:6B:B0:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:15:e1:91:dc:87:75:d6:01:c1:f9:76:f3:8e:2d:7a:99:2b:
         b7:49:25:15:e5:23:6b:09:5d:b2:96:0f:67:28:f7:1d:6b:2d:
         a5:0a:ee:e2:c4:a0:ef:d9:bc:09:6c:6c:77:55:cc:c3:de:2a:
         55:32:52:a2:d6:05:f9:aa:92:9b:74:0d:91:03:17:b0:0f:3b:
         3c:e4:2c:86:6b:23:a2:6b:da:2e:93:7c:e2:64:ce:dc:9a:d9:
         ca:0b:f7:d0:c7:8f:89:77:9c:3c:86:79:8e:97:e3:82:5c:a5:
         63:aa:0b:77:17:7b:71:c8:15:e1:54:21:a0:a5:34:b2:eb:b3:
         75:d7:96:79:64:0e:4e:f5:8f:7e:19:4a:20:e9:51:7c:49:b6:
         20:31:e5:fd:63:43:d4:66:47:e1:b8:ad:9a:47:59:4d:17:1d:
         ae:2f:f3:99:ee:6b:95:f1:b5:69:81:c9:6d:16:4b:85:da:a0:
         66:4c:25:67:a4:08:8f:39:27:8b:12:37:8c:6a:0e:8a:34:2c:
         7a:09:45:2a:25:bb:c0:c3:58:16:41:c6:62:a3:33:49:cc:45:
         bc:88:77:45:2e:10:3f:43:8e:3b:5e:b9:ed:4f:7d:2c:68:95:
         63:06:01:55:91:5e:dc:95:74:46:b3:65:82:3a:bf:ba:7a:5b:
         32:73:4d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:01:32 2026 by rpki-client