Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
File:                     Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft (raw, json)
Hash identifier:          tsQwxtO5diJ9QgurcesOOsAIlRSJIz50mo9lLPXnFGY=
Subject key identifier:   94:BB:A5:B8:B5:2F:25:47:31:36:3A:23:48:23:A4:01:9C:1A:F3:3F
Authority key identifier: 2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2
Certificate issuer:       /CN=A91A8A85/serialNumber=2EAF60095334E7F0BAA065A92F653F5C744895C2
Certificate serial:       079B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
Manifest number:          0788
Signing time:             Thu 16 Apr 2026 21:30:49 +0000
Manifest this update:     Thu 16 Apr 2026 21:30:49 +0000
Manifest next update:     Thu 23 Apr 2026 21:30:49 +0000
Files and hashes:         1: Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl (hash: 8EWrcxFk+WenzDzXnvH/PwgXsvTMoXENCO/Z6Mr6q5g=)
                          2: 6FBFD196C3B811EF82B40031C4F9AE02.roa (hash: r2E33zBN68DzdFBxJzHPWNCremEV/5Gpjhm3sPaTCEM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl
                          rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1947 (0x79b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8A85, serialNumber=2EAF60095334E7F0BAA065A92F653F5C744895C2
        Validity
            Not Before: Apr 16 21:30:49 2026 GMT
            Not After : Apr 23 21:30:49 2026 GMT
        Subject: CN=69e15509-31ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5f:31:e8:c5:f5:95:f5:07:6b:19:ba:93:cf:
                    0e:10:e1:ae:c7:80:f8:a3:5e:d1:75:d6:7c:02:cd:
                    7d:7a:c5:85:26:46:2b:28:2c:e8:76:0e:5e:cd:df:
                    2c:9b:61:6c:7b:b4:01:c2:2c:48:4e:47:9d:90:63:
                    80:35:2f:6e:23:4e:5c:ac:02:63:07:c3:32:38:b2:
                    d3:9b:a9:8e:41:c9:4e:f5:0c:cb:2f:12:93:99:33:
                    aa:52:b0:bf:fd:13:a0:c8:c0:f1:32:33:e2:6a:f6:
                    a5:aa:d7:f4:f0:55:3f:36:ea:93:2b:07:49:c3:b6:
                    6f:c2:88:ed:62:48:f2:6d:55:d0:fb:2e:0e:3e:e1:
                    f8:78:b5:ee:f0:43:24:6a:eb:0b:52:6f:b7:c6:0d:
                    ec:22:df:af:ea:aa:29:ce:1c:85:fa:e3:d0:4d:42:
                    bb:08:66:65:29:53:1f:1f:c2:ac:ba:73:61:3e:78:
                    4b:f0:c6:2c:a8:19:85:d5:18:ce:19:08:41:95:8d:
                    75:5f:ed:20:5a:03:35:00:da:78:01:f2:fa:0a:20:
                    e9:2d:53:30:23:27:6c:f0:c7:a5:25:9c:33:c8:83:
                    a9:63:b0:70:00:47:0a:17:7d:8a:50:f4:65:b7:7d:
                    2b:8a:1b:60:d5:c5:79:19:56:41:e1:02:72:ec:79:
                    fe:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:BB:A5:B8:B5:2F:25:47:31:36:3A:23:48:23:A4:01:9C:1A:F3:3F
            X509v3 Authority Key Identifier:
                keyid:2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:14:c4:ab:75:c0:81:ed:58:ee:27:66:de:6f:ae:20:4f:0e:
         00:38:44:b2:6b:7d:c2:c0:cb:03:89:cf:09:08:a7:57:d6:95:
         a9:e8:89:60:25:a2:9f:67:b6:7e:44:c9:cc:ed:bd:da:cb:fb:
         2a:27:b0:fb:e3:85:af:62:e5:dd:e2:5e:8f:ae:4f:58:7d:35:
         1d:88:f1:c9:ac:29:06:0a:20:56:6c:4b:8f:eb:64:e6:06:43:
         96:8a:31:fe:e9:34:64:ac:37:4c:cd:6b:26:ca:6c:bb:01:a0:
         c7:c7:62:52:80:4e:f3:a5:aa:39:31:9f:77:b0:59:90:cd:9d:
         64:9c:6e:7b:ce:42:a8:23:db:73:ff:81:96:68:a6:ed:f9:c6:
         5d:2c:e4:19:bf:7d:cf:67:7c:b0:f9:01:fd:d3:72:7f:f9:88:
         5c:62:a3:d4:4b:27:85:59:cc:b6:ee:3f:5d:d1:60:50:43:59:
         43:2d:47:f6:86:7c:f9:06:68:a8:74:1a:33:a4:ae:59:11:36:
         cd:bb:9e:c5:a6:9d:23:5f:e4:b2:53:d8:a3:be:89:23:ee:50:
         a3:2a:8a:94:d5:e5:9e:14:d1:60:10:f4:a7:03:e3:59:32:4d:
         80:df:7c:6d:b1:30:73:7e:d4:43:d9:1b:80:d9:b2:db:70:44:
         a9:5c:bf:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:03:17 2026 by rpki-client