Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft
File:                     l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft (raw, json)
Hash identifier:          6OwWMSsGo6NpUHfQI/9i131l6psCTfmU7ev09If0Z6Y=
Subject key identifier:   80:14:05:65:61:B2:67:DD:4C:5A:3B:3F:D2:46:AC:52:C6:EA:13:AF
Authority key identifier: 97:61:FF:5F:3F:84:16:BE:01:E2:3F:C7:05:84:7D:FA:94:48:4D:B6
Certificate issuer:       /CN=A91D46B0/serialNumber=9761FF5F3F8416BE01E23FC705847DFA94484DB6
Certificate serial:       0856
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft
Manifest number:          0847
Signing time:             Thu 16 Apr 2026 20:47:37 +0000
Manifest this update:     Thu 16 Apr 2026 20:47:37 +0000
Manifest next update:     Thu 23 Apr 2026 20:47:37 +0000
Files and hashes:         1: l2H_Xz-EFr4B4j_HBYR9-pRITbY.crl (hash: 2v0FDbk3GLtRxCnUISk0WpqpJ9dT6ZmVewu9mNDO+Ps=)
                          2: 63B4DD1ADA2311EB8A4EC13BC4F9AE02.roa (hash: PnvDWjWzjaNuJRVmvtkfv01lOJ4mbsRef16ZNQueyWM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.crl
                          rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:47:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2134 (0x856)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D46B0, serialNumber=9761FF5F3F8416BE01E23FC705847DFA94484DB6
        Validity
            Not Before: Apr 16 20:47:37 2026 GMT
            Not After : Apr 23 20:47:37 2026 GMT
        Subject: CN=69e14ae9-0622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:26:46:5d:09:09:78:c9:9e:94:22:6d:93:e5:
                    5f:18:cb:74:7c:42:77:7e:45:40:0f:db:5a:6e:d8:
                    49:ee:52:b5:fc:34:eb:76:2f:41:55:5e:8f:75:49:
                    0f:84:69:cd:e9:56:ea:6a:09:8f:4a:f0:bc:6b:21:
                    88:81:be:d8:b0:b3:2d:3d:63:94:c6:52:2b:f8:80:
                    4e:2e:6e:36:d3:24:3e:c1:1d:99:06:ea:5d:6f:95:
                    ba:43:de:9b:cd:da:2a:b1:bf:4c:12:b6:b3:82:6f:
                    c8:d2:ca:f1:e3:91:53:05:8a:49:52:1f:2d:c7:38:
                    27:91:c0:63:41:33:da:1a:c4:d7:be:a5:f2:ef:b5:
                    e2:d3:ba:9b:99:96:20:70:b9:70:55:e5:fa:2b:27:
                    c9:ef:38:b8:90:d5:0a:47:36:b0:c2:03:b7:d5:ec:
                    dd:5e:07:db:e5:0b:5d:b4:19:c0:5e:4c:5f:8a:08:
                    30:d0:47:ef:64:1b:51:c1:3c:ea:0c:44:be:cf:5c:
                    4b:77:1e:9c:72:5b:7f:06:03:fd:b3:0d:40:ef:d3:
                    32:cf:2d:81:40:79:33:33:7d:99:5b:45:b0:ef:a7:
                    e9:c2:bf:07:a3:51:33:95:bb:57:15:da:7e:b1:5a:
                    3b:c5:cb:fc:00:4e:8e:4c:48:05:f4:d5:f5:d2:9f:
                    d8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:14:05:65:61:B2:67:DD:4C:5A:3B:3F:D2:46:AC:52:C6:EA:13:AF
            X509v3 Authority Key Identifier:
                keyid:97:61:FF:5F:3F:84:16:BE:01:E2:3F:C7:05:84:7D:FA:94:48:4D:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:71:00:76:3e:22:2c:b7:d7:f8:b8:65:f0:d6:60:be:71:f6:
         dd:25:59:cc:a2:9b:14:60:1e:01:9b:2d:b6:c7:e7:44:e8:ed:
         d5:c1:ed:35:d3:c1:9d:9e:af:68:a4:0e:3c:92:e1:e3:6d:f7:
         86:aa:85:e6:ec:52:ea:f1:a4:7d:23:16:cb:9d:ba:6c:53:82:
         54:87:c3:3a:ce:8f:bd:28:ef:1e:de:fc:2a:e0:2a:cc:a7:d8:
         fa:de:aa:60:45:e5:cf:b3:3f:bd:cf:7c:09:4c:a0:0c:9c:b4:
         e0:f1:b3:a9:5a:52:dc:d5:8d:fa:13:93:75:f4:07:7c:fa:32:
         cb:73:b0:d6:84:b1:7d:60:f9:12:a5:f3:79:72:bb:88:18:ab:
         3e:fa:3f:18:f7:9a:53:31:d4:02:ca:62:52:d5:1c:db:24:83:
         52:81:9a:7a:f8:5f:3f:d5:92:59:65:d0:1d:6a:4e:df:0a:c1:
         3b:cc:d7:b2:6a:b9:06:00:8b:04:b7:3f:58:15:d8:d1:b2:38:
         f6:73:49:b0:96:58:f8:72:f3:74:38:f5:0a:8a:ef:57:16:0a:
         c3:5b:74:0c:55:7b:8d:23:64:0c:4f:54:65:99:19:61:71:02:
         6f:2f:ee:bf:dd:f8:f7:3a:91:55:2e:5e:b8:20:a4:93:b1:c8:
         3b:97:b2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:53:42 2026 by rpki-client