Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft
File:                     lTUaGSeo8Q660c48bEpaxGUVynA.mft (raw, json)
Hash identifier:          l2r26SaaGbLUlgT/rM8eiHSutdgLjy/+pIGCwyQeqvE=
Subject key identifier:   8A:4D:89:CC:D1:2F:13:24:BB:A3:AD:26:41:48:AB:92:6D:4D:E0:B5
Authority key identifier: 95:35:1A:19:27:A8:F1:0E:BA:D1:CE:3C:6C:4A:5A:C4:65:15:CA:70
Certificate issuer:       /CN=A91D4E15/serialNumber=95351A1927A8F10EBAD1CE3C6C4A5AC46515CA70
Certificate serial:       022C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft
Manifest number:          0227
Signing time:             Fri 17 Apr 2026 02:28:30 +0000
Manifest this update:     Fri 17 Apr 2026 02:28:29 +0000
Manifest next update:     Fri 24 Apr 2026 02:28:29 +0000
Files and hashes:         1: lTUaGSeo8Q660c48bEpaxGUVynA.crl (hash: 7jaqw+i4nE9qzJZUsOMvlVR4KVtglf93lCSRP29QVQs=)
                          2: 90F09734F1B311EDA789BB57C4F9AE02.roa (hash: TRCit7S/Vg6OV4lqP74PVauh5l5sCF/UMjkzMFmjRuk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.crl
                          rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:28:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 556 (0x22c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4E15, serialNumber=95351A1927A8F10EBAD1CE3C6C4A5AC46515CA70
        Validity
            Not Before: Apr 17 02:28:29 2026 GMT
            Not After : Apr 24 02:28:29 2026 GMT
        Subject: CN=69e19acd-1306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:db:82:2e:60:ec:e2:be:c2:f2:df:f7:ae:30:
                    d6:00:36:1e:81:86:7f:ad:5e:ec:ea:b8:82:21:3e:
                    f9:7c:c4:30:36:f7:e2:c0:5e:32:ac:13:54:7a:5d:
                    f5:ef:61:20:85:a9:c7:a5:54:ff:39:0a:a6:33:84:
                    ed:6f:bb:21:2d:64:7e:89:76:c0:d7:b5:00:b3:36:
                    c3:07:1b:f9:4f:a7:fd:dd:5e:75:16:1b:89:ab:50:
                    bd:68:c2:51:ce:a8:7c:fc:1e:d7:1a:c1:48:7c:cd:
                    a4:b1:30:43:98:54:eb:56:7f:3d:67:d1:3a:62:a1:
                    0e:29:a3:59:9b:8a:d5:d9:38:2f:15:b3:7e:41:ef:
                    7b:2a:f9:7e:97:48:40:22:f3:d5:13:6d:cc:a9:b0:
                    74:30:75:74:64:ef:11:55:02:60:1a:2d:19:6d:1c:
                    5f:9a:6e:a6:b1:da:3e:7e:65:48:d2:57:29:eb:89:
                    d4:9a:6b:98:3e:b8:98:d6:77:5d:8b:3f:20:be:36:
                    0d:0a:cd:cd:db:bb:60:2d:a7:4e:fa:e4:7c:56:c5:
                    e4:ad:41:e7:0f:26:e4:26:38:78:2e:df:78:88:91:
                    65:80:31:cd:d7:33:33:89:af:a0:c3:c9:3d:7e:c8:
                    57:5e:39:91:e5:d7:7b:12:88:89:ad:45:9c:85:b0:
                    be:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:4D:89:CC:D1:2F:13:24:BB:A3:AD:26:41:48:AB:92:6D:4D:E0:B5
            X509v3 Authority Key Identifier:
                keyid:95:35:1A:19:27:A8:F1:0E:BA:D1:CE:3C:6C:4A:5A:C4:65:15:CA:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:60:e0:59:4e:a3:97:05:ab:74:cf:68:54:4c:e5:07:01:77:
         3f:96:c2:78:9c:55:60:ca:33:9e:4f:39:9e:24:a3:dc:7b:79:
         5e:b0:ad:2e:ae:6b:ad:06:a9:a4:5a:78:0c:76:46:c1:ae:f8:
         13:93:45:16:54:e5:52:32:e1:dd:b3:a0:c2:75:e8:58:39:ca:
         b9:d1:01:50:81:23:60:24:e5:9b:7e:7a:86:12:99:b8:60:76:
         7a:35:fc:01:72:0f:aa:89:91:b2:4b:7f:5c:8a:08:9e:f3:ae:
         f5:55:ba:a0:35:20:64:6d:a8:01:42:7f:14:ff:19:4f:c4:49:
         c4:0e:89:d3:e8:78:ce:20:8f:64:d4:76:c2:c8:33:7b:f5:2a:
         36:fd:68:2c:54:03:1a:06:94:a7:ea:40:98:2a:d4:a7:cd:21:
         dc:bb:3f:53:e1:40:93:57:40:30:71:a1:b8:fe:41:e0:2b:f5:
         63:fa:e2:2a:93:78:3d:45:1a:a9:e3:9a:35:d3:66:11:68:35:
         00:2b:1a:df:b1:da:51:54:c3:51:64:6a:ee:1d:fb:11:61:82:
         b3:21:a0:c4:16:88:d9:05:fc:bb:7b:b1:c5:19:be:61:2a:e2:
         13:88:05:d7:cb:73:c2:ae:bf:53:35:b3:75:9d:52:9e:38:c7:
         d2:9a:6e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:50:20 2026 by rpki-client