Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft
File:                     l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft (raw, json)
Hash identifier:          acq2l/ZuEiA957qWUHxayymD05Z0OiAjiyJteYUijns=
Subject key identifier:   3E:0A:03:DC:5F:45:E1:81:B6:56:EA:11:CA:EB:C3:AD:9E:19:9E:C2
Authority key identifier: 97:D2:9B:0D:32:45:5B:B5:C6:F1:25:78:5F:40:F5:BC:27:09:F7:D4
Certificate issuer:       /CN=A91DF8DB/serialNumber=97D29B0D32455BB5C6F125785F40F5BC2709F7D4
Certificate serial:       1436
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft
Manifest number:          142A
Signing time:             Sat 18 Apr 2026 16:48:22 +0000
Manifest this update:     Sat 18 Apr 2026 16:48:22 +0000
Manifest next update:     Sat 25 Apr 2026 16:48:22 +0000
Files and hashes:         1: l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl (hash: AYuRODjIJDiK/2Gzoh3wwgU58oc6EMgsvQI+H9fOgfs=)
                          2: A6C9934CA74111E88B3EAB2BC4F9AE02.roa (hash: AjTT+lsAXZJ+mpwW3X1wugvMUDDULjBU49kW3fhASOc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl
                          rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 16:48:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5174 (0x1436)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF8DB, serialNumber=97D29B0D32455BB5C6F125785F40F5BC2709F7D4
        Validity
            Not Before: Apr 18 16:48:22 2026 GMT
            Not After : Apr 25 16:48:22 2026 GMT
        Subject: CN=69e3b5d6-a7a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f2:ba:40:02:5d:aa:26:fa:93:11:cd:0b:81:
                    cd:2d:dc:16:fb:f7:43:85:a9:01:71:c6:3b:38:8e:
                    8f:7e:a9:f6:ad:fc:bd:38:b3:c4:2d:dd:d6:c8:af:
                    81:58:fe:6f:47:22:aa:70:81:15:ca:f5:c2:ca:19:
                    7c:d4:be:bd:63:7b:1f:b8:5b:3a:f5:81:54:52:16:
                    94:2d:e4:ed:0b:8e:71:78:bc:d2:bb:bd:78:f6:d6:
                    0b:81:94:ec:7c:00:38:7b:50:92:cd:3d:f2:e8:19:
                    86:32:47:43:7d:58:2e:dd:3a:9d:85:de:9b:8f:59:
                    ed:0c:c5:6f:7e:a7:83:de:19:aa:79:23:20:47:09:
                    c8:77:22:f4:e6:ef:36:f2:db:6a:99:b7:b5:63:44:
                    7c:3b:10:3a:f2:de:02:0a:5d:93:08:ec:f0:34:d1:
                    55:58:6a:3a:d4:13:ea:c5:3d:c8:98:54:6f:fe:2c:
                    a5:ee:a9:c2:5c:e8:19:24:0b:57:83:6d:30:c9:b4:
                    ab:38:d4:48:e1:f1:58:42:4d:3f:af:bf:27:0c:dc:
                    3e:1d:1e:ce:ea:18:ff:6d:a7:d3:c5:d4:45:92:ad:
                    b8:24:86:16:35:12:41:ed:d6:cc:0b:37:3f:88:d2:
                    81:6d:07:fe:9c:2b:ab:b1:19:86:cc:c7:eb:5b:d6:
                    9b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:0A:03:DC:5F:45:E1:81:B6:56:EA:11:CA:EB:C3:AD:9E:19:9E:C2
            X509v3 Authority Key Identifier:
                keyid:97:D2:9B:0D:32:45:5B:B5:C6:F1:25:78:5F:40:F5:BC:27:09:F7:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:0f:fc:0b:24:d0:67:3c:17:c1:2c:fd:97:cd:9f:ff:b9:a1:
         0a:3a:cf:20:86:fa:0a:2e:25:e6:56:38:78:06:1c:c0:4a:d8:
         48:37:e6:a6:42:f7:1a:69:0a:1c:ff:76:69:1f:1f:a5:47:82:
         67:f4:f6:58:f6:f1:53:bf:6e:80:39:7e:3c:98:de:81:14:4f:
         72:1c:04:22:77:8c:27:fe:df:58:a0:99:c2:80:19:71:ad:c1:
         dc:b7:61:b7:63:89:63:69:d6:5e:bd:5f:24:5a:23:47:a9:d9:
         eb:57:d7:8f:e6:8d:95:fa:0c:44:8e:27:83:63:2b:95:9c:4b:
         5f:4a:56:e6:14:b1:60:d1:f2:97:51:9d:14:e0:ee:f2:a6:aa:
         96:b7:59:9f:3d:c2:62:74:c8:fa:71:9d:96:ea:d4:3b:f0:94:
         7c:2f:62:2a:2e:a1:31:da:a7:69:6f:9a:d5:c8:ce:68:5a:ed:
         43:ce:f9:88:da:a8:cf:59:d5:70:09:3a:9c:31:8a:02:d5:ae:
         54:9d:bb:47:3e:33:0d:9e:fd:c5:df:de:8e:e9:ca:56:f0:1c:
         bb:e4:6d:9c:13:d3:12:7c:20:f3:21:58:01:6c:21:0e:cf:ae:
         c5:cd:83:d3:26:34:bc:44:7a:fc:7b:70:97:70:d6:3a:60:f0:
         44:26:89:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:52:00 2026 by rpki-client