Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.mft
File:                     LoI9WUls-sc3j6gr-E3faE2TK50.mft (raw, json)
Hash identifier:          9ra+uUtVxC4e/x7aVdJTEc57tKCL9KbchQ+xl01URi4=
Subject key identifier:   84:ED:7F:64:41:07:98:A0:95:D4:9F:32:5B:B8:39:60:C0:F7:09:B7
Authority key identifier: 2E:82:3D:59:49:6C:FA:C7:37:8F:A8:2B:F8:4D:DF:68:4D:93:2B:9D
Certificate issuer:       /CN=A91E1A60/serialNumber=2E823D59496CFAC7378FA82BF84DDF684D932B9D
Certificate serial:       0BD3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoI9WUls-sc3j6gr-E3faE2TK50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.mft
Manifest number:          0BCA
Signing time:             Thu 16 Apr 2026 18:51:00 +0000
Manifest this update:     Thu 16 Apr 2026 18:50:59 +0000
Manifest next update:     Thu 23 Apr 2026 18:50:59 +0000
Files and hashes:         1: LoI9WUls-sc3j6gr-E3faE2TK50.crl (hash: I3HRRlnbC5+XkJWkmWw1iWf/Djrea37A/V4M3eoDUKI=)
                          2: 33A8447E3D0111EA9B37B256C4F9AE02.roa (hash: HIapHWJw7XTBDWjkQqGZQJy/60qXFVTMYV+6jQAJCNc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.crl
                          rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoI9WUls-sc3j6gr-E3faE2TK50.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:50:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3027 (0xbd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1A60, serialNumber=2E823D59496CFAC7378FA82BF84DDF684D932B9D
        Validity
            Not Before: Apr 16 18:50:59 2026 GMT
            Not After : Apr 23 18:50:59 2026 GMT
        Subject: CN=69e12f94-7871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bb:78:87:84:b1:4c:d5:8e:0e:fc:49:5c:45:
                    3b:cc:a0:14:f1:6c:bc:44:bc:11:4d:4e:0f:97:b7:
                    eb:96:3d:a0:d4:a5:e6:77:f4:f7:21:c3:de:c0:ad:
                    07:02:b6:77:a2:4d:f8:ba:5f:6f:a6:ea:98:fe:41:
                    8e:64:ad:af:ee:81:b8:f3:bb:d5:3e:04:0f:50:5c:
                    ba:ff:90:47:ed:b7:14:98:1c:50:69:56:5d:49:61:
                    01:1f:ab:28:eb:9e:27:16:c2:a2:96:3e:14:3b:02:
                    a6:13:c1:df:55:74:c0:7c:3b:a5:b8:30:ef:65:a0:
                    3b:64:49:13:05:1d:eb:b2:cb:78:05:83:d0:cf:41:
                    11:c5:2a:bd:4a:ad:b1:51:6b:3a:3c:0b:a6:a2:30:
                    9b:1f:da:f0:90:88:ff:43:e3:45:5a:9a:15:98:75:
                    d4:2f:93:e9:24:13:19:69:05:00:91:0a:b6:fc:de:
                    48:65:0a:4d:97:e0:50:70:1c:4d:c3:f7:bf:cc:1e:
                    a6:b9:7c:6f:94:2b:ac:b0:56:13:fa:45:f6:e0:6c:
                    ad:82:e8:41:a9:3f:d9:ff:30:25:b3:f4:28:40:5d:
                    62:84:d1:6f:23:a1:01:ac:75:bc:8f:f6:70:9d:c1:
                    19:92:78:4f:d7:1c:22:d1:76:36:40:05:83:22:5d:
                    25:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:ED:7F:64:41:07:98:A0:95:D4:9F:32:5B:B8:39:60:C0:F7:09:B7
            X509v3 Authority Key Identifier:
                keyid:2E:82:3D:59:49:6C:FA:C7:37:8F:A8:2B:F8:4D:DF:68:4D:93:2B:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoI9WUls-sc3j6gr-E3faE2TK50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:e8:38:f1:70:11:55:07:68:81:e0:2d:ae:d7:b7:b3:a1:2d:
         0c:f7:6f:59:b5:48:1a:4c:3b:95:93:92:0b:4d:1e:0b:5f:74:
         70:09:77:b8:48:9a:d8:6a:28:d2:d6:72:42:78:a6:0d:99:9a:
         66:02:a3:3c:8f:6c:02:0b:da:13:eb:e2:32:4f:92:11:28:4e:
         79:7e:be:da:8c:6b:44:bc:83:5c:e7:2a:62:63:8e:7f:55:07:
         c4:14:e3:3d:ef:5a:20:b0:e6:a9:c6:d1:73:cd:61:77:62:37:
         09:09:b2:9a:7f:b4:06:b0:98:56:59:0d:43:c1:a6:28:57:ab:
         e9:79:7b:fe:79:27:1b:72:09:ba:f9:9d:71:85:fe:f9:ff:f8:
         b7:8b:9e:b5:b2:3c:d0:7f:b1:7c:db:3b:e7:35:b5:4d:97:9e:
         29:3a:44:3c:0f:38:15:d2:14:0d:1c:7c:36:f6:d7:fe:76:db:
         7d:c6:91:c7:d4:cb:84:26:c9:d7:1b:50:0d:49:38:ad:3c:72:
         eb:54:6c:38:8a:c9:8d:c5:ed:b1:aa:69:e1:cb:f9:cd:e1:92:
         c0:db:d3:38:ff:45:1a:27:2a:23:c4:2d:90:b7:11:5d:f0:1d:
         26:f5:e6:24:c9:9d:ec:8d:40:14:f5:90:1f:89:59:43:a6:bb:
         3a:f8:51:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:09:26 2026 by rpki-client