Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft
File:                     ltMlORFGzztdo_4Uaf7BKLS2jEk.mft (raw, json)
Hash identifier:          GrunNKgKq3FFx1bJGlLoryoFZppEeqpEsNzs/FDq3ro=
Subject key identifier:   30:D4:E4:64:46:03:73:94:3C:2E:B0:D0:B4:9A:25:E5:CD:44:B5:CB
Authority key identifier: 96:D3:25:39:11:46:CF:3B:5D:A3:FE:14:69:FE:C1:28:B4:B6:8C:49
Certificate issuer:       /CN=A91E63E7/serialNumber=96D325391146CF3B5DA3FE1469FEC128B4B68C49
Certificate serial:       011C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltMlORFGzztdo_4Uaf7BKLS2jEk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft
Manifest number:          011C
Signing time:             Fri 17 Apr 2026 05:27:59 +0000
Manifest this update:     Fri 17 Apr 2026 05:27:58 +0000
Manifest next update:     Fri 24 Apr 2026 05:27:58 +0000
Files and hashes:         1: ltMlORFGzztdo_4Uaf7BKLS2jEk.crl (hash: EShQw81/WyPE1XgT6RUGVEvYERHn/Zjdq4t5OW0ZByQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.crl
                          rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltMlORFGzztdo_4Uaf7BKLS2jEk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E63E7, serialNumber=96D325391146CF3B5DA3FE1469FEC128B4B68C49
        Validity
            Not Before: Apr 17 05:27:58 2026 GMT
            Not After : Apr 24 05:27:58 2026 GMT
        Subject: CN=69e1c4de-6fde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f3:d0:30:cf:6e:84:69:1b:57:38:d4:ec:97:
                    24:97:3f:9c:8f:33:10:92:57:ec:21:ae:3a:8f:e8:
                    9f:00:c6:22:94:a7:19:ef:be:22:fd:d1:13:66:62:
                    6b:12:08:57:a9:ca:d5:be:00:51:e0:0d:c9:6b:98:
                    39:4a:36:95:ff:43:42:1f:9f:12:19:14:b7:f6:51:
                    a5:f8:d3:52:ce:52:32:c1:c1:ba:ff:d1:70:4b:c9:
                    2b:c9:1e:a3:24:24:9e:e3:c0:77:76:09:cc:87:d7:
                    5e:8d:85:c6:1a:44:e3:42:d6:5d:d2:70:e9:ed:05:
                    56:db:ec:f4:b2:3f:d9:45:a7:97:23:b5:30:67:32:
                    15:87:ae:07:e3:25:d2:4b:fe:51:27:a7:b1:34:8a:
                    b1:20:1f:6b:ad:f0:a4:24:fb:bc:06:14:6a:13:71:
                    ac:f8:dc:af:60:2c:84:ef:18:b0:1b:03:14:d7:1c:
                    30:76:9d:5b:54:d4:e9:e7:ca:e7:1e:46:30:8b:92:
                    d9:fd:26:5b:7d:8e:d2:3f:6f:3b:5c:77:e2:e1:bb:
                    43:26:c2:8d:00:f4:98:83:d8:fd:e9:61:fc:61:40:
                    0a:96:31:09:d6:79:f4:24:93:8d:e4:f5:66:29:c8:
                    57:27:ff:c8:6e:f5:89:70:21:04:cf:d2:35:7b:e3:
                    6f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D4:E4:64:46:03:73:94:3C:2E:B0:D0:B4:9A:25:E5:CD:44:B5:CB
            X509v3 Authority Key Identifier:
                keyid:96:D3:25:39:11:46:CF:3B:5D:A3:FE:14:69:FE:C1:28:B4:B6:8C:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltMlORFGzztdo_4Uaf7BKLS2jEk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:d1:e8:b5:62:aa:bd:ef:a9:2e:7b:59:c7:9d:cd:0c:81:3b:
         99:2d:3b:c8:03:8c:ce:6a:3a:72:3f:cb:aa:4b:07:0b:d3:5c:
         e7:c6:b0:0e:91:29:29:62:84:fa:5c:6c:48:80:92:a8:98:16:
         19:9b:18:ec:d7:90:b9:fc:05:1e:6b:8a:d9:26:6b:c0:84:33:
         a6:b3:25:bf:9e:89:7d:4e:79:c9:f4:fb:16:74:70:af:f2:0d:
         41:cd:89:08:a3:f4:83:97:97:5a:30:db:9d:e2:41:97:91:d1:
         8f:9a:55:8e:01:ae:53:b5:7f:93:14:59:40:9b:3d:a8:d3:73:
         a4:20:eb:5f:80:62:67:a3:1d:e0:b8:c2:30:80:fb:7d:cf:5f:
         34:f6:2c:09:02:ac:de:ce:55:44:14:07:bd:47:6c:67:3f:57:
         d2:a5:23:b5:c6:17:1c:2d:88:4f:53:3d:41:72:d0:00:f5:f5:
         17:dd:62:94:8f:f9:b6:4d:d3:70:e3:72:31:11:88:ac:77:c0:
         7e:d3:a4:88:87:90:32:39:5b:48:5a:ff:91:06:3a:8b:35:6f:
         b4:0d:71:51:dc:49:81:43:c9:41:18:fc:0c:8d:82:69:dc:cf:
         81:59:25:29:fe:fa:cf:cf:d2:cb:ab:a0:6a:4e:98:34:ac:c5:
         dd:cf:9d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:04:01 2026 by rpki-client