Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
File:                     liwsnV7f2s79sTh-ML7D_776XNA.mft (raw, json)
Hash identifier:          Yo9JCAkR2IRK01LYhT50ANMfKlEQCjljQuQv6sJO8NU=
Subject key identifier:   71:1C:A5:47:04:B4:16:CD:01:C9:02:C9:0D:DB:D5:EF:CF:18:B8:92
Authority key identifier: 96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0
Certificate issuer:       /CN=A91EDA20/serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0
Certificate serial:       0272
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
Manifest number:          0259
Signing time:             Fri 17 Apr 2026 02:05:33 +0000
Manifest this update:     Fri 17 Apr 2026 02:05:33 +0000
Manifest next update:     Fri 24 Apr 2026 02:05:33 +0000
Files and hashes:         1: liwsnV7f2s79sTh-ML7D_776XNA.crl (hash: GV2928Zq+ZVHo/cVzv4uFKSLhIlUn22/Mt9XX9jT9U0=)
                          2: 81BA905AB5E811EDA7091163C4F9AE02.roa (hash: XCU9CEh5JfWyfgXD9tBMgbhcrtxpGC1QtyGffV0ujNk=)
                          3: 5CA025DE300C11EE903A6211C4F9AE02.roa (hash: nLmRRkvPmyWIllTJe9Zouh2k0tm12CDZu9M1JMdFVeo=)
                          4: 94E348AE300C11EE8D3CE611C4F9AE02.roa (hash: olArFcM1PUtHpMUsUbFSqGqQtjy1wHpvrbRn0NFqaZs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl
                          rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:05:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 626 (0x272)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDA20, serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0
        Validity
            Not Before: Apr 17 02:05:33 2026 GMT
            Not After : Apr 24 02:05:33 2026 GMT
        Subject: CN=69e1956d-919e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:76:1b:dd:0c:43:1e:a0:da:44:05:ba:d5:7b:
                    7d:a0:8d:6d:fd:17:08:87:e9:f9:31:68:fc:6f:79:
                    33:14:f8:ca:76:9b:44:18:7d:d0:44:7f:1a:36:a5:
                    c5:46:74:5f:2a:e8:64:a8:1c:4c:80:80:a6:1f:90:
                    4f:fa:c9:fc:bd:92:2b:d3:df:d3:5f:4b:b3:18:ef:
                    3c:5b:6e:c9:49:1b:54:52:45:4c:a1:d2:54:5b:b3:
                    e6:5a:9e:49:9f:a8:4d:70:82:40:73:51:9f:ff:0f:
                    58:18:87:a3:28:b4:7d:db:56:03:9c:52:21:99:e0:
                    eb:3f:c2:b9:f9:23:97:6b:7f:1c:f1:ac:cb:77:75:
                    7a:53:4f:ea:84:1a:92:27:01:ce:37:e1:f8:c7:93:
                    af:fd:4d:56:69:63:9f:ba:fc:ab:59:c8:d6:9a:70:
                    25:4f:21:22:51:14:f7:0a:7f:61:ed:84:06:b5:f8:
                    15:50:2e:c0:05:47:97:73:56:ee:ac:fd:9d:10:a9:
                    60:58:0f:f9:b3:2e:60:78:23:5e:8e:0f:72:c0:b7:
                    ad:3b:36:cc:ae:05:85:54:95:7b:0c:d3:b5:8e:a8:
                    ed:e2:4d:d2:05:92:91:93:1d:4a:d7:11:fa:92:ec:
                    cb:05:05:95:37:8b:ab:50:5e:98:b7:bd:a7:05:9d:
                    3d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:1C:A5:47:04:B4:16:CD:01:C9:02:C9:0D:DB:D5:EF:CF:18:B8:92
            X509v3 Authority Key Identifier:
                keyid:96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:d4:ea:ea:d6:bd:70:b0:ca:c1:89:4e:e7:c2:7a:16:dd:ac:
         c9:47:a3:b9:95:46:da:d1:8e:ec:97:7f:5b:b6:d5:af:95:f5:
         01:f9:d0:6c:d0:92:ed:04:b6:86:01:9a:7d:c6:ff:aa:3d:d9:
         db:57:39:a4:7d:73:16:4e:d3:80:4b:20:9a:c5:2b:b8:fa:88:
         9e:8a:1d:d4:f5:e4:89:7a:67:3d:c2:f2:d7:cd:92:51:ae:a6:
         68:13:55:35:f1:8d:12:2f:0b:cc:51:e7:4c:77:07:8a:94:4b:
         30:eb:51:c6:de:04:36:31:b0:b8:07:45:0f:51:b5:90:b0:c4:
         78:e5:72:15:82:62:26:2e:a0:a8:9c:9b:6e:54:dd:66:fe:20:
         d3:f1:94:fb:55:79:ef:68:29:d7:fb:ae:b8:a4:d7:9c:9e:82:
         89:fa:8b:4d:d1:ab:df:36:99:bf:df:ad:1e:6a:3f:f4:9d:94:
         dc:09:d0:05:36:f6:7f:19:f0:56:92:a5:9c:e9:28:a2:46:7c:
         d2:f3:c6:46:13:f8:e3:0e:19:12:3a:7a:0d:9d:20:80:1e:d9:
         14:22:42:c7:1e:db:55:cb:a3:f7:63:f9:92:87:20:41:3e:ef:
         f1:9c:0d:19:cf:e1:87:28:0a:27:3a:a8:02:78:22:3f:24:7f:
         46:72:dd:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:37:21 2026 by rpki-client