Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft
File:                     rLcCUesVt11CKaohMePZqHwpRcA.mft (raw, json)
Hash identifier:          ZZsRlUf2wr84VmoZgme4ZHjlTl9tvVdihmXITUr1rvE=
Subject key identifier:   CC:73:9C:AF:05:63:8D:71:AB:4A:86:26:50:52:F9:8A:CC:36:C9:1A
Authority key identifier: AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0
Certificate issuer:       /CN=A91EFC94/serialNumber=ACB70251EB15B75D4229AA2131E3D9A87C2945C0
Certificate serial:       011F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft
Manifest number:          0117
Signing time:             Fri 17 Apr 2026 05:35:28 +0000
Manifest this update:     Fri 17 Apr 2026 05:35:28 +0000
Manifest next update:     Fri 24 Apr 2026 05:35:28 +0000
Files and hashes:         1: rLcCUesVt11CKaohMePZqHwpRcA.crl (hash: lRUQ/Gj3WYB8WLALBzHpx+yhjH2Fdq8Yryu0G1JKPAE=)
                          2: 9ABFC32C94F811EF92676015C4F9AE02.roa (hash: 0xJgLLQMgNeeyXMGKZCWdqUjam0KGjviyUJK/ppp7i8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.crl
                          rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 287 (0x11f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFC94, serialNumber=ACB70251EB15B75D4229AA2131E3D9A87C2945C0
        Validity
            Not Before: Apr 17 05:35:28 2026 GMT
            Not After : Apr 24 05:35:28 2026 GMT
        Subject: CN=69e1c6a0-7e39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:41:b7:e3:bc:14:8b:f6:b2:42:3e:c7:f9:53:
                    5e:f7:ed:c7:b4:76:85:d8:44:23:09:66:44:8d:a7:
                    b8:a8:b3:89:b3:ed:aa:20:dc:fe:d1:c3:2e:03:14:
                    f0:7c:6c:d1:7c:cf:72:22:4a:71:1d:88:f7:4c:c3:
                    49:56:7f:48:c4:44:98:b5:66:03:f8:58:cd:48:3e:
                    cd:c4:e0:4d:b5:ff:58:a4:ad:77:32:ec:78:d0:1d:
                    b9:63:0b:f0:b7:60:47:1c:cd:7c:68:f3:21:04:f7:
                    0b:9d:a2:26:1b:57:99:7c:ab:b5:51:e6:9a:58:71:
                    ba:fe:22:be:95:c8:37:9a:6f:c1:08:04:c2:a9:6a:
                    f7:d4:86:e1:a9:8a:08:1f:94:0a:9b:ab:b2:a8:a5:
                    d2:d3:8f:f9:e1:59:d8:b7:b7:95:30:89:02:ca:59:
                    1b:ab:09:15:45:33:49:ac:25:00:3d:82:d0:66:64:
                    f6:3c:89:65:65:ed:d3:eb:9a:e4:66:bb:8b:e8:d5:
                    98:9c:4c:b0:47:16:be:73:68:eb:99:5e:44:49:16:
                    45:3b:80:19:d4:32:07:fc:5f:3c:b2:95:19:3c:3a:
                    45:13:d4:7f:f3:53:84:bd:f5:37:20:0e:e0:6b:ef:
                    e7:56:b4:99:6b:59:26:49:3f:55:c7:24:21:27:d5:
                    f3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:73:9C:AF:05:63:8D:71:AB:4A:86:26:50:52:F9:8A:CC:36:C9:1A
            X509v3 Authority Key Identifier:
                keyid:AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:a6:69:3e:a8:92:c6:4c:5b:74:55:2c:89:4a:7c:37:27:d4:
         0e:a1:2d:8a:77:37:77:a6:ba:7e:61:0a:6a:cb:35:5d:c6:8e:
         63:e4:31:be:20:76:9e:30:23:e4:e9:62:27:2a:d9:cb:a5:59:
         6b:28:b7:51:af:a7:86:d1:97:c4:1a:5d:a8:e7:ef:0d:c7:a2:
         6d:b1:f4:5a:54:31:4a:50:c6:21:34:3b:d0:ac:25:fc:7f:1d:
         7d:c9:4e:a4:f3:43:05:29:45:bf:56:b7:7e:fa:5a:cb:2e:81:
         e5:dc:f5:5b:c0:3e:2e:2b:e8:4d:ae:45:53:48:7e:5c:85:8b:
         1e:2a:bc:11:f6:03:27:4a:45:b4:d8:f5:ba:c5:f2:47:6c:74:
         55:8d:85:d8:cf:e2:79:68:29:fb:9d:de:3a:a0:2c:74:91:f0:
         87:cd:a2:b0:66:cd:e6:71:da:d1:eb:58:35:0b:40:7a:6d:50:
         a6:4e:fc:63:31:e9:73:69:e4:e5:75:fd:7f:b3:70:c4:d2:ae:
         21:83:90:58:59:bf:86:86:5b:ab:2f:2b:c6:1c:f3:3b:76:32:
         7f:95:e9:c4:f9:15:b1:42:58:93:3d:3b:e7:71:e5:c6:8f:05:
         79:28:a8:24:84:ac:ba:a7:40:de:fb:2c:f4:ba:47:c3:8b:71:
         4c:cb:af:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:17:19 2026 by rpki-client