Manifest

$ rpki-client -vvf rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
File:                     lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft (raw, json)
Hash identifier:          akgU05cUgT0qDPYHwWqJ6KInnaOPUxdpBgpq3ZQ5KCE=
Subject key identifier:   71:04:A3:89:CB:E1:E2:3A:C4:7A:03:D1:7C:3F:16:D9:E8:7C:26:3D
Authority key identifier: 96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
Certificate issuer:       /CN=A90DC5BE/serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Certificate serial:       49C1
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
Subject info access:      rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
Manifest number:          49B0
Signing time:             Fri 17 Apr 2026 02:50:27 +0000
Manifest this update:     Fri 17 Apr 2026 02:50:27 +0000
Manifest next update:     Fri 24 Apr 2026 02:50:27 +0000
Files and hashes:         1: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl (hash: HcLgWtW3iPE2D2cxNMj4q6k8jfS6r73ChNVwvBHjlCc=)
                          2: m8SNrBAOdU7o4cpqupQk4z013mo.cer (hash: DAx7UlAvMbUwqFlgbX2D8PwGFIpgUqf+UohgpZy64Zs=)
                          3: Ak2PFao5dyF1iDou3BZQFOGSiho.cer (hash: NRcDr6REbVzbTiHoNzZyK4YoKwtLqg9UeS+C5SRci4o=)
                          4: 4kPzvoJVabsWrLN0vJjavmkLF8E.cer (hash: fxyUaruAjaaco/fzq2Q5nRs7XM9NtVdLWIcLFflk+gY=)
                          5: 2wVNT_SDuJTYCF4P43hs4um1MGI.cer (hash: 9g0d999WloLZl2Y8eVT/3PQyV06kf0W47UHGLmFv+Vo=)
                          6: V2i_S72Luw3lwVz_jwqRSKCyLtU.cer (hash: fV23EOKOQ2uckiTmtDtK1711Y2atvjgTwc7thiZrIec=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18881 (0x49c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
        Validity
            Not Before: Apr 17 02:50:27 2026 GMT
            Not After : Apr 24 02:50:27 2026 GMT
        Subject: CN=69e19ff3-18be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a9:ff:ca:ce:61:20:0c:d4:fa:35:55:b3:3d:
                    3a:04:b1:2a:07:d1:b6:7f:96:22:b5:0a:32:0d:d0:
                    a4:0c:a5:ab:f3:b0:46:52:3c:3b:6d:88:d2:7b:b3:
                    24:63:e9:5a:e6:5e:53:44:d4:2d:03:77:e2:84:f3:
                    97:77:89:90:36:e2:05:02:8a:d8:c0:35:46:26:0c:
                    a2:71:d4:74:84:a5:d2:b0:25:e1:38:b8:cf:c9:6d:
                    8a:74:30:b9:6f:d7:12:58:07:f3:d9:7c:64:3c:42:
                    7e:b4:cc:a5:0b:8b:71:10:29:09:7a:30:92:4d:68:
                    a8:35:b2:80:40:74:07:9d:0a:94:6d:9c:89:f9:39:
                    f7:4f:3e:49:eb:3a:aa:23:33:9b:20:0f:60:f1:8c:
                    91:83:de:8a:27:2f:9c:ff:30:3a:bb:89:02:60:a9:
                    09:58:9c:8f:53:13:70:77:f2:9a:8c:ad:90:71:4b:
                    27:ec:45:d6:b0:be:ae:14:2b:28:03:03:45:96:82:
                    25:91:29:0f:39:2b:e0:e1:53:66:a8:b9:e8:e0:61:
                    42:e2:0b:b2:79:e3:07:f3:85:57:21:2d:29:02:4a:
                    8d:5e:93:f4:79:1c:ff:f0:00:ea:ef:22:97:3e:da:
                    8c:4d:4f:bd:76:d9:92:5e:00:eb:ae:04:29:58:34:
                    ec:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:04:A3:89:CB:E1:E2:3A:C4:7A:03:D1:7C:3F:16:D9:E8:7C:26:3D
            X509v3 Authority Key Identifier:
                keyid:96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:23:c4:9e:d9:53:2e:44:30:81:94:8e:ea:1b:86:b3:9f:40:
         aa:ee:40:5f:5a:69:d3:30:33:42:ed:d7:88:ed:98:49:9a:2f:
         ff:71:08:f7:13:51:c6:7f:c0:25:6a:6e:41:55:fd:25:1b:e1:
         ab:06:18:e9:b3:55:a8:d7:0d:2b:41:12:8f:96:a2:9e:e2:ef:
         a4:68:f7:37:46:7a:b0:2c:35:53:a3:94:98:0f:e1:ec:52:2a:
         a7:c4:df:06:82:8f:4b:0a:60:6a:f2:8e:b4:34:3d:9a:4f:6f:
         9e:a7:d9:08:44:d9:e7:e8:bd:96:33:92:92:a9:ce:23:f2:0c:
         95:fd:eb:a5:9d:86:87:71:27:0c:c2:7c:99:26:3d:18:d5:69:
         80:a8:4e:58:57:d6:7c:3e:73:83:02:7c:8f:23:f9:fb:63:12:
         d9:1e:6d:ce:af:da:cf:5d:88:93:06:02:11:12:98:45:54:88:
         65:00:2d:b9:0b:b5:47:91:6e:a3:56:9d:ad:1c:8f:2d:bf:c6:
         25:68:82:64:28:3e:ff:ba:e4:8e:4e:ed:b5:b9:f9:ff:43:e4:
         ee:18:1e:36:a3:24:b8:81:30:e3:55:16:77:2f:fa:d1:aa:d0:
         37:4e:13:63:a5:c1:b4:13:d4:23:91:bd:47:d3:90:69:fc:04:
         f2:27:d3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:27:32 2026 by rpki-client