Manifest

$ rpki-client -vvf rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
File:                     lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft (raw, json)
Hash identifier:          FAJhPdwqcjwdOuEJygAJNZCT29O+rF3EMhNbY3Mlb2c=
Subject key identifier:   0E:B7:88:58:A3:E8:38:95:05:86:F4:A2:1E:94:68:BD:DD:40:44:6C
Authority key identifier: 96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
Certificate issuer:       /CN=A90DC5BE/serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Certificate serial:       4932
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
Subject info access:      rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
Manifest number:          4923
Signing time:             Mon 02 Mar 2026 02:50:26 +0000
Manifest this update:     Mon 02 Mar 2026 02:50:26 +0000
Manifest next update:     Mon 09 Mar 2026 02:50:26 +0000
Files and hashes:         1: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl (hash: BIf+5+CnJEbljfJfXboQdptYV+rUMjHLTMfndXlfabA=)
                          2: Ak2PFao5dyF1iDou3BZQFOGSiho.cer (hash: NRcDr6REbVzbTiHoNzZyK4YoKwtLqg9UeS+C5SRci4o=)
                          3: V2i_S72Luw3lwVz_jwqRSKCyLtU.cer (hash: fV23EOKOQ2uckiTmtDtK1711Y2atvjgTwc7thiZrIec=)
                          4: 4kPzvoJVabsWrLN0vJjavmkLF8E.cer (hash: fxyUaruAjaaco/fzq2Q5nRs7XM9NtVdLWIcLFflk+gY=)
                          5: m8SNrBAOdU7o4cpqupQk4z013mo.cer (hash: DAx7UlAvMbUwqFlgbX2D8PwGFIpgUqf+UohgpZy64Zs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18738 (0x4932)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
        Validity
            Not Before: Mar  2 02:50:26 2026 GMT
            Not After : Mar  9 02:50:26 2026 GMT
        Subject: CN=69a4faf2-bdf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:62:8d:6d:a2:c6:a2:bf:f0:ed:8c:07:32:03:
                    28:e0:ff:2c:7d:22:72:96:ba:e1:41:b5:11:96:9a:
                    4c:f0:49:96:0a:0c:d8:6f:06:e9:58:73:28:59:8e:
                    d2:bc:1f:88:96:fc:61:4a:d5:ab:f6:71:1d:e2:8f:
                    fd:18:ca:3c:a3:4f:e4:9e:be:dd:89:b9:98:33:46:
                    a1:23:35:38:1a:cf:2a:e0:78:ab:0c:8c:10:b2:e0:
                    b3:e9:77:2b:da:13:f7:07:fc:6e:08:73:b1:c4:cd:
                    e1:ed:e7:a2:e4:b6:52:df:48:74:4d:21:79:c0:f9:
                    2d:5d:6e:f5:34:8a:fe:d5:ad:1b:e7:18:dd:a8:15:
                    5f:67:ce:a4:b2:91:2a:4e:52:91:ca:1f:ff:1c:27:
                    ce:d2:fd:62:85:6c:27:a4:9e:e9:da:54:eb:58:c2:
                    4a:a9:60:66:39:19:65:09:46:1b:6d:e5:a2:e2:19:
                    8b:14:98:73:65:12:30:20:f1:65:4e:7e:b0:6b:3a:
                    a6:91:c4:09:62:24:60:ed:48:f4:e3:16:f7:ec:d1:
                    fe:7a:60:cb:7a:fe:8b:ad:57:70:2d:20:da:e5:d7:
                    68:6b:e7:d5:f6:7c:a4:d3:88:77:d7:78:92:00:84:
                    56:4e:a8:1d:85:75:80:2f:77:07:2c:d1:89:24:c0:
                    51:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B7:88:58:A3:E8:38:95:05:86:F4:A2:1E:94:68:BD:DD:40:44:6C
            X509v3 Authority Key Identifier:
                keyid:96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:78:ef:af:25:bb:50:87:90:d3:69:6c:6d:1c:57:8b:8d:db:
         cd:4f:d8:e8:a7:a9:a1:b2:a4:16:d2:3c:1d:a8:c6:f8:1a:9f:
         79:74:5f:47:37:5a:4c:1e:d7:3f:f0:53:41:28:a2:8b:0b:a0:
         b3:e6:ac:ad:a8:1c:cc:86:54:05:84:0a:a4:89:4f:a8:2c:3c:
         a3:41:79:1b:70:f8:4d:7e:02:43:00:d0:97:aa:46:74:19:2e:
         b8:a1:8f:ca:02:24:87:61:ee:b5:c4:37:f0:65:e5:64:9e:b5:
         fe:06:d8:08:46:92:1c:1c:da:04:27:e5:e3:17:37:a0:49:ed:
         dd:f1:e3:9a:a9:a1:32:96:96:07:e7:60:a9:08:44:02:56:d6:
         2c:f9:ba:ec:61:de:dc:79:d0:54:76:c6:db:d4:cc:3d:55:99:
         b8:35:71:7f:6c:e5:6f:02:17:86:b5:88:d9:ee:90:63:db:be:
         24:35:03:c3:3d:55:d0:42:c4:97:c2:b3:03:32:06:7c:fd:33:
         29:22:b7:3c:d1:60:74:51:19:33:88:c5:e0:be:b3:60:f3:4d:
         5d:2d:bc:40:fd:b3:4f:49:72:f7:b0:08:76:ef:8d:78:51:f1:
         ba:0a:e8:54:e8:d9:a9:98:1f:01:d8:9a:d0:a1:1a:06:a7:2e:
         c0:88:ef:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:49:20 2026 by rpki-client