Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft
File:                     lBEWOnNX79ihLWm2yUdlT0Xebio.mft (raw, json)
Hash identifier:          nFKguC1TnIFpCcjJfn+dMYDRxdEUCJM4JLhJTPEeIj4=
Subject key identifier:   90:E3:40:AC:DD:F5:53:84:BC:15:C4:ED:D3:9E:01:9B:2B:D2:3F:38
Authority key identifier: 94:11:16:3A:73:57:EF:D8:A1:2D:69:B6:C9:47:65:4F:45:DE:6E:2A
Certificate issuer:       /CN=A911695A/serialNumber=9411163A7357EFD8A12D69B6C947654F45DE6E2A
Certificate serial:       4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft
Manifest number:          45
Signing time:             Fri 27 Mar 2026 07:57:38 +0000
Manifest this update:     Fri 27 Mar 2026 07:57:37 +0000
Manifest next update:     Fri 03 Apr 2026 07:57:37 +0000
Files and hashes:         1: lBEWOnNX79ihLWm2yUdlT0Xebio.crl (hash: OS8Yv5j2QrkYKXbQy7HSNj1c+b0GXJ2PPJrjao234DI=)
                          2: 1F740B32EEC611F0B6553517716F56BC.roa (hash: gopwfSKGN1mCCHSx58qmeTC4uj/Dhy9G5y6duhNO4mg=)
                          3: 1EF20696EEC611F0B6553517716F56BC.roa (hash: C2HYiXqh9FrGOeUUq4VM0nBBKKmKPJMXcJIwTDA1cJw=)
                          4: 1E74642AEEC611F0B6553517716F56BC.roa (hash: hIhATxrqSrR5A4qFNRmOtul5smZBw7ayiN7X2oLfAaI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.crl
                          rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 07:57:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911695A, serialNumber=9411163A7357EFD8A12D69B6C947654F45DE6E2A
        Validity
            Not Before: Mar 27 07:57:37 2026 GMT
            Not After : Apr  3 07:57:37 2026 GMT
        Subject: CN=69c63872-bd1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:11:85:fc:9a:38:07:e3:f7:f9:07:d8:5b:65:
                    c0:06:36:b4:25:21:5f:f1:17:a5:76:be:45:0c:d6:
                    24:c1:90:76:7c:dd:24:f6:34:0a:11:61:30:44:69:
                    f6:19:dd:92:54:47:89:6f:32:07:f8:c2:bb:3c:e0:
                    17:e6:97:e3:a1:7f:99:96:22:fc:14:30:41:d6:6f:
                    b8:a7:3a:8d:e6:0c:2b:42:0f:99:92:40:16:bf:87:
                    22:68:15:ad:ff:47:77:fc:b6:e5:91:12:24:60:cd:
                    0c:dd:ff:d6:55:fb:0b:ff:67:de:e4:69:41:36:1f:
                    cb:e7:1f:93:83:4e:a8:26:21:d5:41:62:4f:7f:08:
                    f9:04:ae:da:a9:59:55:d7:3e:be:95:64:90:c4:5b:
                    4a:dd:97:06:a2:23:15:fc:ba:6f:aa:c5:75:fc:33:
                    33:1a:3a:3e:ae:9c:55:35:05:63:a1:cd:49:6d:ac:
                    e6:e1:b4:37:ab:b3:7f:bc:c3:57:b1:12:99:91:63:
                    3c:cd:43:31:0b:e5:f1:04:91:e3:11:69:cf:50:bc:
                    14:37:fd:49:47:8c:12:a8:f0:4c:b7:6d:2f:59:bd:
                    76:68:b5:dc:f5:f9:7e:5d:13:92:09:ad:96:ca:62:
                    64:c3:f5:28:7c:0a:e2:64:aa:5c:64:04:ea:87:7c:
                    d3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E3:40:AC:DD:F5:53:84:BC:15:C4:ED:D3:9E:01:9B:2B:D2:3F:38
            X509v3 Authority Key Identifier:
                keyid:94:11:16:3A:73:57:EF:D8:A1:2D:69:B6:C9:47:65:4F:45:DE:6E:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:23:21:6d:ab:c0:07:99:15:52:a2:28:c2:a6:2d:7e:fd:78:
         1a:7c:c2:77:33:5c:6e:e8:63:e5:33:27:06:f5:48:b3:27:24:
         b0:43:cc:51:e1:b5:5e:ff:94:69:8a:0c:3c:83:31:5b:a4:2f:
         8c:4e:75:31:72:54:e7:0e:16:56:8e:80:42:03:a3:d3:52:c6:
         6c:bf:88:a8:dd:10:b3:7d:97:68:3b:6f:31:98:8e:da:59:98:
         c0:1a:88:ff:c4:62:9f:ce:82:21:1a:0a:34:e3:34:61:d5:12:
         ba:8f:e0:68:0e:d5:2f:6f:d1:16:8f:a8:e2:84:35:75:3b:e3:
         45:df:3a:eb:c1:db:ac:ab:fb:d0:4a:f7:19:fc:e2:69:c5:f3:
         9a:8d:f3:4c:f0:9d:f2:5d:c8:9b:de:7b:30:7f:b0:8c:7e:16:
         11:37:e1:1f:53:e1:8f:91:29:7d:74:29:d3:c7:83:2a:00:55:
         f5:ee:76:30:2a:f6:2d:cd:66:8f:b5:92:33:de:77:6e:ae:08:
         a8:28:86:ac:a9:29:58:b2:9d:97:5c:46:cb:73:3d:89:30:b0:
         62:79:f8:d3:b1:70:be:90:7d:89:c6:d7:4a:07:58:9f:98:dd:
         4e:55:5d:c7:f0:d5:45:a3:61:16:4f:49:bf:fb:bf:2a:a7:d0:
         ad:72:fe:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:42:24 2026 by rpki-client