Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft
File:                     l1LdGhX17GHZdpHLXszr7L06YTc.mft (raw, json)
Hash identifier:          vZagc3SvFnzBkJBTv2B9dFQsCY17b+tVD+jATU6aKuE=
Subject key identifier:   24:5F:49:A2:96:B3:23:19:9C:A4:25:C5:F0:C9:93:63:0D:25:A9:91
Authority key identifier: 97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37
Certificate issuer:       /CN=A9126259/serialNumber=9752DD1A15F5EC61D97691CB5ECCEBECBD3A6137
Certificate serial:       0825
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft
Manifest number:          081A
Signing time:             Tue 24 Mar 2026 20:50:08 +0000
Manifest this update:     Tue 24 Mar 2026 20:50:07 +0000
Manifest next update:     Tue 31 Mar 2026 20:50:07 +0000
Files and hashes:         1: l1LdGhX17GHZdpHLXszr7L06YTc.crl (hash: hLR5WBRv/lXtbwW4G1ZXw0DUqPkXk9zlcMDNLJRq/VU=)
                          2: 4E1F212A15C711EB8720DC71C4F9AE02.roa (hash: S6Y7k/jP4yNqHTzAhkYEbFB65FCUF/DYfxiPXr60Dtg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl
                          rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:50:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2085 (0x825)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126259, serialNumber=9752DD1A15F5EC61D97691CB5ECCEBECBD3A6137
        Validity
            Not Before: Mar 24 20:50:07 2026 GMT
            Not After : Mar 31 20:50:07 2026 GMT
        Subject: CN=69c2f900-3914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:04:ad:cf:00:d2:33:3f:84:7e:b1:06:58:49:
                    8b:d5:c6:6e:f8:b9:28:9c:b8:c9:d2:b6:16:dc:15:
                    9a:91:6e:e6:a5:b7:a9:c2:bb:fa:bf:ef:ad:15:ec:
                    0d:a8:f2:47:96:ab:a0:fd:82:dd:88:a3:2e:13:da:
                    71:24:0f:17:ca:68:3c:30:70:34:45:5f:c1:2a:92:
                    b7:2d:96:23:2b:59:c6:ec:35:f5:14:aa:5a:1f:9b:
                    a8:17:2f:4c:0d:3f:1f:2b:43:a9:1f:29:b1:e8:06:
                    2e:bf:28:c8:1c:da:ea:88:90:54:37:99:e2:d4:20:
                    54:6f:5b:26:a4:65:06:a4:0b:fa:46:0b:bd:45:18:
                    4e:8f:20:a6:44:43:5a:dc:37:cc:e0:dc:92:d0:a7:
                    95:3c:cf:b0:38:ba:d7:50:ab:ea:7e:d9:df:83:9c:
                    b0:8b:b7:c9:db:ac:44:00:c1:e4:83:bc:71:22:bc:
                    6a:51:19:ea:f5:1d:f8:12:32:3f:ff:ed:e9:72:94:
                    1b:b9:c8:14:38:14:5d:33:3a:39:ef:c4:ca:82:26:
                    c5:5a:fe:f4:7a:34:76:90:2c:b9:50:97:44:7a:3f:
                    36:f5:b7:68:ce:3a:c0:6c:0f:76:59:0d:55:c9:5d:
                    3a:6f:85:21:6c:35:e8:cf:55:8f:87:4a:db:d2:ef:
                    60:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:5F:49:A2:96:B3:23:19:9C:A4:25:C5:F0:C9:93:63:0D:25:A9:91
            X509v3 Authority Key Identifier:
                keyid:97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:41:47:a2:25:0e:63:7f:26:87:02:d0:67:f1:5b:e6:2a:01:
         03:66:0d:17:69:e8:14:73:c0:1e:03:d0:30:8c:99:ac:ea:76:
         37:3f:68:81:f1:17:55:d2:85:95:59:b4:74:6c:e4:89:d9:a0:
         07:fb:16:ca:41:78:ff:e9:0e:5f:e3:b2:dd:19:5e:05:4b:08:
         4c:2f:29:1f:0d:0d:e9:98:9d:fc:1d:15:c4:f4:f7:3d:6b:0d:
         40:17:e2:a7:69:a3:43:54:0a:2b:5f:77:fc:f4:5c:40:ac:f0:
         cc:71:e2:59:22:0a:72:8d:35:74:c8:53:5f:09:c8:4a:1c:20:
         9f:24:ec:73:d8:e5:4d:3f:e4:a0:82:fa:e6:30:93:d3:4d:6c:
         91:de:50:3e:82:0f:47:87:05:48:57:fd:91:6f:0f:c5:03:1a:
         db:58:f8:29:7d:f5:6a:e5:a2:b7:cc:81:e5:6c:4a:ce:12:00:
         f2:d6:dc:d3:f3:bd:98:60:6b:aa:3d:db:5f:09:c2:ea:43:f8:
         95:06:5c:cd:9f:6e:29:03:87:d9:8b:fc:2a:c0:d1:05:a7:94:
         2c:42:35:0c:e3:7a:31:37:d8:4b:80:c2:97:04:f0:39:31:47:
         2e:85:21:96:1e:75:ce:4b:a3:b4:ed:bd:fe:4f:60:df:09:b8:
         f3:2b:32:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:32:31 2026 by rpki-client