Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft
File:                     lLA392-iN6eOqVSONVel4W7WJJo.mft (raw, json)
Hash identifier:          ofo/hYvvraBpd1k9/vnTVpfP7xQENv676amuFBK6sdU=
Subject key identifier:   C4:0C:A6:AF:E6:0E:B6:8C:4C:4F:C1:80:40:E6:BF:88:E8:D9:EE:4F
Authority key identifier: 94:B0:37:F7:6F:A2:37:A7:8E:A9:54:8E:35:57:A5:E1:6E:D6:24:9A
Certificate issuer:       /CN=A9147BF1/serialNumber=94B037F76FA237A78EA9548E3557A5E16ED6249A
Certificate serial:       01E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft
Manifest number:          01DC
Signing time:             Wed 25 Mar 2026 02:52:01 +0000
Manifest this update:     Wed 25 Mar 2026 02:52:01 +0000
Manifest next update:     Wed 01 Apr 2026 02:52:01 +0000
Files and hashes:         1: lLA392-iN6eOqVSONVel4W7WJJo.crl (hash: 8ylnw15ilC+IVzPmOI+iaHn3uSI6aFi0vr0pkLhHJ/g=)
                          2: 26C760F002EA11F0836EF72FC4F9AE02.roa (hash: wrQZ3i6auQE6hasl5pdOo4dzJGXDbVakH3Xi8U4i1wQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.crl
                          rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:52:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 484 (0x1e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147BF1, serialNumber=94B037F76FA237A78EA9548E3557A5E16ED6249A
        Validity
            Not Before: Mar 25 02:52:01 2026 GMT
            Not After : Apr  1 02:52:01 2026 GMT
        Subject: CN=69c34dd1-8f57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c9:bd:68:fe:5e:a1:0b:1b:91:fb:de:7b:3f:
                    af:7b:32:e2:9e:13:d1:81:3b:77:43:61:b9:c8:31:
                    a0:c0:ef:06:52:6c:64:21:e8:6c:60:a5:f7:91:b9:
                    bc:e1:31:df:39:a9:92:8b:b0:8b:1a:93:f3:cf:24:
                    3a:68:80:b1:d4:2b:d0:2c:68:7a:35:80:12:7f:31:
                    87:50:10:60:0d:6d:6a:2a:f0:dd:cd:bf:a2:67:e1:
                    c7:0a:28:a1:19:18:06:05:c3:04:a4:eb:ad:32:8c:
                    af:c9:27:2a:34:ea:ec:c6:b0:ea:4b:c3:da:ef:7a:
                    1c:88:9c:d6:d2:e4:35:fb:20:05:71:f2:93:3f:8e:
                    e1:52:5f:7d:65:cb:0d:ca:aa:c7:9c:cc:ee:d3:4d:
                    d7:b4:df:9e:d5:ab:4b:2f:4c:7c:2c:69:62:40:cc:
                    0c:80:98:1d:7f:0f:8f:f5:0e:40:ab:3c:9d:3b:e6:
                    9a:3d:03:4f:ec:fe:ac:fd:3b:36:00:5d:00:f6:78:
                    15:64:8c:b5:96:ab:bc:fc:2f:b3:e8:a7:5e:ce:c6:
                    d9:81:ed:30:11:85:40:af:73:be:b8:9f:66:70:d9:
                    bb:6e:81:c9:63:17:92:f0:1a:30:21:e1:63:32:af:
                    f8:4a:e0:72:8e:be:bf:13:c0:ab:de:8a:cf:5f:78:
                    33:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:0C:A6:AF:E6:0E:B6:8C:4C:4F:C1:80:40:E6:BF:88:E8:D9:EE:4F
            X509v3 Authority Key Identifier:
                keyid:94:B0:37:F7:6F:A2:37:A7:8E:A9:54:8E:35:57:A5:E1:6E:D6:24:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:fa:14:2d:08:ac:0f:8d:e5:39:ef:08:1d:53:ca:8f:81:fb:
         a3:62:e9:67:09:70:d5:67:71:ed:3c:ee:cd:79:d0:2d:2c:5e:
         0d:a1:ad:9e:51:c6:96:50:ab:86:eb:32:82:c6:6e:7e:7e:c1:
         1e:8a:03:88:4c:f4:60:38:66:41:63:fc:cb:fd:ee:f3:c1:bf:
         5f:b3:39:8b:31:04:65:a3:29:60:1f:99:41:13:08:a0:7c:4e:
         3a:2b:16:a4:74:fd:71:f3:e3:8d:bb:51:47:c3:78:2d:47:20:
         a7:b8:0d:29:18:1f:c1:fc:01:be:a6:b1:b9:f1:cc:55:a8:bd:
         09:82:27:33:6c:6d:e1:13:ae:9d:2d:9d:36:69:69:d9:b7:4a:
         61:c8:9a:b3:41:03:c9:eb:98:3e:6e:c1:a3:bd:d9:6a:69:07:
         7b:34:6f:08:b4:59:59:3d:47:6f:92:38:7a:8d:de:ad:8f:75:
         da:1a:da:4f:d4:f8:ec:94:e8:56:6a:0a:d8:a7:a1:2b:01:5f:
         76:94:17:67:81:a8:24:8d:e9:d4:e5:5c:f3:77:e2:b6:a5:3d:
         3a:00:64:d6:cb:ec:e8:34:aa:25:9b:8b:5c:2f:e9:64:10:30:
         83:2b:41:d5:ea:d7:7a:4c:94:15:bd:f3:31:86:7c:d5:30:70:
         fd:c5:d1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:04:58 2026 by rpki-client