Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft
File:                     LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft (raw, json)
Hash identifier:          Wd6MC1BWOe5hcHSPbvEIXTYy76Y8Uy+bKtKmB+/xeG4=
Subject key identifier:   85:F1:D3:67:0C:A1:2C:19:90:21:48:F9:8B:65:E9:0B:A4:F8:DE:05
Authority key identifier: 2C:E1:10:08:D2:E0:3F:EB:3E:63:7A:D4:F7:E7:27:2E:DC:60:D5:3B
Certificate issuer:       /CN=A9165456/serialNumber=2CE11008D2E03FEB3E637AD4F7E7272EDC60D53B
Certificate serial:       0B33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft
Manifest number:          0B13
Signing time:             Tue 24 Mar 2026 19:07:03 +0000
Manifest this update:     Tue 24 Mar 2026 19:07:03 +0000
Manifest next update:     Tue 31 Mar 2026 19:07:03 +0000
Files and hashes:         1: LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl (hash: fc8ihbRJKc7T62yw7rqxC24puL+msmijE4YsrV9+zK4=)
                          2: 5977CEE60D7A11EB9D346C48C4F9AE02.roa (hash: t8HfITWMiY77C/57T/c++ATVS/SPRcZB8peHOJW/N/M=)
                          3: 9A6A637EF48C11EBBDF92914C4F9AE02.roa (hash: gULvTolTuEQQ8V1CNmUYM1da4itNfnCs1HnngbZhPLc=)
                          4: 5ABD5A320D7A11EB9D346C48C4F9AE02.roa (hash: AbgBtupL6oOugUr9CWAY/Qjm4Xwk2lURBbagBtXRmQE=)
                          5: 5A15EA040D7A11EB9D346C48C4F9AE02.roa (hash: WHnFAG70JawqBzlnEo6WtvfDMead1qbEaY3qu5N7lXM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl
                          rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2867 (0xb33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165456, serialNumber=2CE11008D2E03FEB3E637AD4F7E7272EDC60D53B
        Validity
            Not Before: Mar 24 19:07:03 2026 GMT
            Not After : Mar 31 19:07:03 2026 GMT
        Subject: CN=69c2e0d7-ffda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b2:85:e3:0f:d4:37:1d:66:53:bf:fd:4c:c5:
                    a8:58:c9:ae:e7:c9:d4:22:5a:df:44:64:84:fd:7b:
                    91:11:86:50:9c:11:a9:fa:ea:a1:05:9b:c3:6b:bc:
                    7d:69:c5:8c:ac:a7:05:c9:ea:94:3a:48:ff:ff:3f:
                    4f:4a:21:0c:cd:41:44:0e:f1:f3:64:e9:ca:49:d8:
                    68:a0:47:80:e1:28:5d:aa:77:af:48:07:8e:24:a2:
                    34:c6:e5:59:60:8c:ba:13:91:d1:1c:73:f7:8a:a5:
                    16:91:95:88:ea:80:9f:a7:a9:3f:49:89:c2:11:cb:
                    eb:1a:4f:37:5f:ea:a3:e1:a4:b9:92:0d:52:76:fb:
                    dd:d5:03:c1:43:22:f6:98:64:94:aa:ef:ee:f1:ac:
                    f2:15:78:e6:30:d1:3f:6f:52:1f:2f:3c:e8:9a:38:
                    dc:b2:d1:48:f3:d3:58:d5:c7:22:dd:9d:a1:b8:65:
                    22:af:08:3a:6b:37:bf:7d:c0:c5:f8:6d:d7:6c:9c:
                    96:ce:6a:0b:17:63:16:34:73:ee:fb:ff:4f:18:c3:
                    b2:20:d8:f6:15:ba:39:e5:5e:67:23:96:02:08:2d:
                    39:50:1e:ae:f3:f5:01:e6:b6:ff:ed:66:4d:38:80:
                    5b:a5:ea:fb:80:4e:55:f0:e8:48:69:59:25:4a:c7:
                    61:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F1:D3:67:0C:A1:2C:19:90:21:48:F9:8B:65:E9:0B:A4:F8:DE:05
            X509v3 Authority Key Identifier:
                keyid:2C:E1:10:08:D2:E0:3F:EB:3E:63:7A:D4:F7:E7:27:2E:DC:60:D5:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:34:55:2b:8d:19:2f:5d:b0:a3:3f:8f:85:cd:15:8f:6b:a1:
         56:6e:8c:48:b9:37:99:74:51:11:38:0a:9b:cd:8e:0d:31:cb:
         cb:73:4d:f2:68:db:8a:7b:7c:ff:a2:da:e2:1d:c4:db:cd:bb:
         04:1f:ed:d5:93:93:07:70:c7:fc:84:75:e4:34:c1:f5:0a:01:
         69:84:ba:f7:e9:a3:06:29:44:d6:57:6f:e7:23:80:ae:21:4f:
         54:d4:9a:76:a8:38:19:96:02:d9:67:89:cb:af:07:ae:b1:52:
         14:0b:be:3f:39:a7:98:7f:cb:ad:32:db:5b:05:f3:e3:7d:9a:
         ad:8d:bc:ea:99:21:5a:7e:ed:3a:e6:10:19:b5:03:b3:ed:14:
         86:d8:59:13:a9:84:31:65:e3:af:5a:62:b1:86:f3:89:9f:8f:
         db:7e:ed:f3:e7:3c:09:ce:3b:80:ea:00:08:ab:b9:b4:ae:d2:
         4b:72:11:2b:38:ce:2d:64:09:02:08:58:0c:2a:72:50:1f:6f:
         04:f9:6b:28:6a:7c:34:68:39:5f:84:d3:54:98:eb:cb:f4:c0:
         05:bb:16:4d:2b:d3:f3:3b:bd:64:7a:3d:a7:3a:30:f6:80:7a:
         3f:1c:ba:42:d7:5f:b9:a2:3d:da:ca:bc:63:85:cc:7c:c4:00:
         27:b9:53:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:35:16 2026 by rpki-client