Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft
File:                     LQx0fe_201Ecz11T86dlcA8cgqA.mft (raw, json)
Hash identifier:          GJSfNz2TPTbequwr18a+5DNvmxOTiaUJrIWy0gjb6m8=
Subject key identifier:   80:5A:B9:EF:1D:03:D7:F0:EF:0E:32:4B:9B:C4:66:82:4B:99:04:8C
Authority key identifier: 2D:0C:74:7D:EF:F6:D3:51:1C:CF:5D:53:F3:A7:65:70:0F:1C:82:A0
Certificate issuer:       /CN=A9170975/serialNumber=2D0C747DEFF6D3511CCF5D53F3A765700F1C82A0
Certificate serial:       BC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LQx0fe_201Ecz11T86dlcA8cgqA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft
Manifest number:          B8
Signing time:             Mon 11 May 2026 07:12:52 +0000
Manifest this update:     Mon 11 May 2026 07:12:52 +0000
Manifest next update:     Mon 18 May 2026 07:12:52 +0000
Files and hashes:         1: LQx0fe_201Ecz11T86dlcA8cgqA.crl (hash: NmQxVA/dqD/cc8BEDrFwDNh+Iz9aepX6ViJour8lHeU=)
                          2: B0B8FBDA3A2A11F09E37DB48C4F9AE02.roa (hash: W6jpg6xPZ5rYD5YfNt1tX8u8keRGsJ8qbAeMSNB05Io=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.crl
                          rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LQx0fe_201Ecz11T86dlcA8cgqA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:12:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170975, serialNumber=2D0C747DEFF6D3511CCF5D53F3A765700F1C82A0
        Validity
            Not Before: May 11 07:12:52 2026 GMT
            Not After : May 18 07:12:52 2026 GMT
        Subject: CN=6a018174-33a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:94:ef:a4:0b:2f:33:ad:f8:16:8d:bd:6f:42:
                    2c:f2:25:75:81:a9:cb:f0:6a:a8:51:a0:5b:9a:15:
                    11:c3:94:d2:48:7b:1b:7e:1c:3f:c1:ed:2d:01:64:
                    a9:2f:0f:11:e8:a8:ae:46:6e:e0:66:6a:c5:a5:af:
                    97:2a:d5:b0:83:db:e0:25:ec:71:9a:1d:45:0b:2d:
                    fc:a7:a4:52:2c:9d:4b:0a:63:61:76:30:cf:cd:74:
                    44:9a:3b:b1:07:c2:3a:d7:ba:aa:ec:12:62:18:f3:
                    b3:c6:b7:7b:2a:7f:3e:21:b1:46:7b:08:01:a0:6d:
                    ea:5e:15:ac:ae:6a:f2:0f:00:05:fc:df:23:8b:5c:
                    17:1d:4a:52:21:d9:d3:1d:c8:91:27:8f:7b:9b:5c:
                    b5:75:00:ca:dc:48:c2:60:f2:7c:7f:f3:e3:76:3a:
                    74:01:46:fe:16:5d:bd:f1:ac:80:9d:e1:69:bb:08:
                    ae:ed:4c:e4:75:14:c6:98:af:61:c3:f3:ef:78:08:
                    d8:69:1b:67:fd:ab:dc:88:e9:90:f4:9f:da:a5:2f:
                    34:79:98:a7:9f:9c:dc:4a:e0:86:51:1c:3d:07:07:
                    02:26:bd:ab:80:c0:18:e7:5e:b5:c9:74:a4:1b:98:
                    40:e5:a3:96:22:d5:75:de:80:d5:eb:55:09:1f:5b:
                    07:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:5A:B9:EF:1D:03:D7:F0:EF:0E:32:4B:9B:C4:66:82:4B:99:04:8C
            X509v3 Authority Key Identifier:
                keyid:2D:0C:74:7D:EF:F6:D3:51:1C:CF:5D:53:F3:A7:65:70:0F:1C:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LQx0fe_201Ecz11T86dlcA8cgqA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170975/5F9035F63A2611F0BCCF5E1FC4F9AE02/LQx0fe_201Ecz11T86dlcA8cgqA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:d9:c8:ff:58:40:3e:5b:a8:30:2a:91:52:f5:b2:2e:c2:ce:
         81:25:6d:6d:15:79:ca:33:ef:b5:e4:e3:9e:31:d7:1d:c9:d9:
         80:c8:52:06:20:69:1b:cd:2d:68:7f:7c:cd:50:02:3b:d7:1a:
         45:bb:4f:62:ae:e9:4e:c3:f0:c3:d0:a4:5d:af:64:23:01:47:
         22:5d:4c:2b:ff:60:10:de:b3:c8:f8:97:96:5f:f6:30:db:1e:
         ec:a8:13:99:2b:ee:22:81:1b:ee:c5:ff:04:e3:ec:1b:df:88:
         ff:c5:2b:95:24:eb:78:29:ef:30:a2:2b:0c:e0:c9:6b:0d:10:
         02:33:43:f0:1f:d8:d4:c6:c2:23:8d:0c:06:f0:3a:55:d7:73:
         5a:0f:e2:b1:8f:71:0a:14:bb:1e:09:22:04:7f:70:4e:3b:9b:
         2d:b5:94:3c:4b:4f:40:f9:d9:94:7e:3d:90:3f:79:05:40:03:
         83:e5:74:a3:2d:81:41:82:61:b4:38:01:5a:2a:86:31:33:2a:
         be:d5:51:f0:8c:3b:ff:5b:10:5d:f2:77:19:50:7a:17:27:18:
         3f:28:fb:e8:23:87:27:2a:c4:4a:61:09:92:9a:a0:bf:ac:ea:
         b6:5a:2f:28:00:b8:25:76:60:04:c4:3c:f7:9e:ab:ec:aa:e9:
         95:b4:f2:2d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzA5NzUxMTAvBgNVBAUTKDJEMEM3NDdERUZGNkQzNTExQ0NGNUQ1M0YzQTc2NTcw
MEYxQzgyQTAwHhcNMjYwNTExMDcxMjUyWhcNMjYwNTE4MDcxMjUyWjAYMRYwFAYD
VQQDEw02YTAxODE3NC0zM2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwpTvpAsvM634Fo29b0Is8iV1ganL8GqoUaBbmhURw5TSSHsbfhw/we0tAWSp
Lw8R6KiuRm7gZmrFpa+XKtWwg9vgJexxmh1FCy38p6RSLJ1LCmNhdjDPzXREmjux
B8I617qq7BJiGPOzxrd7Kn8+IbFGewgBoG3qXhWsrmryDwAF/N8ji1wXHUpSIdnT
HciRJ497m1y1dQDK3EjCYPJ8f/Pjdjp0AUb+Fl298ayAneFpuwiu7UzkdRTGmK9h
w/PveAjYaRtn/avciOmQ9J/apS80eZinn5zcSuCGURw9BwcCJr2rgMAY5161yXSk
G5hA5aOWItV13oDV61UJH1sH6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIBaue8d
A9fw7w4yS5vEZoJLmQSMMB8GA1UdIwQYMBaAFC0MdH3v9tNRHM9dU/OnZXAPHIKg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDk3NS81RjkwMzVGNjNB
MjYxMUYwQkNDRjVFMUZDNEY5QUUwMi9MUXgwZmVfMjAxRWN6MTFUODZkbGNBOGNn
cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0xReDBmZV8yMDFFY3oxMVQ4NmRsY0E4Y2dxQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MDk3NS81RjkwMzVGNjNBMjYxMUYwQkNDRjVFMUZDNEY5QUUwMi9MUXgwZmVfMjAx
RWN6MTFUODZkbGNBOGNncUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAh9nI/1hAPluoMCqRUvWyLsLOgSVtbRV5yjPvteTjnjHXHcnZgMhSBiBpG80t
aH98zVACO9caRbtPYq7pTsPww9CkXa9kIwFHIl1MK/9gEN6zyPiXll/2MNse7KgT
mSvuIoEb7sX/BOPsG9+I/8UrlSTreCnvMKIrDODJaw0QAjND8B/Y1MbCI40MBvA6
VddzWg/isY9xChS7HgkiBH9wTjubLbWUPEtPQPnZlH49kD95BUADg+V0oy2BQYJh
tDgBWiqGMTMqvtVR8Iw7/1sQXfJ3GVB6FycYPyj76COHJyrESmEJkpqgv6zqtlov
KAC4JXZgBMQ8956r7KrplbTyLQ==
-----END CERTIFICATE-----
Generated at Wed May 13 08:17:37 2026 by rpki-client