Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft
File:                     lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft (raw, json)
Hash identifier:          L122D3wme91p4mkW5HFkhN/j7pPkD9SRhB9phWs3Rjs=
Subject key identifier:   2F:BB:E8:BC:91:BF:35:BB:1B:F9:49:CD:78:38:D1:2B:DE:9C:F9:D6
Authority key identifier: 94:C4:1F:1A:A6:0E:D6:50:E0:FD:7A:7A:8D:23:7A:2D:46:B1:B1:F8
Certificate issuer:       /CN=A9174F24/serialNumber=94C41F1AA60ED650E0FD7A7A8D237A2D46B1B1F8
Certificate serial:       01C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft
Manifest number:          01BA
Signing time:             Wed 25 Mar 2026 03:13:40 +0000
Manifest this update:     Wed 25 Mar 2026 03:13:39 +0000
Manifest next update:     Wed 01 Apr 2026 03:13:39 +0000
Files and hashes:         1: lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl (hash: yPU8AFuMedaiG5Ro5qNdebOtk089vdR5KWP9bHdCMWs=)
                          2: F7C7803489F311EE9AD0D13CC4F9AE02.roa (hash: 27b4HX4cXzg/ZjGjbug9hy735eCkXP+pYMASnZB4RZg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl
                          rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:13:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 448 (0x1c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174F24, serialNumber=94C41F1AA60ED650E0FD7A7A8D237A2D46B1B1F8
        Validity
            Not Before: Mar 25 03:13:39 2026 GMT
            Not After : Apr  1 03:13:39 2026 GMT
        Subject: CN=69c352e4-d782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d5:b1:2f:73:47:18:8c:ee:60:e0:4f:0a:f1:
                    da:e0:73:b1:0e:f9:d9:06:ea:2f:74:67:2d:cf:de:
                    f8:5b:30:eb:08:6b:f1:9f:d1:5f:04:30:a7:02:08:
                    39:9a:e1:35:c2:46:f3:30:16:e1:b1:83:d7:a2:45:
                    ec:cb:a9:6d:65:5a:1a:31:e6:7d:6a:e2:6a:bf:d6:
                    1c:ad:f1:91:03:40:10:9e:ab:88:3b:24:c6:01:de:
                    98:d5:63:5a:da:d6:72:97:02:a6:12:00:94:94:d5:
                    06:6f:80:c0:61:2c:e0:cd:4b:a3:f5:2c:d6:e6:2f:
                    50:bb:76:fe:74:4f:1e:3f:54:7d:a7:d1:0b:79:69:
                    ef:4e:4e:1e:a7:bb:f4:79:0d:40:73:7a:93:08:90:
                    09:fa:57:81:3b:c5:94:83:d8:ad:cd:7a:c5:77:c7:
                    e6:01:4c:f0:4a:9a:86:00:68:70:08:b9:c9:00:a6:
                    68:19:85:d5:30:58:0b:a5:33:84:a1:ad:ad:e5:62:
                    26:d9:e6:48:da:44:c3:22:40:84:2a:4f:fe:a8:6c:
                    cf:d5:e3:78:e9:60:9a:ca:55:64:73:f1:3a:5c:60:
                    f5:7f:4b:cc:bd:c8:47:8c:d6:21:c9:ca:53:35:c9:
                    8f:fb:1e:5c:f9:4c:92:15:93:36:11:a5:07:45:bd:
                    ff:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:BB:E8:BC:91:BF:35:BB:1B:F9:49:CD:78:38:D1:2B:DE:9C:F9:D6
            X509v3 Authority Key Identifier:
                keyid:94:C4:1F:1A:A6:0E:D6:50:E0:FD:7A:7A:8D:23:7A:2D:46:B1:B1:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:05:98:ae:7f:57:4b:f7:79:aa:89:37:c4:1d:db:8a:35:4d:
         ed:0c:d8:be:ed:78:61:4f:01:e5:e4:e9:c2:a6:b9:9f:56:d2:
         10:b4:88:ed:28:68:86:4b:1f:fa:6f:3c:ae:d9:29:2e:1f:98:
         e4:25:a9:23:d4:4a:68:de:b0:62:60:0a:25:32:44:c6:58:4c:
         1b:12:fc:c9:a5:cc:89:9f:e3:d9:fb:2c:e4:9d:1e:75:7b:80:
         a0:2c:a6:c9:f8:4f:7a:3c:7b:2e:9e:10:10:e9:ea:4f:1b:a5:
         11:20:b0:68:fe:82:b6:56:2d:95:63:2e:6c:27:75:00:73:56:
         43:62:9c:43:13:d3:ff:7b:3a:dd:f8:81:8d:96:5d:d4:0b:b9:
         7e:b1:05:6c:4a:23:f3:b8:4c:68:36:54:ee:d7:38:4a:cf:bf:
         ae:03:f5:3d:9c:a0:a3:7c:23:d5:88:88:0c:ed:c5:67:d7:99:
         1c:d7:9d:e5:07:2c:7a:c5:2f:d1:cc:ae:95:ee:56:c4:7c:1f:
         1c:64:02:b8:2d:c7:e2:37:16:ac:75:92:f3:5f:82:46:db:f5:
         a8:e0:5e:4d:5f:14:dc:c2:81:30:c1:85:41:4a:6a:1a:71:ee:
         8a:7a:a3:21:0b:1c:a1:ab:9a:e2:cd:ad:47:2b:8c:f5:31:59:
         44:b5:8a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:33:41 2026 by rpki-client