Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft
File:                     lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft (raw, json)
Hash identifier:          KA+9guhHRk500/YpSZr5dQA1vldSz5jYuIWn8MESVik=
Subject key identifier:   CD:2C:7C:7E:66:AF:B3:B7:45:07:C9:2D:F3:AF:3C:28:AB:9B:06:02
Authority key identifier: 94:C4:1F:1A:A6:0E:D6:50:E0:FD:7A:7A:8D:23:7A:2D:46:B1:B1:F8
Certificate issuer:       /CN=A9174F24/serialNumber=94C41F1AA60ED650E0FD7A7A8D237A2D46B1B1F8
Certificate serial:       01DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft
Manifest number:          01D5
Signing time:             Wed 13 May 2026 04:35:49 +0000
Manifest this update:     Wed 13 May 2026 04:35:48 +0000
Manifest next update:     Wed 20 May 2026 04:35:48 +0000
Files and hashes:         1: lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl (hash: rVWwtP75AIbE41lN3ZK06Zxytt0+bXRipZ49zF52Zo4=)
                          2: F7C7803489F311EE9AD0D13CC4F9AE02.roa (hash: LSGqnHSpVE6t1VnR1CP7MXHTDo/gjQidyC59lrbruAM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl
                          rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 04:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 476 (0x1dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174F24, serialNumber=94C41F1AA60ED650E0FD7A7A8D237A2D46B1B1F8
        Validity
            Not Before: May 13 04:35:48 2026 GMT
            Not After : May 20 04:35:48 2026 GMT
        Subject: CN=6a03ffa4-77ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:10:8b:ea:cc:c8:f7:f4:27:c5:6e:ef:d4:a0:
                    71:eb:52:d9:e1:50:dc:b5:68:03:17:2a:5a:f4:8c:
                    cb:4d:8c:d6:3b:f7:82:da:b2:f0:47:9e:23:05:e0:
                    bd:49:2f:be:56:bc:7e:64:fd:58:b5:ba:7d:ee:3f:
                    02:bb:bc:7b:52:e2:75:0b:95:4b:0d:5a:e6:83:a3:
                    9d:46:00:d8:92:9c:d7:ba:0b:73:c9:a7:4a:90:2f:
                    47:fb:d0:b7:3b:9c:c1:ef:b6:54:3c:5a:9d:e0:4e:
                    16:04:e5:30:75:c2:9f:28:ae:4c:5b:df:93:62:94:
                    5b:ef:23:37:6b:9f:c5:fd:ad:4a:23:9f:bf:01:9b:
                    66:9e:4a:79:1d:d4:4f:7b:57:d0:92:2a:8a:29:b2:
                    dd:b4:88:2e:17:52:4b:a2:4a:d0:41:2b:4a:5c:2a:
                    c5:97:25:2f:cf:30:76:02:7d:a1:96:fc:a0:91:bb:
                    32:63:2b:d8:7c:10:32:d0:36:6c:50:81:cc:53:7a:
                    0a:bb:5c:88:2b:ef:05:f0:8a:55:1c:98:56:46:31:
                    28:61:8c:76:ac:00:b8:55:f9:7c:68:12:71:42:9a:
                    11:67:97:53:c8:77:64:52:ea:ce:7d:9f:59:f7:74:
                    eb:87:46:54:7e:64:9c:7e:f0:32:b1:27:c4:dd:26:
                    cd:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:2C:7C:7E:66:AF:B3:B7:45:07:C9:2D:F3:AF:3C:28:AB:9B:06:02
            X509v3 Authority Key Identifier:
                keyid:94:C4:1F:1A:A6:0E:D6:50:E0:FD:7A:7A:8D:23:7A:2D:46:B1:B1:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:32:bc:92:a5:69:4c:75:1e:9b:10:4c:63:45:ad:3a:ed:7a:
         b3:8c:1c:bf:c6:b9:0c:51:49:ce:85:45:75:b3:bb:d8:3d:08:
         f5:37:a7:91:bb:40:04:40:ce:f3:a0:ee:c3:89:ab:e5:4c:02:
         e1:54:b0:48:d3:f8:be:db:32:25:9a:8b:d3:d3:0c:b9:9b:13:
         9c:44:1b:d8:a6:7a:c2:6b:a2:15:93:7f:30:c8:c3:b1:ef:12:
         6a:bd:83:ba:d1:be:65:d5:86:6e:6c:d0:55:b3:08:c7:b6:19:
         8f:de:65:c2:0d:8a:df:87:88:b8:c2:fd:38:1c:4e:f9:59:48:
         46:3f:ed:4f:29:1c:df:20:b5:9b:67:1b:2a:13:cc:5c:65:2c:
         3c:57:46:3a:f3:f5:12:54:00:4c:f7:75:dd:bc:ca:05:bd:1a:
         1e:52:1b:72:05:ad:ea:02:ff:d8:f8:c9:8e:93:54:fe:f2:b5:
         2a:d8:5f:b8:d6:dd:0f:28:9c:2d:88:ee:c7:69:f2:37:01:1d:
         b2:cb:63:b4:b3:c4:e9:88:a2:3b:fd:f3:83:4c:fc:d9:51:e6:
         00:74:62:f8:81:b5:6f:c9:35:e4:f9:8f:7b:87:6e:a6:86:be:
         0f:50:66:b9:22:92:b8:12:97:b8:6a:94:61:4a:7a:31:c2:07:
         34:17:b4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:34:28 2026 by rpki-client