Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft
File:                     LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft (raw, json)
Hash identifier:          Io1HxGmLeKRAcBvW+fLb8nymoUNab/wAXn6M8bdYPJQ=
Subject key identifier:   1E:75:EA:F1:8C:C2:19:05:F8:A3:05:C7:38:FB:53:FF:F0:B0:CB:74
Authority key identifier: 2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D
Certificate issuer:       /CN=A9175648/serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D
Certificate serial:       0164
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft
Manifest number:          012C
Signing time:             Wed 25 Mar 2026 05:49:19 +0000
Manifest this update:     Wed 25 Mar 2026 05:49:18 +0000
Manifest next update:     Wed 01 Apr 2026 05:49:18 +0000
Files and hashes:         1: LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl (hash: /jnbLBp/7TmSRuKbOimn0afb4SN/Lh2iAfi0hAIVjVg=)
                          2: 4E9801F4122311F1A005593E1F3D8C67.roa (hash: 9NUw/Vlq1cG4rvMjm7Tf+mY/SPVFiZPsiEtV3MAG4ts=)
                          3: F526E31C122011F1ACA5537B1D3D8C67.roa (hash: enStohQFnFb+r0zk+PqrIbAeF36NZLUhIXYRdDD2ymg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl
                          rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:49:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 356 (0x164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175648, serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D
        Validity
            Not Before: Mar 25 05:49:18 2026 GMT
            Not After : Apr  1 05:49:18 2026 GMT
        Subject: CN=69c3775e-c60b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:64:43:fc:0e:49:c5:b7:ae:3c:8e:b1:23:b9:
                    dd:e2:24:1a:27:91:73:3c:b5:0c:da:11:97:2e:2d:
                    20:55:22:4b:90:2d:c2:e1:dc:bf:62:fd:80:27:95:
                    e8:42:13:ea:88:02:87:5e:71:8d:f9:bb:a8:01:8e:
                    7a:15:c4:c6:67:bb:a4:fc:5d:4b:25:a9:0e:30:e1:
                    07:a6:40:08:ae:2c:a3:ea:28:7b:fc:4c:a0:52:c2:
                    45:7e:b1:e5:e2:1b:4f:02:d0:c6:8e:a2:d3:7c:fc:
                    42:4d:83:ac:fc:fd:d7:f9:df:6b:69:02:da:e4:1b:
                    6a:b9:83:9d:0b:a2:24:5c:42:d3:d5:0d:4b:8d:e1:
                    49:ff:b1:53:58:21:35:20:56:16:9a:1d:d7:98:bf:
                    4a:01:21:7c:f6:80:f0:20:c6:33:f0:32:5c:8b:9f:
                    07:6c:87:c1:14:56:02:24:50:a2:1a:11:9b:77:cf:
                    76:94:a9:9d:09:a9:1d:b4:ba:fc:5f:35:b1:b1:38:
                    e5:c5:8a:d2:00:03:ea:b9:f6:87:d9:1f:e7:18:15:
                    df:cf:5d:32:8b:a6:73:32:b9:fa:5e:bb:81:ab:83:
                    49:eb:06:1a:78:1e:b8:36:91:92:c4:c8:13:c7:67:
                    f3:cd:b4:72:fe:78:9c:46:97:dc:e7:c1:1f:1c:9f:
                    4b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:75:EA:F1:8C:C2:19:05:F8:A3:05:C7:38:FB:53:FF:F0:B0:CB:74
            X509v3 Authority Key Identifier:
                keyid:2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:97:61:b1:a0:8e:9f:24:fc:8b:74:78:b9:15:bd:72:f9:e1:
         8c:9b:15:53:9f:f4:d9:6f:10:bd:ce:da:81:fa:09:80:f4:f7:
         a5:fe:1f:66:e9:28:df:c7:7c:ec:f6:31:8d:85:7f:24:f7:52:
         83:f7:e1:02:00:0b:75:59:65:17:3e:f7:78:ff:f3:ee:8c:b8:
         54:06:a6:67:4f:34:28:bb:e9:88:55:42:cf:86:70:ac:f8:e8:
         3b:dc:15:e1:dd:28:f1:c2:6e:2f:4c:71:f0:12:32:1f:c3:b1:
         f2:4a:cb:61:15:9b:c1:69:e0:c5:ee:0c:c6:12:61:fd:f9:02:
         4d:79:5a:25:01:63:3b:9d:91:57:98:3d:7b:6d:04:01:f4:9f:
         56:e2:44:27:99:3d:4f:e0:a5:6b:b6:fa:8c:2c:8f:e6:99:1f:
         4c:cc:26:2d:6f:66:2a:3f:fd:43:8d:08:bc:e1:6a:3a:2c:d8:
         7d:4a:00:bb:9d:45:28:f2:27:96:f8:24:be:4f:85:1e:7b:f7:
         6d:36:9b:cc:7f:01:36:d2:ea:9e:9e:ea:19:0b:cd:8b:e0:23:
         ac:50:b3:64:38:35:fb:81:e9:7c:4e:ac:a6:b0:ad:dc:3c:e7:
         50:75:e6:b5:65:ee:6f:5c:91:56:f7:8f:70:85:a1:36:61:b2:
         ce:ca:5c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:49:20 2026 by rpki-client