Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
File:                     lFOfgqNeshWO18Ni1boVQz5-0uE.mft (raw, json)
Hash identifier:          MWSFAY6Goss9ErqrXHBx6kevK+gLDgW9sXr4KNUN4CY=
Subject key identifier:   76:17:B6:F4:CF:F7:26:7F:4B:5F:85:51:08:DC:49:5C:48:70:9A:92
Authority key identifier: 94:53:9F:82:A3:5E:B2:15:8E:D7:C3:62:D5:BA:15:43:3E:7E:D2:E1
Certificate issuer:       /CN=A9179EAE/serialNumber=94539F82A35EB2158ED7C362D5BA15433E7ED2E1
Certificate serial:       012C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
Manifest number:          0119
Signing time:             Wed 25 Mar 2026 05:11:12 +0000
Manifest this update:     Wed 25 Mar 2026 05:11:12 +0000
Manifest next update:     Wed 01 Apr 2026 05:11:12 +0000
Files and hashes:         1: lFOfgqNeshWO18Ni1boVQz5-0uE.crl (hash: T37rDQyv9pF0VI9SxOTAs3G1JFzP7J4cjICB21SG+2w=)
                          2: 5C8A37FEBB0D11F0B828E842C4F9AE02.roa (hash: 4QxgO/v1kKmqzX3Jt1zEm2uuH1Y0Ot5nAQyWZtBjGQc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.crl
                          rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:11:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300 (0x12c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179EAE, serialNumber=94539F82A35EB2158ED7C362D5BA15433E7ED2E1
        Validity
            Not Before: Mar 25 05:11:12 2026 GMT
            Not After : Apr  1 05:11:12 2026 GMT
        Subject: CN=69c36e70-c660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:72:9e:d9:32:f0:0f:ce:5b:a5:6a:1b:62:a7:
                    8f:b2:ab:9e:c7:f1:c9:e8:cf:d4:68:01:91:95:26:
                    5a:b7:5b:e1:35:24:88:d5:ef:dd:c9:af:8c:ea:8f:
                    e5:3d:be:aa:5b:99:7a:49:4f:8b:ea:57:1d:ee:2a:
                    1e:07:78:fb:dd:5c:18:b3:cd:b6:c4:f0:2b:c3:c0:
                    1a:c4:e0:05:0c:95:16:e0:3d:04:c8:ad:dd:1a:4f:
                    90:b2:e7:00:fa:79:bb:2d:65:33:1f:63:8a:01:b2:
                    44:c7:29:21:3d:15:57:6d:2f:d0:e8:89:30:35:19:
                    ad:8d:02:8d:49:b1:1f:ee:43:1c:96:33:cf:68:ad:
                    08:85:83:fc:04:f7:10:76:1b:da:1b:ab:69:76:d7:
                    ab:ea:23:3c:d9:f7:49:1b:ad:0f:74:fd:71:64:8f:
                    9e:77:b9:2e:b6:04:af:60:bd:0e:ff:7f:a9:2e:a3:
                    de:28:bb:50:1f:78:e4:ec:32:35:32:5c:70:1e:1e:
                    b5:5e:60:90:13:4c:d0:71:7b:d8:70:93:56:89:26:
                    fe:ec:ce:57:fb:2c:8f:40:1d:a5:92:3d:f4:ac:c7:
                    03:be:b1:61:be:e1:db:40:1b:e1:81:34:fd:a3:83:
                    f6:41:24:dd:49:e3:52:2e:19:af:4b:97:84:c0:f0:
                    27:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:17:B6:F4:CF:F7:26:7F:4B:5F:85:51:08:DC:49:5C:48:70:9A:92
            X509v3 Authority Key Identifier:
                keyid:94:53:9F:82:A3:5E:B2:15:8E:D7:C3:62:D5:BA:15:43:3E:7E:D2:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:7c:eb:01:a2:28:8c:d6:31:37:c7:a9:77:18:b1:be:12:8c:
         1a:a5:74:4a:98:2c:5e:a3:85:3a:c6:c5:7e:6c:41:ee:89:e8:
         fe:3b:71:10:e8:ca:28:72:88:31:a2:e4:96:7c:61:8c:c2:a6:
         36:8d:c0:38:21:d9:1a:09:13:48:95:5d:bb:69:77:69:d8:c6:
         e5:73:8f:d0:4e:43:1f:b3:f4:39:1a:06:af:bc:27:c2:1b:8f:
         ba:2b:ad:71:01:bc:9c:c5:1b:3e:44:90:49:b4:24:65:98:a0:
         3b:28:a2:ed:00:13:9d:a7:59:33:86:01:96:9e:fa:58:f5:dc:
         00:11:f1:bd:2b:76:09:46:55:9f:f3:9e:fb:2f:fd:34:4d:59:
         cc:4f:47:2e:5f:4f:0c:ff:00:96:b3:15:42:aa:89:d2:27:58:
         5a:c1:f5:b8:a0:61:0d:da:8f:85:4c:c7:74:62:0c:b6:42:98:
         19:4d:af:53:d2:89:75:3c:43:2d:0e:bd:96:fa:4d:d7:e1:8a:
         97:a6:bb:da:f7:21:38:a7:74:0f:b8:00:21:ff:68:97:70:fe:
         60:bf:d2:ca:40:59:be:61:6a:04:fd:24:8c:8e:7b:14:d6:e7:
         43:3b:cf:a2:95:82:3a:5d:7c:ee:6c:26:0a:3a:fe:96:0d:9f:
         63:f9:10:fa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzlFQUUxMTAvBgNVBAUTKDk0NTM5RjgyQTM1RUIyMTU4RUQ3QzM2MkQ1QkExNTQz
M0U3RUQyRTEwHhcNMjYwMzI1MDUxMTEyWhcNMjYwNDAxMDUxMTEyWjAYMRYwFAYD
VQQDEw02OWMzNmU3MC1jNjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyXKe2TLwD85bpWobYqePsquex/HJ6M/UaAGRlSZat1vhNSSI1e/dya+M6o/l
Pb6qW5l6SU+L6lcd7ioeB3j73VwYs822xPArw8AaxOAFDJUW4D0EyK3dGk+QsucA
+nm7LWUzH2OKAbJExykhPRVXbS/Q6IkwNRmtjQKNSbEf7kMcljPPaK0IhYP8BPcQ
dhvaG6tpdter6iM82fdJG60PdP1xZI+ed7kutgSvYL0O/3+pLqPeKLtQH3jk7DI1
MlxwHh61XmCQE0zQcXvYcJNWiSb+7M5X+yyPQB2lkj30rMcDvrFhvuHbQBvhgTT9
o4P2QSTdSeNSLhmvS5eEwPAnYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHYXtvTP
9yZ/S1+FUQjcSVxIcJqSMB8GA1UdIwQYMBaAFJRTn4KjXrIVjtfDYtW6FUM+ftLh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUVBRS9BNDlDRERCODhE
MEUxMUVGQThGRTkzNzFDNEY5QUUwMi9sRk9mZ3FOZXNoV08xOE5pMWJvVlF6NS0w
dUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2xGT2ZncU5lc2hXTzE4TmkxYm9WUXo1LTB1RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OUVBRS9BNDlDRERCODhEMEUxMUVGQThGRTkzNzFDNEY5QUUwMi9sRk9mZ3FOZXNo
V08xOE5pMWJvVlF6NS0wdUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtnzrAaIojNYxN8epdxixvhKMGqV0SpgsXqOFOsbFfmxB7ono/jtxEOjKKHKI
MaLklnxhjMKmNo3AOCHZGgkTSJVdu2l3adjG5XOP0E5DH7P0ORoGr7wnwhuPuiut
cQG8nMUbPkSQSbQkZZigOyii7QATnadZM4YBlp76WPXcABHxvSt2CUZVn/Oe+y/9
NE1ZzE9HLl9PDP8AlrMVQqqJ0idYWsH1uKBhDdqPhUzHdGIMtkKYGU2vU9KJdTxD
LQ69lvpN1+GKl6a72vchOKd0D7gAIf9ol3D+YL/SykBZvmFqBP0kjI57FNbnQzvP
opWCOl187mwmCjr+lg2fY/kQ+g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:12:08 2026 by rpki-client