Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.mft
File:                     lC4n1lxHr7WXCpr-goCbMXnYtGY.mft (raw, json)
Hash identifier:          vTgN19bRn/JBJnTFCys6Eng/G20lPoaFzEQTTpI9Vgw=
Subject key identifier:   3C:22:D0:E4:D4:0C:89:55:FC:99:8B:21:43:54:5A:88:12:DB:5F:99
Authority key identifier: 94:2E:27:D6:5C:47:AF:B5:97:0A:9A:FE:82:80:9B:31:79:D8:B4:66
Certificate issuer:       /CN=A91DC33B/serialNumber=942E27D65C47AFB5970A9AFE82809B3179D8B466
Certificate serial:       7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC4n1lxHr7WXCpr-goCbMXnYtGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.mft
Manifest number:          1785
Signing time:             Tue 24 Mar 2026 16:32:33 +0000
Manifest this update:     Tue 24 Mar 2026 16:32:32 +0000
Manifest next update:     Tue 31 Mar 2026 16:32:32 +0000
Files and hashes:         1: lC4n1lxHr7WXCpr-goCbMXnYtGY.crl (hash: OBe/dTWUm2FLrfrm1nW5MWzximRc8W2EGTrcUeu2Cik=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.crl
                          rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC4n1lxHr7WXCpr-goCbMXnYtGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:32:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC33B, serialNumber=942E27D65C47AFB5970A9AFE82809B3179D8B466
        Validity
            Not Before: Mar 24 16:32:32 2026 GMT
            Not After : Mar 31 16:32:32 2026 GMT
        Subject: CN=69c2bca1-2e5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ca:29:90:c2:b4:b2:69:de:c5:85:85:85:76:
                    3d:41:2b:54:73:f7:0b:68:13:06:8c:12:62:7d:04:
                    c0:3e:98:94:33:ba:a8:24:7d:e0:f1:dd:a8:e0:97:
                    ab:13:af:62:1d:f2:64:ef:39:31:58:c5:20:16:22:
                    b5:23:24:e8:96:47:b0:ac:80:0b:43:98:35:66:e5:
                    ee:23:94:1b:db:08:8e:c0:ed:7c:85:34:f3:ea:85:
                    ab:00:be:ad:98:c1:27:ae:a3:2b:fb:75:a8:a0:16:
                    4b:99:44:04:3b:7e:50:68:92:39:f6:04:a2:56:ef:
                    0b:42:15:7c:e7:e1:3a:77:75:6f:bc:e2:b7:ab:0d:
                    4d:41:27:90:21:54:be:6d:e6:22:6d:2e:ef:b4:8a:
                    1e:02:76:57:01:a2:3c:42:a2:62:32:67:bd:87:41:
                    0d:0f:98:d4:0e:cf:a4:2f:e6:c3:53:a6:cc:63:32:
                    6f:c3:a1:a5:49:55:94:5e:e9:a9:3e:58:81:50:23:
                    ca:cd:15:a8:de:07:75:61:97:36:6b:cb:e8:6c:fb:
                    fc:cf:db:76:bb:26:e1:84:96:43:a8:0f:08:0a:7a:
                    c7:2d:88:28:6b:8f:8b:ab:6e:7b:52:d3:08:aa:38:
                    42:0a:82:e6:b0:10:cb:81:47:b8:47:f3:cb:24:50:
                    7b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:22:D0:E4:D4:0C:89:55:FC:99:8B:21:43:54:5A:88:12:DB:5F:99
            X509v3 Authority Key Identifier:
                keyid:94:2E:27:D6:5C:47:AF:B5:97:0A:9A:FE:82:80:9B:31:79:D8:B4:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC4n1lxHr7WXCpr-goCbMXnYtGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/lC4n1lxHr7WXCpr-goCbMXnYtGY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:c9:3b:10:af:f7:da:d9:5f:87:ed:f8:b1:a1:a4:1f:d2:ae:
         25:d0:70:60:aa:5a:dc:14:4e:83:08:aa:ce:f6:1d:06:5c:59:
         9c:77:2f:59:cc:fe:26:f6:6a:51:b7:b4:bd:ec:3c:2b:d3:2d:
         06:75:05:90:5d:c4:24:b4:96:95:a1:89:a0:6b:fe:53:69:7b:
         95:f8:04:aa:ad:98:a7:dd:03:32:fb:af:5f:d7:d4:ef:b0:52:
         83:d9:c6:14:33:9d:ab:07:fd:ab:fb:66:ac:ce:a9:ef:42:d2:
         de:61:59:b7:7e:cf:70:c7:92:de:a4:f1:a2:0e:c0:fa:c9:76:
         f4:6e:7f:f5:6a:da:84:5e:38:d6:4e:42:b6:03:f3:6a:e8:62:
         2e:ea:79:03:bb:14:b7:86:0c:93:95:b7:73:c9:77:84:d5:0e:
         4f:22:27:00:9f:e3:7b:83:78:2a:54:0a:0d:1f:f6:d2:a5:b1:
         92:ac:cd:18:d6:66:21:a2:dd:ae:0f:76:2e:d6:dc:34:36:89:
         47:35:16:f3:28:b6:85:8f:f3:ac:e9:ba:12:26:58:7b:d9:03:
         c1:03:6f:c9:49:95:f8:37:5c:22:92:6e:8e:69:99:b9:a0:98:
         41:3b:7f:6b:64:8f:11:c9:71:c5:4d:a0:18:ae:b8:14:40:fe:
         0c:31:ec:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:36:24 2026 by rpki-client