Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
File:                     ljP2L_shhnbryT8cN2lknAxdhN8.mft (raw, json)
Hash identifier:          NoFm/d2aI823Oj791nFlJdMSWzV70S89gRc0SMa/0Mo=
Subject key identifier:   DB:43:02:28:62:E5:B6:54:5F:E6:B5:DF:C7:E4:9E:B0:84:45:B2:A2
Authority key identifier: 96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF
Certificate issuer:       /CN=A91F20F8/serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF
Certificate serial:       0205
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
Manifest number:          0204
Signing time:             Wed 25 Mar 2026 02:26:38 +0000
Manifest this update:     Wed 25 Mar 2026 02:26:37 +0000
Manifest next update:     Wed 01 Apr 2026 02:26:37 +0000
Files and hashes:         1: ljP2L_shhnbryT8cN2lknAxdhN8.crl (hash: tChRG9puRuvhTAyvftZAMj9whA3y137JgJ1GvTbpWu0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl
                          rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:26:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 517 (0x205)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F20F8, serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF
        Validity
            Not Before: Mar 25 02:26:37 2026 GMT
            Not After : Apr  1 02:26:37 2026 GMT
        Subject: CN=69c347de-2b1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cc:5e:b9:df:62:73:09:12:30:32:57:46:c6:
                    33:10:aa:95:28:04:e4:c8:d7:44:d5:5b:51:c0:3d:
                    9a:6e:a5:af:55:f7:20:c6:c7:66:d9:1b:43:84:da:
                    b2:0d:ee:67:c4:a4:09:ca:ef:77:eb:7f:47:a0:9d:
                    5b:d8:25:f8:c9:9e:00:77:58:2f:09:22:68:a7:da:
                    21:33:0f:8f:2d:a0:89:27:41:2c:2d:f2:63:51:c9:
                    2f:86:f9:7e:21:9d:c6:8d:0a:57:16:5e:01:fd:aa:
                    32:43:03:73:76:80:db:2a:12:87:b7:f8:25:13:fd:
                    43:92:99:3f:5b:7e:47:94:ed:10:97:5a:67:0f:f7:
                    73:c7:94:29:94:fc:98:47:92:06:9d:f3:aa:46:67:
                    f0:50:ef:4d:70:f5:6c:98:8d:14:c4:b0:04:e3:bd:
                    48:f8:97:10:31:15:b1:b3:22:1d:a7:cc:70:d6:33:
                    d7:27:86:a7:82:11:cd:6d:e1:3b:69:23:bf:97:b6:
                    64:97:14:78:e7:45:9f:30:bc:cd:77:bb:04:09:5b:
                    33:f1:dd:a4:c2:24:6a:45:b5:aa:a5:b8:3c:9b:d9:
                    58:c9:2b:61:a6:f1:8f:4f:5f:c7:94:b7:c2:ef:72:
                    d7:62:c8:e8:c4:5f:39:2a:ba:ea:d5:b0:86:06:6c:
                    bb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:43:02:28:62:E5:B6:54:5F:E6:B5:DF:C7:E4:9E:B0:84:45:B2:A2
            X509v3 Authority Key Identifier:
                keyid:96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:4d:21:db:0c:1b:16:a4:a4:86:fd:a9:ef:57:61:97:b0:ff:
         2c:88:b0:53:3e:80:8c:6e:89:6d:8a:5d:d3:3b:25:a9:f3:c5:
         d1:c0:3b:71:ef:d7:78:50:79:75:a8:36:29:a7:e5:8a:db:df:
         77:81:8d:98:2e:e9:05:1d:7d:0e:15:1a:ab:4b:46:6b:a5:c4:
         dc:03:91:40:9c:2f:c7:49:99:b7:0c:4e:21:4b:ab:61:f4:85:
         38:23:32:38:a0:5c:d2:7a:62:27:65:67:f0:e9:92:a3:76:d7:
         7e:9b:ec:3c:9f:65:cd:f9:67:79:3b:7a:8c:8b:60:3f:8c:be:
         cb:6f:7a:f2:f3:03:13:1a:2f:a8:fa:98:95:36:97:0d:cd:ac:
         67:03:4a:3d:cd:ec:3c:73:d5:d4:4e:91:5d:67:a4:6f:0c:7e:
         23:99:11:64:cf:39:f6:30:99:4e:d8:d3:a3:99:1c:2c:36:6d:
         ba:42:e4:f8:15:8e:e2:ce:25:b7:83:f0:b6:9b:ba:f1:9a:7f:
         68:c9:7d:38:d3:a7:d7:4a:ac:15:ca:a3:fb:ed:09:6b:9b:ed:
         99:b8:46:7a:5e:5e:ea:00:68:f5:93:80:12:85:d1:c1:6c:ff:
         eb:03:72:04:5d:96:a1:b4:5a:08:d5:1b:5f:c4:bb:33:2b:1c:
         c1:87:e9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:57:07 2026 by rpki-client