Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
File:                     lXRSk8iKJybhClfVj0LMMWm3ySI.mft (raw, json)
Hash identifier:          eLWS+8uVOxSuSYwLPgiSYuGgGjPEKYOu7nQ/bGzlsPI=
Subject key identifier:   DB:52:A3:3D:D6:C4:51:BB:B4:00:74:D9:F3:18:7C:F4:DE:8F:90:71
Authority key identifier: 95:74:52:93:C8:8A:27:26:E1:0A:57:D5:8F:42:CC:31:69:B7:C9:22
Certificate issuer:       /CN=A91144C9/serialNumber=95745293C88A2726E10A57D58F42CC3169B7C922
Certificate serial:       EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
Manifest number:          E0
Signing time:             Wed 13 May 2026 06:52:23 +0000
Manifest this update:     Wed 13 May 2026 06:52:23 +0000
Manifest next update:     Wed 20 May 2026 06:52:23 +0000
Files and hashes:         1: lXRSk8iKJybhClfVj0LMMWm3ySI.crl (hash: N0Ed8EN3OQDuDMIAweFPQM9HZevproIveIpX8roGOUo=)
                          2: 98DD71780ECC11F0B8E48170C4F9AE02.roa (hash: pFar0hkjv8MeCYoT9TzhPZtPV3p3brER3074/liih+E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.crl
                          rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:52:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238 (0xee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91144C9, serialNumber=95745293C88A2726E10A57D58F42CC3169B7C922
        Validity
            Not Before: May 13 06:52:23 2026 GMT
            Not After : May 20 06:52:23 2026 GMT
        Subject: CN=6a041fa7-d05c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6e:77:ac:b3:e3:04:71:de:7e:db:c5:b5:69:
                    fd:19:a3:e5:c8:81:f1:d6:09:0a:f2:00:39:5e:e4:
                    2e:93:13:69:69:26:18:23:c9:41:72:dd:23:b4:32:
                    14:74:c9:56:db:7a:4e:30:1a:24:b1:dc:fb:30:dd:
                    6d:7b:90:bb:ed:90:cb:20:19:c4:49:8b:06:5c:64:
                    16:d2:e6:cf:c6:1e:f3:e0:69:69:58:98:ba:d7:4b:
                    b3:56:f8:83:2b:c6:13:9a:0f:2d:87:3d:01:41:ea:
                    30:0a:d6:bf:b9:cb:e6:79:ce:25:bf:06:6f:5c:b7:
                    c9:e2:88:ec:11:8f:8a:39:7d:48:31:fc:e8:65:32:
                    18:1c:f8:36:20:00:e4:ca:34:98:a2:f8:9b:dd:e9:
                    13:48:93:87:60:2e:cf:d9:d2:c2:24:20:0f:a2:6c:
                    58:6f:a9:e1:71:56:bc:e4:5e:88:a3:b6:65:3f:e1:
                    50:e1:73:50:a8:cc:42:26:f1:82:d2:3f:20:d2:dd:
                    88:9c:d1:1c:92:95:30:41:04:f4:d4:82:c9:9a:e6:
                    a1:97:6b:3f:78:7a:59:ee:d7:20:5d:a7:e0:5c:ae:
                    5a:13:f2:a7:9b:ad:71:46:ad:f2:3d:ca:9d:6a:cd:
                    92:09:5a:a1:cb:80:25:15:3c:c6:6a:9a:d1:20:04:
                    7d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:52:A3:3D:D6:C4:51:BB:B4:00:74:D9:F3:18:7C:F4:DE:8F:90:71
            X509v3 Authority Key Identifier:
                keyid:95:74:52:93:C8:8A:27:26:E1:0A:57:D5:8F:42:CC:31:69:B7:C9:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:51:21:4b:65:8f:45:ac:4c:d6:2a:d2:32:5c:11:9f:e6:38:
         d4:41:eb:6f:8d:80:9d:b2:92:48:cb:23:d1:75:2d:56:53:c7:
         ce:7d:74:53:1a:c8:82:cd:07:10:83:60:63:a8:0b:d0:49:2d:
         7f:5a:be:ce:83:d2:22:0a:81:0d:79:cc:8b:51:61:7d:9a:d2:
         3c:e0:68:3d:17:45:76:5a:3d:07:48:b2:0a:18:c0:9b:8f:af:
         74:b3:62:49:28:dd:24:43:00:21:44:5b:b9:ee:fc:7a:00:e9:
         31:8f:73:45:be:cc:68:07:83:d4:ba:16:a5:46:de:72:14:8b:
         3a:f8:c9:39:bc:0a:08:43:72:ed:68:f7:e7:96:ae:f6:3f:bf:
         4a:b4:f5:4c:8f:a7:58:56:d3:ae:34:a3:8f:84:d7:3c:e4:9d:
         b0:53:b6:59:06:11:68:a5:ca:b3:12:59:fd:d6:18:cc:b6:a6:
         9c:c9:3b:0f:07:e1:15:a8:01:e3:9f:18:ef:a7:c4:97:5a:a4:
         b9:0b:40:3b:21:fc:dc:5f:0b:bc:29:54:92:4c:65:29:25:4d:
         33:80:79:1a:4e:a9:65:6d:d5:52:fa:70:f1:ab:b2:e3:ff:0b:
         d7:66:ba:85:51:96:57:26:ec:0d:df:c6:7a:0a:6c:d0:65:cc:
         77:ef:f7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:51:33 2026 by rpki-client