Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.mft
File:                     lqeZovSzCLIlIrzkXjGNanAmKSs.mft (raw, json)
Hash identifier:          uhQJjYa1wHZZm87Rb2snQiKDVqUOCMcHhXoNJ2+avWI=
Subject key identifier:   0A:E7:CA:D1:85:BC:2F:A8:C2:21:66:39:B7:5C:4A:88:D7:68:1B:52
Authority key identifier: 96:A7:99:A2:F4:B3:08:B2:25:22:BC:E4:5E:31:8D:6A:70:26:29:2B
Certificate issuer:       /CN=A911BA4B/serialNumber=96A799A2F4B308B22522BCE45E318D6A7026292B
Certificate serial:       1249
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqeZovSzCLIlIrzkXjGNanAmKSs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.mft
Manifest number:          1239
Signing time:             Tue 12 May 2026 17:09:08 +0000
Manifest this update:     Tue 12 May 2026 17:09:07 +0000
Manifest next update:     Tue 19 May 2026 17:09:07 +0000
Files and hashes:         1: lqeZovSzCLIlIrzkXjGNanAmKSs.crl (hash: S/LgXyzskQAQaEMvtizNiYiIJQb0CmjYYU7BUiFA8tk=)
                          2: 318BC266FEA911E8BF138B59C4F9AE02.roa (hash: S+enzldOi/Tk8VhBxK9J1PD1ALiMccvtC2k5b2Y8TNc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.crl
                          rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqeZovSzCLIlIrzkXjGNanAmKSs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4681 (0x1249)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BA4B, serialNumber=96A799A2F4B308B22522BCE45E318D6A7026292B
        Validity
            Not Before: May 12 17:09:07 2026 GMT
            Not After : May 19 17:09:07 2026 GMT
        Subject: CN=6a035eb4-47c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:53:f6:2f:ff:e3:79:4e:b9:da:50:f0:a6:19:
                    4a:e4:11:d3:77:42:ef:72:ab:34:f6:b2:38:8a:ec:
                    90:79:e7:cb:ff:ac:88:75:31:db:30:01:ae:0a:73:
                    3c:8b:d3:c5:2d:57:a8:e2:fa:1f:1a:8b:c5:28:80:
                    6d:9b:94:af:75:c4:13:0a:ca:9f:0c:17:ef:52:b9:
                    fe:7b:02:dd:af:4e:d4:b7:14:c3:53:36:e3:55:3e:
                    4a:62:b6:c0:80:b2:95:75:fd:27:68:f1:03:67:6a:
                    90:04:51:7d:2f:aa:84:0a:0c:fc:04:7e:e7:87:0c:
                    32:97:a1:be:84:bd:3d:52:2b:7d:40:2f:80:b4:fc:
                    7d:37:92:ee:b5:21:ef:99:42:e8:bb:87:69:6c:a7:
                    d8:24:0b:e4:8b:a0:83:6f:2f:5a:bf:59:47:18:00:
                    a2:87:19:59:a9:f3:6a:ff:bd:8f:66:bd:c1:d1:a6:
                    47:79:c8:1d:f7:33:86:dc:32:62:42:89:e0:3e:78:
                    6e:33:47:dc:a7:4f:58:c9:56:bc:53:f2:c9:53:ec:
                    9f:ee:f5:9b:20:96:0f:2b:0a:d2:10:00:c6:1d:b7:
                    8e:3e:b6:43:77:e9:d8:f1:46:39:98:0d:62:40:96:
                    4e:7a:4f:3d:44:d4:f7:ba:3a:07:a7:d0:e1:17:6b:
                    2a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E7:CA:D1:85:BC:2F:A8:C2:21:66:39:B7:5C:4A:88:D7:68:1B:52
            X509v3 Authority Key Identifier:
                keyid:96:A7:99:A2:F4:B3:08:B2:25:22:BC:E4:5E:31:8D:6A:70:26:29:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqeZovSzCLIlIrzkXjGNanAmKSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:d4:31:08:8e:4c:60:e1:98:41:15:56:59:84:96:7f:ad:45:
         a6:41:03:16:40:5f:c2:1a:53:da:7c:65:d6:6a:3c:00:cf:a9:
         1f:d5:31:4d:52:b2:c5:69:9d:e8:57:8e:81:e3:38:c6:f8:f3:
         25:53:38:5e:6e:f7:47:8f:bd:0e:0e:d2:4e:00:48:40:c2:f8:
         84:b2:32:c0:c0:96:58:c1:84:53:7e:23:52:13:9f:22:7c:0d:
         20:29:1d:2e:d7:78:6e:0e:35:66:49:3b:10:1f:3d:0e:f1:d6:
         17:ae:60:fa:d7:80:c9:ca:2b:88:e8:96:ff:e0:c0:3f:7a:15:
         37:73:d4:03:65:39:a0:e4:74:12:17:cd:f0:14:93:ef:87:1c:
         19:2c:bf:1b:43:ae:87:a9:52:32:b9:a3:a0:08:5b:bb:3f:a7:
         ed:66:27:4d:c7:0d:91:41:d2:76:46:30:15:46:c7:90:f7:51:
         1f:3e:dc:ec:6e:8a:e2:04:10:09:c6:a1:ba:68:f4:d5:7c:62:
         c8:2c:13:80:57:98:33:b1:e5:56:a7:72:96:1f:ae:d5:9f:ee:
         90:64:f9:76:4c:bf:7a:fc:84:e2:92:75:4c:aa:26:9c:eb:53:
         0a:1c:c5:fd:6c:73:64:29:e2:b4:f7:73:f3:d0:d1:c5:85:8c:
         5a:ff:80:8c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUJBNEIxMTAvBgNVBAUTKDk2QTc5OUEyRjRCMzA4QjIyNTIyQkNFNDVFMzE4RDZB
NzAyNjI5MkIwHhcNMjYwNTEyMTcwOTA3WhcNMjYwNTE5MTcwOTA3WjAYMRYwFAYD
VQQDEw02YTAzNWViNC00N2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxFP2L//jeU652lDwphlK5BHTd0Lvcqs09rI4iuyQeefL/6yIdTHbMAGuCnM8
i9PFLVeo4vofGovFKIBtm5SvdcQTCsqfDBfvUrn+ewLdr07UtxTDUzbjVT5KYrbA
gLKVdf0naPEDZ2qQBFF9L6qECgz8BH7nhwwyl6G+hL09Uit9QC+AtPx9N5LutSHv
mULou4dpbKfYJAvki6CDby9av1lHGACihxlZqfNq/72PZr3B0aZHecgd9zOG3DJi
QongPnhuM0fcp09YyVa8U/LJU+yf7vWbIJYPKwrSEADGHbeOPrZDd+nY8UY5mA1i
QJZOek89RNT3ujoHp9DhF2sqUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFArnytGF
vC+owiFmObdcSojXaBtSMB8GA1UdIwQYMBaAFJanmaL0swiyJSK85F4xjWpwJikr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkE0Qi9FMzc3RkQ3QUZF
QTcxMUU4QTJFNEI0NTdDNEY5QUUwMi9scWVab3ZTekNMSWxJcnprWGpHTmFuQW1L
U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xxZVpvdlN6Q0xJbElyemtYakdOYW5BbUtTcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QkE0Qi9FMzc3RkQ3QUZFQTcxMUU4QTJFNEI0NTdDNEY5QUUwMi9scWVab3ZTekNM
SWxJcnprWGpHTmFuQW1LU3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAT9QxCI5MYOGYQRVWWYSWf61FpkEDFkBfwhpT2nxl1mo8AM+pH9UxTVKyxWmd
6FeOgeM4xvjzJVM4Xm73R4+9Dg7STgBIQML4hLIywMCWWMGEU34jUhOfInwNICkd
Ltd4bg41Zkk7EB89DvHWF65g+teAycoriOiW/+DAP3oVN3PUA2U5oOR0EhfN8BST
74ccGSy/G0Ouh6lSMrmjoAhbuz+n7WYnTccNkUHSdkYwFUbHkPdRHz7c7G6K4gQQ
Ccahumj01XxiyCwTgFeYM7HlVqdylh+u1Z/ukGT5dky/evyE4pJ1TKomnOtTChzF
/WxzZCnitPdz89DRxYWMWv+AjA==
-----END CERTIFICATE-----
Generated at Tue May 12 22:28:09 2026 by rpki-client