Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft
File:                     LnNTksaGuNjciMDM1Zvyrvun6LA.mft (raw, json)
Hash identifier:          Hwz7kumyq1w0UXNZaWoYV/uLN1CmApdexUxqx/LL4iY=
Subject key identifier:   59:DC:C9:92:ED:98:D3:42:10:9A:6B:DC:9A:18:DE:0B:3C:11:A5:9E
Authority key identifier: 2E:73:53:92:C6:86:B8:D8:DC:88:C0:CC:D5:9B:F2:AE:FB:A7:E8:B0
Certificate issuer:       /CN=A911D340/serialNumber=2E735392C686B8D8DC88C0CCD59BF2AEFBA7E8B0
Certificate serial:       0BE7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft
Manifest number:          0BDD
Signing time:             Tue 12 May 2026 18:57:01 +0000
Manifest this update:     Tue 12 May 2026 18:57:00 +0000
Manifest next update:     Tue 19 May 2026 18:57:00 +0000
Files and hashes:         1: LnNTksaGuNjciMDM1Zvyrvun6LA.crl (hash: DJWXMGuz2cjIXRd6IWacdvCvgLdsglXz5OFjhZhYzRc=)
                          2: 14B2A85C3DA611EAAD093F5EC4F9AE02.roa (hash: ZJ2vN4ORbvna0D0Yqlj8XNP78COyDtoGq6tfy7d5TK0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.crl
                          rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:57:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3047 (0xbe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D340, serialNumber=2E735392C686B8D8DC88C0CCD59BF2AEFBA7E8B0
        Validity
            Not Before: May 12 18:57:00 2026 GMT
            Not After : May 19 18:57:00 2026 GMT
        Subject: CN=6a0377fd-0c9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:11:1d:f2:2c:ec:2f:82:89:39:3c:e4:1a:7a:
                    fb:57:c4:ab:3e:7c:a4:42:59:76:32:59:cd:85:09:
                    fd:6b:09:97:25:94:43:22:47:ff:fb:bc:ae:b6:21:
                    f5:52:af:31:64:e6:2b:66:95:ee:cb:1c:b9:aa:0b:
                    f7:41:f0:50:9f:48:c3:7b:4a:c9:ed:b9:9d:0b:58:
                    30:2f:44:d9:34:ce:a8:49:af:64:dc:41:da:eb:71:
                    2d:28:5b:b8:6a:f9:74:ef:d4:57:eb:b9:19:f2:85:
                    b6:ec:f6:cb:7d:4b:4a:69:3d:d9:02:67:1e:6c:d0:
                    91:bb:e6:5b:2c:5e:35:07:f7:c0:d4:d8:30:8a:7e:
                    ab:6e:4b:46:28:a2:00:2e:04:08:bc:00:27:91:10:
                    1a:fa:09:75:b1:9b:11:1f:89:97:3d:48:c1:ae:b8:
                    04:61:1e:72:c8:97:7f:4d:25:1e:4b:c8:45:11:1f:
                    41:fb:4c:c9:89:39:f3:bd:e5:0f:e9:8f:c8:b3:1f:
                    b1:5f:bf:9b:e5:c9:4e:3f:9f:af:ff:c8:e5:c3:90:
                    6d:2d:9e:1e:cc:46:63:13:bb:fe:f0:b8:c7:f7:a8:
                    c6:57:52:3f:95:e7:14:b0:97:32:ba:b3:12:2e:80:
                    3f:91:74:90:ae:a5:98:a9:3e:89:a9:72:26:cc:e5:
                    d1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:DC:C9:92:ED:98:D3:42:10:9A:6B:DC:9A:18:DE:0B:3C:11:A5:9E
            X509v3 Authority Key Identifier:
                keyid:2E:73:53:92:C6:86:B8:D8:DC:88:C0:CC:D5:9B:F2:AE:FB:A7:E8:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:d7:e7:4c:36:a2:7e:56:c3:61:6e:c6:6b:6a:bd:5c:7b:b7:
         27:c1:06:25:3e:ad:72:19:3f:fe:be:9e:be:63:23:15:d3:44:
         2b:03:ff:8c:f5:14:da:fc:11:bb:33:e4:d1:29:c7:f3:91:cd:
         59:9d:b0:ad:74:c4:ae:ec:72:a0:6c:67:b7:a9:f9:53:2f:91:
         cd:d4:f2:6e:af:57:c8:1b:f2:4f:43:35:fc:de:b3:2f:a5:97:
         92:dd:e6:4a:21:fe:e7:30:fe:19:59:4c:7e:50:60:4a:65:26:
         b2:cc:f4:76:dd:44:a5:35:e0:7e:e6:ca:1b:e5:df:1f:1b:f2:
         ed:dc:9c:e1:fb:d8:22:01:7e:91:34:8a:fb:23:8e:a1:ab:2c:
         3e:51:80:99:b4:63:d3:ff:5d:e6:a7:0f:30:d9:bb:73:d6:1c:
         c2:8f:55:54:fa:b7:c1:7e:db:d1:be:b8:ff:bd:23:ff:9d:ec:
         f9:81:34:f6:d6:75:d9:da:67:70:27:c8:c9:d5:ec:7f:93:91:
         88:42:65:93:3e:22:3d:8f:cf:2a:52:a6:30:a8:f2:f6:d9:c8:
         f0:18:87:00:fb:b5:a6:c6:69:99:67:e8:65:5e:8b:4b:3d:3f:
         93:44:c3:7c:79:b7:bf:1e:59:e0:b1:54:9a:30:a4:90:de:c1:
         e2:05:14:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:45:05 2026 by rpki-client