Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft
File:                     lFmgev60b3mSRf7CNW08usm-2Ig.mft (raw, json)
Hash identifier:          4FAYGAR9pfGiZefiGUK/JrZaYiswDQoAGFtfXNPS7jQ=
Subject key identifier:   F7:91:68:D4:C6:BA:D9:20:42:6F:E7:60:7D:8E:7B:EF:5B:A0:7F:B8
Authority key identifier: 94:59:A0:7A:FE:B4:6F:79:92:45:FE:C2:35:6D:3C:BA:C9:BE:D8:88
Certificate issuer:       /CN=A912EE4D/serialNumber=9459A07AFEB46F799245FEC2356D3CBAC9BED888
Certificate serial:       01DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft
Manifest number:          01D3
Signing time:             Mon 11 May 2026 03:41:48 +0000
Manifest this update:     Mon 11 May 2026 03:41:47 +0000
Manifest next update:     Mon 18 May 2026 03:41:47 +0000
Files and hashes:         1: lFmgev60b3mSRf7CNW08usm-2Ig.crl (hash: xjbtBvCvealkozmInv8F4wGhchmBnA77/r4NhI8utXk=)
                          2: 81A901FA8A0411EEA251F746C4F9AE02.roa (hash: 5/jz+C40zLVMH2SNYsrHp/ff3x36CKwapZ0lQnBenzc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.crl
                          rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 03:41:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 474 (0x1da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912EE4D, serialNumber=9459A07AFEB46F799245FEC2356D3CBAC9BED888
        Validity
            Not Before: May 11 03:41:47 2026 GMT
            Not After : May 18 03:41:47 2026 GMT
        Subject: CN=6a014ffc-fc8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8f:6e:4f:6a:5b:d3:c8:6b:16:c4:02:98:12:
                    a3:8b:d4:29:12:f8:bc:eb:70:a3:00:c3:82:36:cb:
                    6e:5b:0a:0d:39:0b:18:a9:b2:c8:4b:02:b3:57:04:
                    34:9e:46:2d:f7:4a:9f:87:0b:8a:84:71:f4:9d:6c:
                    48:14:05:bd:b0:5e:28:9d:47:a8:66:5c:50:54:4b:
                    88:b3:c8:71:aa:2d:80:d6:f2:7d:c2:96:2f:31:29:
                    17:a4:49:f8:db:e4:c3:27:f2:f8:76:aa:be:f3:ed:
                    79:b9:36:07:0e:52:b0:7c:5b:80:9c:66:c1:cf:69:
                    8b:4b:bf:f8:27:d5:c1:19:f2:57:f0:23:5f:37:a1:
                    18:db:1f:73:16:f2:71:17:0b:50:de:f0:c7:48:82:
                    76:f5:88:b9:92:e8:23:14:66:6c:e1:0f:5b:15:44:
                    35:e7:4f:fd:1a:be:c5:72:07:75:9f:6e:a1:41:74:
                    9a:34:12:78:38:be:94:00:e2:a3:5e:63:5a:4a:21:
                    f7:82:f2:a0:12:1f:77:3e:6f:00:06:83:47:d4:ed:
                    d1:3a:8a:70:17:4b:94:03:e3:87:21:11:3b:62:11:
                    de:75:2e:90:20:61:6a:22:23:63:a4:c9:35:ed:4a:
                    23:6a:0a:5b:8f:53:d0:6a:0a:be:5a:d8:d4:1d:bd:
                    96:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:91:68:D4:C6:BA:D9:20:42:6F:E7:60:7D:8E:7B:EF:5B:A0:7F:B8
            X509v3 Authority Key Identifier:
                keyid:94:59:A0:7A:FE:B4:6F:79:92:45:FE:C2:35:6D:3C:BA:C9:BE:D8:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:93:4a:1c:04:83:2c:7a:97:45:22:47:81:e3:84:79:0a:33:
         c3:ba:5a:3f:80:75:0b:0c:92:96:46:f5:df:36:fa:01:b6:2c:
         4b:9d:9c:39:84:29:b4:1d:5a:8c:78:8b:3f:bd:87:60:cb:8c:
         20:e4:20:e9:10:26:a1:d6:8a:14:b0:5d:8b:6b:d0:67:cb:85:
         70:b0:36:be:71:e6:71:dc:1e:61:c0:32:77:a6:2d:bf:03:41:
         ef:05:0c:0b:e4:d2:51:2b:f7:9d:ec:fc:eb:ac:a5:89:a1:00:
         19:8e:35:5e:69:91:d7:aa:f5:a6:f3:e2:68:69:3b:17:e1:2b:
         5b:39:29:7a:32:50:9d:76:53:a6:0c:ef:6b:ac:09:b1:57:0f:
         96:e6:9b:06:90:7f:83:d7:96:e4:af:32:d3:3c:94:41:8f:83:
         86:6d:ed:a3:41:80:bd:2b:9c:c2:9d:17:b4:75:eb:4d:df:69:
         0a:c4:7a:af:84:d9:71:b0:f2:11:92:69:32:41:a0:b4:e9:89:
         5b:9e:3b:e3:c8:eb:ed:b8:1c:f7:20:8a:e7:bd:08:ae:e7:09:
         cc:94:18:25:65:1d:7d:df:52:8c:52:a0:99:50:15:8a:18:e4:
         93:d4:10:f5:08:9d:6a:e7:52:46:61:68:22:0c:64:dc:67:f2:
         48:3e:55:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:11:44 2026 by rpki-client