Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft
File:                     2lA_lyy8k6jIHflfVKLLKjjxPHc.mft (raw, json)
Hash identifier:          r8SRRP0MR3N1Sri+qq+rS6hepNA+onJK61NV/+fXRCg=
Subject key identifier:   C3:01:66:EA:67:52:0C:C8:E5:7E:D0:E1:0C:81:33:F0:2C:58:E2:AF
Authority key identifier: DA:50:3F:97:2C:BC:93:A8:C8:1D:F9:5F:54:A2:CB:2A:38:F1:3C:77
Certificate issuer:       /CN=A9144717/serialNumber=DA503F972CBC93A8C81DF95F54A2CB2A38F13C77
Certificate serial:       0A75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft
Manifest number:          0A6C
Signing time:             Tue 12 May 2026 19:40:47 +0000
Manifest this update:     Tue 12 May 2026 19:40:47 +0000
Manifest next update:     Tue 19 May 2026 19:40:47 +0000
Files and hashes:         1: 2lA_lyy8k6jIHflfVKLLKjjxPHc.crl (hash: JDW/dJG1qPyUKs1AmtxerEleA9es7/rU9awKIZ+eXKU=)
                          2: F38DEBFC83E911EA993D9515C4F9AE02.roa (hash: xYf6QNwyh/TfYBwfKMFox0Y2KD6yEqZCCyhoM2C9YaA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.crl
                          rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:40:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2677 (0xa75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144717, serialNumber=DA503F972CBC93A8C81DF95F54A2CB2A38F13C77
        Validity
            Not Before: May 12 19:40:47 2026 GMT
            Not After : May 19 19:40:47 2026 GMT
        Subject: CN=6a03823f-20e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:30:8b:53:c5:8d:35:1e:65:36:0e:1f:e1:f5:
                    49:0f:b7:6f:78:b9:5d:18:48:85:70:93:70:4d:f5:
                    65:3b:db:09:0b:e7:5a:c3:a0:c3:60:40:63:10:c2:
                    0a:d8:93:ea:30:88:06:08:e9:3b:9c:3c:8c:02:46:
                    5e:a7:17:f7:95:04:18:63:c5:12:ea:10:e7:9d:c9:
                    75:1d:f8:19:5f:1a:0b:da:39:a3:5f:34:9b:7d:a9:
                    c6:0a:97:2d:d3:31:58:06:b9:c1:f4:8d:2c:f5:58:
                    a2:7e:e4:2c:e5:84:27:af:33:12:bc:e7:f3:ae:00:
                    2b:2b:6f:82:c5:fb:a9:ce:7e:2d:0f:5f:f0:6a:9e:
                    0d:f3:8c:c4:22:11:a5:14:bb:df:a0:dd:21:5b:06:
                    55:4e:d8:be:e9:33:78:5c:32:8e:03:de:4c:f3:75:
                    5c:c4:e7:4d:01:97:1d:b5:9f:f6:f3:52:68:5d:d8:
                    31:ba:5a:0b:e8:5f:d2:14:62:75:26:e9:54:80:6f:
                    0d:c6:30:ba:f6:7d:37:ff:89:cf:e2:1a:a0:8f:0a:
                    c6:af:44:8a:c5:ba:17:16:92:2e:d4:30:b4:07:40:
                    01:88:af:95:2b:5a:86:56:3d:89:08:6c:d4:88:95:
                    66:f1:5c:3a:3b:74:51:00:33:62:28:7f:56:15:66:
                    91:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:01:66:EA:67:52:0C:C8:E5:7E:D0:E1:0C:81:33:F0:2C:58:E2:AF
            X509v3 Authority Key Identifier:
                keyid:DA:50:3F:97:2C:BC:93:A8:C8:1D:F9:5F:54:A2:CB:2A:38:F1:3C:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:3c:51:de:24:79:b1:07:a7:ae:da:84:16:7d:6a:30:fd:6a:
         32:45:42:eb:2a:9d:c4:db:69:3f:65:5a:a1:02:4d:85:bf:67:
         c9:7e:77:5d:00:fb:00:d5:44:85:8a:aa:c6:93:6a:a4:2b:8c:
         1c:cb:72:71:d1:e1:53:04:d7:ff:e2:68:e2:34:1f:7f:b7:81:
         e6:76:b5:ff:5a:bd:34:c0:c8:89:56:18:ad:17:cb:14:ea:5e:
         1b:72:5f:43:04:e1:0b:8f:8e:7f:64:3e:e3:7b:ae:b1:f4:73:
         6d:7f:62:f8:3a:dc:12:c0:89:a3:13:8f:1d:70:8f:f1:82:84:
         a9:8e:de:87:de:d1:02:cb:57:9c:3c:4f:25:0e:37:47:0b:d6:
         dd:89:32:b1:fa:4d:cb:f3:82:54:6e:f6:da:23:2a:d7:26:aa:
         ee:9c:a7:04:99:65:2c:6e:5b:bf:3b:f2:04:5f:26:0a:9d:ee:
         f7:cf:e5:4d:c6:2e:0a:29:d3:0b:2f:16:ce:b1:ff:98:1d:ed:
         36:74:27:b2:2e:29:e9:45:9e:56:48:b3:bf:de:30:e1:b7:1b:
         eb:49:de:9c:a3:fb:45:9a:97:a0:bc:f0:72:e2:82:4a:24:93:
         5c:d6:12:af:c0:13:67:80:d0:1b:37:2c:40:18:f8:76:37:42:
         ef:ce:76:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:29:51 2026 by rpki-client