Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft
File:                     L__8o-ZL11oIXmx2cyYl8iTHRDI.mft (raw, json)
Hash identifier:          Stmtzy2IvKdMbit1ToyNiEjGDFySxZzn2CDlqBmEPfE=
Subject key identifier:   7A:5E:D8:7D:50:7E:74:E1:D8:B5:BF:EB:A2:19:51:48:97:F5:EA:64
Authority key identifier: 2F:FF:FC:A3:E6:4B:D7:5A:08:5E:6C:76:73:26:25:F2:24:C7:44:32
Certificate issuer:       /CN=A9193604/serialNumber=2FFFFCA3E64BD75A085E6C76732625F224C74432
Certificate serial:       01C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L__8o-ZL11oIXmx2cyYl8iTHRDI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft
Manifest number:          01C2
Signing time:             Mon 11 May 2026 03:51:47 +0000
Manifest this update:     Mon 11 May 2026 03:51:47 +0000
Manifest next update:     Mon 18 May 2026 03:51:47 +0000
Files and hashes:         1: L__8o-ZL11oIXmx2cyYl8iTHRDI.crl (hash: gJ1FFN5DDZ76NxFm4HWT5w7ebDLQsKJifjOJjMCqovg=)
                          2: 4578BBA89F4E11EEB293B87EC4F9AE02.roa (hash: SgxQ3zHqtJFZs3VuliLURMylAdeLpOPbCcjW0HYY4uM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.crl
                          rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L__8o-ZL11oIXmx2cyYl8iTHRDI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 03:51:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 455 (0x1c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193604, serialNumber=2FFFFCA3E64BD75A085E6C76732625F224C74432
        Validity
            Not Before: May 11 03:51:47 2026 GMT
            Not After : May 18 03:51:47 2026 GMT
        Subject: CN=6a015253-5b9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:96:aa:99:6d:6f:4c:77:07:dd:e9:45:dc:ae:
                    d5:9a:5d:79:37:03:9a:7e:4d:26:1c:41:9d:d8:f6:
                    3d:d3:b4:9b:26:42:c4:8b:6c:5a:f0:bd:e4:45:98:
                    cf:da:bc:5a:54:c3:4b:27:fd:17:87:96:12:de:a0:
                    01:9f:b7:50:c3:cc:fb:fd:e3:f5:7b:77:7d:0a:2b:
                    e3:22:7b:f6:88:40:5d:d5:97:62:41:53:0e:b6:81:
                    60:7e:06:46:fb:db:70:61:01:27:78:27:53:b6:74:
                    e1:00:64:41:6e:4c:dd:c7:a8:8c:b5:7a:4d:8b:8e:
                    83:b4:1d:64:4c:dc:90:ad:b3:59:bd:20:8c:11:35:
                    24:1a:3d:1e:5d:fd:e3:ee:b1:70:49:34:c7:38:78:
                    22:8b:c7:71:6f:0d:40:4a:5b:f5:ee:3a:c1:07:5c:
                    42:36:2a:ac:3b:bd:cd:d8:c3:c3:5d:c4:53:7f:77:
                    96:af:bb:c2:73:62:5c:f3:dd:a9:33:12:1a:0c:fa:
                    ef:1d:fa:7c:5b:e7:61:3d:45:4b:64:84:ca:21:25:
                    36:12:5b:e4:d0:14:04:c2:98:69:98:bf:a4:6d:1b:
                    15:83:22:0c:8a:3a:78:4c:19:8f:d3:a2:26:61:87:
                    7a:57:3e:b3:b4:59:50:72:57:0d:4b:82:a1:68:a4:
                    16:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:5E:D8:7D:50:7E:74:E1:D8:B5:BF:EB:A2:19:51:48:97:F5:EA:64
            X509v3 Authority Key Identifier:
                keyid:2F:FF:FC:A3:E6:4B:D7:5A:08:5E:6C:76:73:26:25:F2:24:C7:44:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L__8o-ZL11oIXmx2cyYl8iTHRDI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:c1:d9:66:f0:72:9f:54:df:fd:66:9e:fd:7b:d4:27:d1:79:
         c4:be:7a:e9:12:70:d0:64:58:e0:5f:4c:2b:a2:3d:51:3b:64:
         9a:03:fb:7c:c5:a8:2a:da:e3:0f:02:3d:6a:75:ce:1a:29:82:
         27:5b:94:57:83:18:79:ae:59:3d:f9:c2:9c:ce:e6:c2:cf:24:
         7d:bb:80:c7:b0:b0:af:f3:19:3f:49:cf:69:a8:c9:c6:ab:ab:
         84:50:d5:d3:c1:47:86:2c:18:97:e7:50:49:bb:85:29:34:8a:
         08:b8:21:95:3c:11:06:ca:b6:76:1f:52:79:7b:e4:0d:d8:ea:
         f6:e7:58:ad:d9:5f:51:51:57:c0:30:db:24:3b:f6:9b:aa:2d:
         7d:2d:7d:7d:c6:97:c1:2f:65:2a:43:48:14:ea:5e:8b:7b:74:
         c0:f6:9e:31:fd:cc:a6:8c:27:03:ae:98:e9:90:45:00:16:80:
         9b:c3:81:3a:16:00:7f:a6:51:04:27:ae:76:32:e6:ae:be:7d:
         c9:da:40:45:ae:80:0a:71:7d:36:78:1b:c7:68:9b:f3:18:23:
         ac:49:cb:3d:c5:60:c7:81:f1:dd:83:7c:db:0a:2b:4f:31:58:
         04:6f:30:00:ba:c2:59:a0:ec:f6:2c:fc:a8:12:90:c5:fb:cc:
         9c:07:a7:1f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTM2MDQxMTAvBgNVBAUTKDJGRkZGQ0EzRTY0QkQ3NUEwODVFNkM3NjczMjYyNUYy
MjRDNzQ0MzIwHhcNMjYwNTExMDM1MTQ3WhcNMjYwNTE4MDM1MTQ3WjAYMRYwFAYD
VQQDEw02YTAxNTI1My01YjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3JaqmW1vTHcH3elF3K7Vml15NwOafk0mHEGd2PY907SbJkLEi2xa8L3kRZjP
2rxaVMNLJ/0Xh5YS3qABn7dQw8z7/eP1e3d9CivjInv2iEBd1ZdiQVMOtoFgfgZG
+9twYQEneCdTtnThAGRBbkzdx6iMtXpNi46DtB1kTNyQrbNZvSCMETUkGj0eXf3j
7rFwSTTHOHgii8dxbw1ASlv17jrBB1xCNiqsO73N2MPDXcRTf3eWr7vCc2Jc892p
MxIaDPrvHfp8W+dhPUVLZITKISU2Elvk0BQEwphpmL+kbRsVgyIMijp4TBmP06Im
YYd6Vz6ztFlQclcNS4KhaKQWPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHpe2H1Q
fnTh2LW/66IZUUiX9epkMB8GA1UdIwQYMBaAFC///KPmS9daCF5sdnMmJfIkx0Qy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzYwNC9CNTk1RkRBMjlG
NEQxMUVFODREQjBGN0RDNEY5QUUwMi9MX184by1aTDExb0lYbXgyY3lZbDhpVEhS
REkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xfXzhvLVpMMTFvSVhteDJjeVlsOGlUSFJESS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MzYwNC9CNTk1RkRBMjlGNEQxMUVFODREQjBGN0RDNEY5QUUwMi9MX184by1aTDEx
b0lYbXgyY3lZbDhpVEhSREkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHsHZZvByn1Tf/Wae/XvUJ9F5xL566RJw0GRY4F9MK6I9UTtkmgP7fMWoKtrj
DwI9anXOGimCJ1uUV4MYea5ZPfnCnM7mws8kfbuAx7Cwr/MZP0nPaajJxqurhFDV
08FHhiwYl+dQSbuFKTSKCLghlTwRBsq2dh9SeXvkDdjq9udYrdlfUVFXwDDbJDv2
m6otfS19fcaXwS9lKkNIFOpei3t0wPaeMf3MpownA66Y6ZBFABaAm8OBOhYAf6ZR
BCeudjLmrr59ydpARa6ACnF9Nngbx2ib8xgjrEnLPcVgx4Hx3YN82worTzFYBG8w
ALrCWaDs9iz8qBKQxfvMnAenHw==
-----END CERTIFICATE-----
Generated at Wed May 13 01:46:17 2026 by rpki-client