Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft
File:                     ak_LGM3Y70HSMyE57mLo_Sc7b98.mft (raw, json)
Hash identifier:          USJkdJzkbPmAHNqyEbl1WPmxcyd0B017Vza1OV06TAU=
Subject key identifier:   04:44:E2:25:51:83:99:BC:10:33:53:69:E5:DA:3A:BA:AD:4F:D4:52
Authority key identifier: 6A:4F:CB:18:CD:D8:EF:41:D2:33:21:39:EE:62:E8:FD:27:3B:6F:DF
Certificate issuer:       /CN=A9199B85/serialNumber=6A4FCB18CDD8EF41D2332139EE62E8FD273B6FDF
Certificate serial:       034C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft
Manifest number:          0346
Signing time:             Fri 27 Mar 2026 00:44:04 +0000
Manifest this update:     Fri 27 Mar 2026 00:44:04 +0000
Manifest next update:     Fri 03 Apr 2026 00:44:04 +0000
Files and hashes:         1: ak_LGM3Y70HSMyE57mLo_Sc7b98.crl (hash: eL2N1aC7jjZ5WX/WALHegDDUvF6NK9H3woTDA0MAy68=)
                          2: EF1B381EF93911ECBD1E663DC4F9AE02.roa (hash: HmeKBQST4q/GdJylCRWjN6btzZNudyb9mfVAkuKWY6Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.crl
                          rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 00:44:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 844 (0x34c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199B85, serialNumber=6A4FCB18CDD8EF41D2332139EE62E8FD273B6FDF
        Validity
            Not Before: Mar 27 00:44:04 2026 GMT
            Not After : Apr  3 00:44:04 2026 GMT
        Subject: CN=69c5d2d4-9554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ae:73:81:c4:fd:00:44:85:5c:6f:1a:fb:90:
                    a9:86:d7:3d:89:da:ec:41:7a:8a:fe:a1:be:b1:34:
                    7c:5f:0d:ca:5d:e0:11:b3:e9:39:9a:d1:da:44:77:
                    50:fd:bc:c1:c0:be:15:7d:1a:31:5f:22:e5:1f:42:
                    8a:90:3b:72:d5:9e:a1:ab:14:16:fe:e1:94:a2:0a:
                    c0:78:82:bb:11:6c:f5:d5:de:2b:e6:5c:e6:59:19:
                    2d:12:e2:3b:f9:64:9b:41:49:3e:81:f2:21:00:7d:
                    5a:e9:b5:76:40:44:b8:8e:be:63:80:06:b3:63:6e:
                    a8:f7:f4:fb:a8:b0:c5:b7:a4:83:14:df:0e:91:43:
                    5f:ea:82:6b:66:51:de:de:0f:29:04:d5:f3:c4:0c:
                    f0:1f:d1:cc:6d:38:5e:ad:b8:8e:fd:c2:17:f1:33:
                    bb:c1:3a:d9:6a:81:8b:c8:08:0a:7f:ac:85:de:53:
                    00:3c:70:92:d9:d8:c5:9e:fa:d7:38:0b:29:a9:5a:
                    68:1b:9f:c7:9f:5d:52:d2:42:26:c2:1b:9d:d0:ff:
                    9e:78:6c:c8:cc:d5:38:62:d8:5a:54:ea:3e:44:38:
                    48:04:88:d0:fa:0b:ae:7a:e7:69:b0:47:74:c8:d5:
                    55:5f:ff:24:04:4e:99:63:e0:bf:93:85:7d:0a:43:
                    54:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:44:E2:25:51:83:99:BC:10:33:53:69:E5:DA:3A:BA:AD:4F:D4:52
            X509v3 Authority Key Identifier:
                keyid:6A:4F:CB:18:CD:D8:EF:41:D2:33:21:39:EE:62:E8:FD:27:3B:6F:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:5b:b4:c2:af:11:b0:fc:54:01:2c:10:9d:10:9c:47:f0:52:
         17:2c:4e:a7:53:ea:22:ef:70:4b:02:da:9d:da:43:26:09:6d:
         ff:15:27:c9:31:44:1f:b9:2d:ce:e1:20:e2:17:3e:88:e7:22:
         75:fd:41:84:63:52:0e:27:75:8b:b1:96:c1:96:a8:a6:8d:db:
         f9:4b:2c:ce:52:d2:8e:ba:ff:60:31:22:38:ed:d8:e5:6b:8e:
         48:f7:28:80:d5:02:ba:62:92:f3:8b:0e:21:45:be:de:2a:25:
         ff:09:d1:75:25:aa:8a:2c:e8:44:95:a6:d8:d7:3f:56:ef:7e:
         43:3d:0c:e3:42:82:30:9b:91:40:e0:b6:0f:8d:cb:e6:d0:86:
         dd:e3:fa:59:5e:45:bb:0e:d9:d4:a2:0f:8d:15:57:83:ed:08:
         6f:eb:9e:93:1e:cb:e3:2b:90:33:1b:80:f7:ed:8a:c8:58:6e:
         5a:bb:c2:b3:e2:ff:47:73:22:59:46:f6:9d:33:54:67:78:5d:
         ee:f4:28:78:33:57:25:79:59:76:7a:2c:68:ed:8f:71:cb:11:
         ef:f7:b9:a0:c8:2f:ff:27:16:40:1e:0c:c4:cc:d5:3e:a5:43:
         d2:a2:7f:50:13:10:30:15:ee:57:f4:ca:45:f5:65:4f:54:92:
         b6:7b:88:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:47:40 2026 by rpki-client