Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft
File:                     ak_LGM3Y70HSMyE57mLo_Sc7b98.mft (raw, json)
Hash identifier:          MYeO7AKGJSIdS01dW45mAg2/Vjh165YfTUbauJp2/G4=
Subject key identifier:   9B:62:B6:4C:57:A7:78:1C:E3:6C:EE:9C:6B:80:8A:A7:0E:DC:60:A6
Authority key identifier: 6A:4F:CB:18:CD:D8:EF:41:D2:33:21:39:EE:62:E8:FD:27:3B:6F:DF
Certificate issuer:       /CN=A9199B85/serialNumber=6A4FCB18CDD8EF41D2332139EE62E8FD273B6FDF
Certificate serial:       0363
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft
Manifest number:          035D
Signing time:             Mon 11 May 2026 00:58:34 +0000
Manifest this update:     Mon 11 May 2026 00:58:34 +0000
Manifest next update:     Mon 18 May 2026 00:58:34 +0000
Files and hashes:         1: ak_LGM3Y70HSMyE57mLo_Sc7b98.crl (hash: WfYO/LGH5PFofHleYRFyMtrj6pBPq5p/QwY0U9aKQds=)
                          2: EF1B381EF93911ECBD1E663DC4F9AE02.roa (hash: HmeKBQST4q/GdJylCRWjN6btzZNudyb9mfVAkuKWY6Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.crl
                          rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 00:58:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 867 (0x363)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199B85, serialNumber=6A4FCB18CDD8EF41D2332139EE62E8FD273B6FDF
        Validity
            Not Before: May 11 00:58:34 2026 GMT
            Not After : May 18 00:58:34 2026 GMT
        Subject: CN=6a0129ba-cfc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:be:59:ec:90:db:b6:c5:c4:0c:20:94:fc:6e:
                    91:73:68:31:4d:27:1e:2f:07:37:a5:77:f5:55:1e:
                    81:61:bf:b9:c3:32:ba:6b:b3:8b:46:28:8d:ed:f9:
                    67:9f:d5:87:1f:9c:1a:e0:eb:07:f4:10:ea:e1:ae:
                    c2:23:b1:92:bf:74:41:a8:d6:ab:d0:a2:c9:b2:4f:
                    55:6f:56:66:f0:3a:12:e3:40:18:cf:ec:00:ee:11:
                    5e:28:6c:18:5c:dc:92:37:03:3f:20:72:2a:32:81:
                    e5:75:d0:8f:e7:ae:fe:0c:07:78:55:ed:ce:d1:cb:
                    38:f2:35:54:66:b5:40:42:0e:ef:dd:d5:e9:70:fb:
                    e0:f8:a9:92:96:18:59:55:94:c1:cd:62:51:23:5b:
                    c6:d7:b9:f3:4e:08:8d:e2:e9:01:01:2a:34:69:0a:
                    49:ce:47:32:44:52:74:26:48:5f:bd:8d:89:ea:1f:
                    b7:d3:eb:6b:20:f3:57:fc:fa:9e:a2:77:39:93:df:
                    a0:da:84:81:b5:da:dd:fd:52:50:20:01:d2:45:90:
                    41:d9:e1:07:44:27:38:8e:5e:a3:2f:75:1a:af:9f:
                    94:2a:49:8d:4e:c9:0b:e3:53:dd:55:b1:6c:67:31:
                    0a:02:32:ac:72:8e:95:0b:b5:77:47:49:dc:69:46:
                    af:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:62:B6:4C:57:A7:78:1C:E3:6C:EE:9C:6B:80:8A:A7:0E:DC:60:A6
            X509v3 Authority Key Identifier:
                keyid:6A:4F:CB:18:CD:D8:EF:41:D2:33:21:39:EE:62:E8:FD:27:3B:6F:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:9c:0e:79:bd:c8:bc:a6:85:a3:d9:d7:4c:eb:30:c8:bd:f5:
         62:c5:cc:22:34:d4:f5:a4:9a:80:51:6f:fb:82:83:62:4a:a2:
         37:36:1a:e4:da:23:b0:d8:04:b6:9f:6e:37:47:50:4a:38:fd:
         7e:86:4d:1f:00:ac:af:9e:49:ff:71:d0:f7:15:b5:11:11:f7:
         44:34:86:a4:be:1e:de:27:c3:ed:bb:6d:2b:da:73:ef:4e:f6:
         6b:3f:11:5c:5c:4e:82:55:da:b3:0d:23:ff:3c:5c:3e:38:22:
         da:5a:9b:7e:fc:3a:93:dd:4e:84:e2:9e:6b:f5:5c:04:40:76:
         7c:71:a0:81:a0:d2:72:b8:31:b6:e6:8c:2a:be:df:ac:a8:10:
         f9:47:ea:e7:65:f9:af:3e:4a:9b:1e:83:5b:0a:99:b5:8a:6e:
         d4:0e:ec:15:8d:eb:37:97:32:4c:55:90:e6:c0:a4:97:45:5b:
         b6:52:ee:d9:8d:08:47:35:66:7d:eb:3b:4a:28:d3:a1:ee:0e:
         25:b8:ad:c5:90:cd:56:80:2b:ab:bd:a6:24:59:54:f2:00:78:
         f6:89:ea:04:a9:2c:a9:dc:e3:c7:49:6a:16:d5:92:fd:2a:0e:
         22:cd:74:c3:36:d7:5a:e6:40:82:c3:c9:a3:80:ad:4b:a4:e3:
         3d:69:26:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:12:30 2026 by rpki-client