Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft
File:                     lA0nrhRKrcqeNFLLOMMjasv3Als.mft (raw, json)
Hash identifier:          d5esvmz55AihfYJd6AeVteCud4cFFLLwEHv6IPRowSM=
Subject key identifier:   01:31:F5:1A:45:00:E6:B2:80:A8:B6:F7:98:08:4F:70:B6:19:F5:91
Authority key identifier: 94:0D:27:AE:14:4A:AD:CA:9E:34:52:CB:38:C3:23:6A:CB:F7:02:5B
Certificate issuer:       /CN=A919B460/serialNumber=940D27AE144AADCA9E3452CB38C3236ACBF7025B
Certificate serial:       47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lA0nrhRKrcqeNFLLOMMjasv3Als.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft
Manifest number:          44
Signing time:             Mon 11 May 2026 08:36:03 +0000
Manifest this update:     Mon 11 May 2026 08:36:03 +0000
Manifest next update:     Mon 18 May 2026 08:36:03 +0000
Files and hashes:         1: lA0nrhRKrcqeNFLLOMMjasv3Als.crl (hash: ic6QJB07GUvg6nm8i/rQQ/ofakTTJcsUFLLoi1a/3iE=)
                          2: 4BE78CE0ED2A11F08C16C3A8456F56BC.roa (hash: DxS8qtWv9pkNq2b6VRn4H0f6+eH9NnF6qbsTrQl88zk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.crl
                          rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lA0nrhRKrcqeNFLLOMMjasv3Als.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:36:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B460, serialNumber=940D27AE144AADCA9E3452CB38C3236ACBF7025B
        Validity
            Not Before: May 11 08:36:03 2026 GMT
            Not After : May 18 08:36:03 2026 GMT
        Subject: CN=6a0194f3-4b03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:95:ed:a0:9e:42:63:bb:2d:4c:1e:c2:45:01:
                    46:30:fe:34:92:10:b2:85:2a:f5:e8:50:57:0b:99:
                    b0:f2:ef:67:56:30:a0:e2:f1:5e:cf:86:f5:85:7b:
                    1d:e8:27:ee:17:82:02:cb:49:f6:9d:d1:dc:80:5d:
                    f0:24:f2:45:57:c2:28:7a:c2:43:2b:9c:88:4c:d3:
                    48:a8:96:a2:83:f9:e0:a0:a3:25:58:65:82:09:9c:
                    2e:a5:ca:86:e0:33:83:29:6d:d2:8c:64:04:39:7f:
                    43:36:a5:f9:52:19:41:87:2b:6e:59:b4:19:8f:09:
                    6e:a9:70:25:91:31:55:14:ab:3b:4c:de:ed:74:06:
                    b6:99:cf:41:26:31:db:07:b1:a8:20:aa:98:05:6f:
                    99:d9:b4:35:14:45:80:8c:b9:41:a9:42:ab:0d:64:
                    9c:78:d3:42:64:94:6f:90:8c:80:2b:fd:a0:64:99:
                    cd:b2:b4:dc:7b:c1:8a:e5:96:e7:d6:4a:e7:1f:0b:
                    0b:34:44:20:8b:92:41:f9:9a:cc:b9:df:45:86:81:
                    ec:1c:a6:21:17:bc:d0:15:79:8b:d8:49:66:5e:e9:
                    ce:e7:33:75:3f:b5:ed:66:57:8f:bc:18:ff:cb:6d:
                    6c:c0:c2:31:e5:e7:e1:3b:19:44:cf:06:e5:2b:ad:
                    ae:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:31:F5:1A:45:00:E6:B2:80:A8:B6:F7:98:08:4F:70:B6:19:F5:91
            X509v3 Authority Key Identifier:
                keyid:94:0D:27:AE:14:4A:AD:CA:9E:34:52:CB:38:C3:23:6A:CB:F7:02:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lA0nrhRKrcqeNFLLOMMjasv3Als.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:a2:35:da:0a:5d:2c:60:f3:d1:44:6f:2f:dd:ad:84:7d:c5:
         60:bb:5a:57:af:ad:9d:ec:0a:4b:58:17:a5:6d:72:87:a0:70:
         42:aa:42:d6:94:2f:d6:f4:a9:24:42:02:f3:1f:79:e7:4b:20:
         96:80:16:3e:13:ed:07:c9:3c:1a:b2:67:d7:32:4c:58:ce:b2:
         b1:97:28:dd:f8:26:df:37:89:c6:7a:f8:a6:8e:13:c4:00:35:
         9c:f4:cb:a3:53:13:a1:54:ef:13:6d:12:78:00:27:fe:fc:5b:
         17:07:a1:e0:a8:d0:08:6e:2e:ae:5a:03:c4:80:50:72:c4:02:
         aa:45:ad:bd:26:87:f8:98:ed:7e:56:68:f5:48:0a:7f:55:d0:
         43:79:06:3b:11:2f:bf:fa:0b:67:f9:d1:b7:5b:3f:57:73:b3:
         c0:d8:0d:ee:e6:3c:d8:8a:23:79:1f:27:f7:9a:69:f7:3c:dc:
         ad:44:3b:d6:57:b0:bc:fd:2a:15:72:30:3e:a0:92:4a:a8:db:
         2b:ed:4c:54:8e:91:ea:03:97:10:c0:54:ce:f8:0d:a7:f7:3c:
         53:32:38:06:d4:9c:f3:09:c6:0e:9c:e7:be:ab:9e:d9:68:14:
         f9:53:16:93:89:f6:7b:9d:d0:e2:00:1b:ae:c8:1b:35:65:ed:
         6a:2c:12:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:24:37 2026 by rpki-client