Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
File:                     LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft (raw, json)
Hash identifier:          NO/a7iZwAUBpDpgDMDQ3axgwy6XtKfZUgenj8qv+63I=
Subject key identifier:   6E:F9:62:EF:5D:74:13:29:99:11:05:92:3B:FC:82:EB:1A:1D:5E:95
Authority key identifier: 2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F
Certificate issuer:       /CN=A91A8405/serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F
Certificate serial:       0C4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
Manifest number:          0C20
Signing time:             Tue 12 May 2026 18:52:03 +0000
Manifest this update:     Tue 12 May 2026 18:52:03 +0000
Manifest next update:     Tue 19 May 2026 18:52:03 +0000
Files and hashes:         1: LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl (hash: NncKhLtfK9Cu7SX/M/yEtRZa2NYMqgxc72EUyD/CHhY=)
                          2: 933DE524C2B811EEAA1FD486C4F9AE02.roa (hash: WF5zZF6qWOdmRefH/8xgl7eODKn3xPKvlJlYV7opxnI=)
                          3: D7D5B86859E811ED85614349C4F9AE02.roa (hash: bTCwQurYG8Xk94vaUk8PvdDkAz4L8d6mn3Wu2OIibFA=)
                          4: D9173AE459E811ED85614349C4F9AE02.roa (hash: leMECVmhVTsAWm2huPmHyjfAW/BQtxrDM48+UQZcH9Y=)
                          5: F8088528E65D11EDB5112931C4F9AE02.roa (hash: PKj9sFGG8PoYLlt4SuP/keqFiSjZV6/K10jPwAvS8jU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl
                          rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:52:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3147 (0xc4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8405, serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F
        Validity
            Not Before: May 12 18:52:03 2026 GMT
            Not After : May 19 18:52:03 2026 GMT
        Subject: CN=6a0376d3-d85a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d6:50:5e:47:f6:9c:a5:0e:e0:53:4a:e1:ed:
                    50:39:e9:71:a9:7f:60:e9:71:70:42:17:d7:1d:13:
                    0b:ce:db:12:d7:a5:85:de:68:f9:8b:05:55:30:17:
                    49:d5:33:16:e5:68:7d:a6:67:4c:e4:09:cf:5c:18:
                    a7:9e:53:d8:61:04:a8:aa:06:42:0f:61:77:3b:ff:
                    45:1d:c3:e5:44:87:bf:0c:ea:22:47:e1:5b:e6:24:
                    eb:5d:65:4b:db:52:7a:fa:80:ef:06:87:dc:03:8b:
                    ca:ae:81:b6:95:77:de:4b:76:aa:2e:c1:96:5d:bb:
                    f9:ce:bd:61:ca:f4:da:00:6e:6c:cc:73:26:bc:fd:
                    54:6e:cb:13:64:98:aa:09:3f:1b:b2:0f:c2:d3:df:
                    24:70:67:c9:e2:09:c6:ea:4e:79:92:79:77:63:ca:
                    b9:8b:54:39:0f:5c:8b:80:fe:22:ce:7f:00:71:26:
                    fe:d4:f0:38:c5:66:56:df:9c:6e:00:84:52:7b:a3:
                    5d:d7:f7:9d:7a:ff:da:e7:d4:6c:71:17:67:6b:ff:
                    24:23:c6:e4:b3:a1:d7:a7:06:c0:4b:6b:69:01:e8:
                    ad:6b:1a:05:9e:cc:79:42:f6:46:e8:88:77:fc:16:
                    38:e7:d9:24:29:27:df:15:d5:83:f2:1a:d8:f1:a5:
                    5b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F9:62:EF:5D:74:13:29:99:11:05:92:3B:FC:82:EB:1A:1D:5E:95
            X509v3 Authority Key Identifier:
                keyid:2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:9e:0d:8c:1e:11:29:bc:25:bc:10:c2:88:80:68:68:e9:69:
         1f:b0:a5:9b:d0:4a:b8:ba:a8:95:35:24:2d:83:c4:35:3a:dc:
         ad:ef:06:60:34:8a:79:7b:90:e4:3a:73:50:72:d2:ae:9d:4b:
         ee:84:7d:e9:5e:8e:c0:9d:1b:3c:ad:ba:78:93:4a:b1:2c:54:
         a2:30:28:ff:ba:4b:35:e2:b8:07:e1:f6:ef:e4:50:61:bf:6e:
         de:de:c0:8b:0b:a7:a6:a6:de:ee:89:36:60:f1:b2:31:d4:83:
         fb:2b:7c:9e:cf:36:eb:b2:b8:97:5a:fd:92:a3:6e:ae:2b:6d:
         af:d0:3e:a1:fe:dd:b1:cb:30:b6:cd:fe:61:92:56:8c:2a:d6:
         bb:42:ba:49:41:cd:02:49:4c:93:72:10:fc:f1:06:7d:41:4e:
         79:66:1e:f9:3b:41:fc:01:8b:ae:25:bc:4d:88:90:a8:7b:65:
         fe:74:87:fe:6c:7e:3c:e4:db:d8:84:72:39:48:d8:95:11:32:
         14:23:40:8e:4b:ea:a2:0d:59:5b:21:75:10:0b:b4:30:9d:89:
         28:eb:35:d5:96:d5:ca:1a:2f:58:b3:e3:99:61:48:fb:0e:8b:
         0e:64:29:94:8e:3a:8f:37:1a:c3:af:b1:d9:ca:3e:2e:e5:37:
         01:44:80:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:13:45 2026 by rpki-client