Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft
File:                     lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft (raw, json)
Hash identifier:          tqC/hYF5qgURPwre4QA2sTctAJUSewp5wRFDYLAtoA8=
Subject key identifier:   91:5F:C9:74:D0:DA:1F:3A:70:05:0B:96:6C:66:4E:8C:34:F2:34:4F
Authority key identifier: 94:C6:43:E1:6D:04:A7:73:8B:C7:2B:5B:10:7E:05:B1:61:61:40:13
Certificate issuer:       /CN=A91CAA8A/serialNumber=94C643E16D04A7738BC72B5B107E05B161614013
Certificate serial:       41
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lMZD4W0Ep3OLxytbEH4FsWFhQBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft
Manifest number:          3F
Signing time:             Mon 11 May 2026 08:40:28 +0000
Manifest this update:     Mon 11 May 2026 08:40:28 +0000
Manifest next update:     Mon 18 May 2026 08:40:28 +0000
Files and hashes:         1: lMZD4W0Ep3OLxytbEH4FsWFhQBM.crl (hash: kLAWAHW+i2+pl3A541xHfum/++AwAR9cND3Wum11CVA=)
                          2: 537A2262F2D211F0BAE73FD33C6F56BC.roa (hash: dMndGGXMF1UUV3V1XnDiN6BWOBr7tp/sHPGvsw6xkRE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.crl
                          rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lMZD4W0Ep3OLxytbEH4FsWFhQBM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:40:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CAA8A, serialNumber=94C643E16D04A7738BC72B5B107E05B161614013
        Validity
            Not Before: May 11 08:40:28 2026 GMT
            Not After : May 18 08:40:28 2026 GMT
        Subject: CN=6a0195fc-8c40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0c:0e:a8:81:5d:6f:db:36:9b:11:42:03:b7:
                    e2:16:d8:28:41:f2:05:52:8f:e9:a1:99:4b:82:f5:
                    8a:16:b1:29:ca:1f:90:23:2b:5f:36:c4:08:dd:1a:
                    52:87:3b:1f:36:c7:eb:f3:ed:74:95:b5:61:cf:9b:
                    6a:2e:97:51:1f:0f:35:a4:a2:96:c4:75:a3:87:f9:
                    2d:0c:b8:f4:0c:92:e0:9f:2a:9d:5e:a7:28:7d:38:
                    67:d2:62:bb:d8:44:21:fb:95:1c:11:b7:e0:81:dd:
                    cb:fc:e8:b0:3b:38:13:c3:4f:75:50:f0:6f:92:58:
                    75:c2:e4:54:bc:e1:25:25:dc:c1:fb:b2:5e:f3:16:
                    5f:da:5c:af:9c:d6:8c:66:97:e1:0d:d9:c5:15:55:
                    b8:2e:99:37:09:7b:6a:ca:27:ca:7d:98:5d:f7:28:
                    66:0a:24:74:e1:fb:c5:40:bf:e2:85:08:b4:72:9b:
                    54:fc:48:d9:a3:86:7e:38:17:84:4d:8f:d8:a5:a0:
                    9b:98:a9:d5:f4:d6:6b:aa:36:6d:87:fe:8f:31:8c:
                    b7:c0:43:4a:30:71:8d:01:43:a5:4a:6b:7b:f6:f8:
                    56:05:26:66:e8:6d:53:ee:4c:18:fb:b3:2e:83:5e:
                    5c:e0:90:5b:59:e5:21:1b:00:b3:ae:da:53:9c:22:
                    d4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:5F:C9:74:D0:DA:1F:3A:70:05:0B:96:6C:66:4E:8C:34:F2:34:4F
            X509v3 Authority Key Identifier:
                keyid:94:C6:43:E1:6D:04:A7:73:8B:C7:2B:5B:10:7E:05:B1:61:61:40:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lMZD4W0Ep3OLxytbEH4FsWFhQBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:db:82:4a:b1:16:0d:bd:9e:53:8e:32:38:27:d0:30:e5:a3:
         56:58:22:12:0b:77:82:44:57:b7:ea:fb:37:44:37:a9:55:64:
         d0:a3:bf:8f:36:4a:bb:e3:41:bd:c6:00:e0:fd:55:d2:7d:21:
         3e:bc:4f:46:79:2c:d8:42:5e:4c:f1:fe:a1:11:6e:eb:3a:c9:
         9d:27:bc:61:6f:f1:7f:e7:49:13:af:5f:ac:d4:70:8e:e1:fc:
         74:86:7e:98:c1:6f:42:96:de:b7:61:a0:0e:2b:dd:88:e3:ed:
         29:9c:32:6e:e1:86:8c:91:5e:49:3b:52:9e:f7:cd:d1:69:91:
         e5:45:d4:af:2d:e6:31:01:48:d9:55:99:db:53:47:78:dc:5b:
         1d:3c:d6:4e:07:90:48:15:6c:d0:79:28:92:42:6b:fb:f6:62:
         8a:a1:5c:b9:6a:a3:63:63:54:22:12:6e:aa:86:b2:a9:62:73:
         3f:66:91:40:27:88:e6:d1:a7:d1:67:a0:df:fe:ee:d6:86:40:
         07:cd:b3:08:83:24:13:fa:69:9b:a0:c4:21:4d:d8:40:68:ca:
         bc:3f:53:5a:d8:0b:c8:cc:4b:42:3a:c7:49:11:f9:27:18:74:
         9d:9c:3d:5b:d1:e9:67:ba:25:a7:01:49:3d:a3:99:7c:8a:84:
         62:4a:8c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:30:48 2026 by rpki-client