Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft
File:                     lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft (raw, json)
Hash identifier:          T367sMqcS1mTgBuEacLQ2iBhFgIqZS3mIggYbULWfJA=
Subject key identifier:   3C:1B:11:5A:0E:E7:5A:75:2B:9D:3F:C0:42:01:06:7E:D8:50:C8:76
Authority key identifier: 95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C
Certificate issuer:       /CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C
Certificate serial:       04F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft
Manifest number:          04D0
Signing time:             Tue 12 May 2026 23:59:51 +0000
Manifest this update:     Tue 12 May 2026 23:59:51 +0000
Manifest next update:     Tue 19 May 2026 23:59:51 +0000
Files and hashes:         1: lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl (hash: ySz5fSg4c5FF79yUJLI9EfGx3WKQ8Qo434cs21lZSCU=)
                          2: E248BDA63C5211EF94184A20C4F9AE02.roa (hash: AI0r7gDdR6RA/Vld2pQnk6d3svPO4G7tUuMRMEKGy/M=)
                          3: AFF169A0F34111F0B7AB4BD35C6F56BC.roa (hash: grqcDNhPLZ19+sVArgIFaTXjwPldcbbRWwq0KUxCAaI=)
                          4: F4D295243FDA11EFAF5E676AC4F9AE02.roa (hash: Ykk+PqOPcAQxC3ivcFoFj4chGvoYVmrlUu4Emw4r4cM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl
                          rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:31:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1272 (0x4f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0C8E, serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C
        Validity
            Not Before: May 12 23:59:51 2026 GMT
            Not After : May 19 23:59:51 2026 GMT
        Subject: CN=6a03bef7-1c09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:de:d4:71:74:25:5f:53:09:4c:3d:9a:f5:d3:
                    10:6f:f2:bf:8d:ba:6d:48:45:5f:19:68:88:d1:36:
                    1d:7b:d4:7d:c1:ab:dd:36:1b:ab:e3:c4:b9:37:9a:
                    3a:e0:67:6e:ae:a2:18:0f:8a:5c:ca:88:7b:f5:44:
                    02:71:43:22:6d:92:b2:8f:d4:34:3c:7f:6c:26:d8:
                    c5:e4:2d:5c:65:ce:01:96:e8:07:5e:5c:d0:35:d1:
                    78:15:14:04:3e:1f:b2:af:b0:9d:b7:e2:47:29:6e:
                    10:a3:74:5b:11:8d:da:49:64:48:30:60:1d:21:09:
                    7e:f5:a9:0e:63:c4:ad:bf:6f:fa:c4:60:6a:48:99:
                    7b:43:9f:f2:34:4a:df:25:2f:87:1c:fb:86:f2:58:
                    1d:43:8e:e4:a0:01:e1:03:d4:f7:cd:c8:70:05:4e:
                    31:df:31:40:66:61:2a:b0:e8:12:ff:14:05:e0:2e:
                    d7:b2:15:c0:e1:6b:e7:10:23:6a:17:60:9e:23:f9:
                    09:be:26:4c:85:dc:d6:a7:43:eb:92:2f:d5:63:97:
                    03:ae:d2:0c:72:bb:a0:71:a1:26:40:bb:28:3b:ba:
                    ae:23:d9:29:12:05:9b:97:cf:f7:73:d8:14:40:ba:
                    c0:ec:28:0b:ff:77:6d:84:49:e8:9c:b3:0b:75:81:
                    38:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:1B:11:5A:0E:E7:5A:75:2B:9D:3F:C0:42:01:06:7E:D8:50:C8:76
            X509v3 Authority Key Identifier:
                keyid:95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:79:73:df:a6:f2:cc:44:44:f2:8f:dd:2e:90:04:01:9d:30:
         3b:0e:39:07:f0:54:02:46:6b:1b:62:8e:c0:59:b4:63:09:cf:
         a2:59:2d:1a:1d:c3:68:48:36:4b:25:99:f2:81:2d:a5:cb:00:
         b3:36:c5:d7:6e:6c:9c:66:e4:58:45:73:f7:0a:ed:2d:16:c3:
         0f:a1:2f:ab:8b:08:ab:f2:e0:9c:99:f7:b3:8c:b4:77:a2:1e:
         88:b1:49:e9:ad:89:ba:e1:65:98:3f:0e:b9:07:6b:4e:a6:c4:
         38:ab:4c:35:7a:99:fe:93:29:24:6c:84:4d:73:81:25:e6:df:
         ed:99:4d:37:07:7c:32:a1:6f:35:47:4d:38:39:7e:16:13:ea:
         45:b2:d2:55:46:1e:83:d1:3e:fa:f7:53:5b:58:e0:01:20:76:
         3b:08:3c:89:ae:24:98:b4:e1:a4:b7:ca:be:68:35:1c:46:70:
         e9:0c:05:85:76:7b:57:78:27:b1:f6:6a:f8:62:e2:ec:43:70:
         9d:d7:4b:56:30:44:30:53:d3:42:d2:09:ac:78:a2:59:f6:3c:
         7e:9d:d4:f3:03:df:2c:9e:da:a6:11:13:fb:1c:78:36:da:31:
         62:e1:9d:6d:33:fa:b5:b3:05:47:6b:2f:67:51:c4:ea:36:d0:
         2c:fe:0a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:21:56 2026 by rpki-client