Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
File:                     ljP2L_shhnbryT8cN2lknAxdhN8.mft (raw, json)
Hash identifier:          qsF0NtAjcT/TZpX2U1AwluXjNrhYy65DOFEislY/ZVM=
Subject key identifier:   EF:A0:71:93:D1:DA:8C:72:EC:46:C4:F8:3B:B7:8B:D0:FC:1B:60:26
Authority key identifier: 96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF
Certificate issuer:       /CN=A91F20F8/serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF
Certificate serial:       0230
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
Manifest number:          0226
Signing time:             Wed 13 May 2026 02:54:50 +0000
Manifest this update:     Wed 13 May 2026 02:54:50 +0000
Manifest next update:     Wed 20 May 2026 02:54:50 +0000
Files and hashes:         1: ljP2L_shhnbryT8cN2lknAxdhN8.crl (hash: me6eqC0ClLufiztEFQD8eNMTI4KuacPPb2cbdcB6jbA=)
                          2: 95FE27F02D1511F19EAB6E70B3833773.roa (hash: hxELHtGIUsJ5X6fDwKBBUuO929IKOwxoHEeRfQefsOg=)
                          3: 3304B5BA43B311F19399644A98833773.roa (hash: bzOsUU4L5zybRan2RbEqjLxhGbEC4X30U/TXsNv87pc=)
                          4: 6445C13C2D1511F18C0F846BB3833773.roa (hash: PLgXnUtV5/qDMTfK+s5CXVumrPmYkILffVNAYNUoLk4=)
                          5: AD4C18D62D1511F19E800787B3833773.roa (hash: gF6FfjxDgiZ5qTPAnk0dNcAHblND2UNyNpInYeZ2Rc8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl
                          rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 560 (0x230)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F20F8, serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF
        Validity
            Not Before: May 13 02:54:50 2026 GMT
            Not After : May 20 02:54:50 2026 GMT
        Subject: CN=6a03e7fa-30f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6c:1d:ff:46:f3:23:bb:d9:40:4c:8d:cf:7f:
                    b4:b7:5d:af:2f:1d:04:61:9f:75:02:d5:3c:73:b7:
                    a8:ca:2b:20:bb:22:11:e1:3b:e1:a4:6b:1d:8f:a0:
                    21:ce:16:92:ce:7e:7a:19:20:21:8a:f0:e2:d5:c8:
                    27:68:b5:bb:01:71:f8:6b:d2:ce:1c:77:8f:62:c3:
                    6c:86:fb:fe:44:7c:2a:42:5a:ed:47:e8:c5:84:68:
                    1e:e3:ab:3e:45:a7:99:c4:2e:40:a3:04:71:16:72:
                    da:b8:cd:25:e4:30:b7:ae:64:dc:2b:6d:bc:e3:ec:
                    ae:5e:9f:9f:b8:c2:a4:3e:b6:25:41:55:dc:df:40:
                    82:0c:96:fa:5a:6d:e1:d4:b1:e9:92:de:38:4a:74:
                    6c:f0:bb:4a:f9:5b:43:6c:a0:6c:47:c4:e4:84:c7:
                    d4:c2:89:41:8b:7e:20:3b:f1:42:4f:86:7f:18:d6:
                    ba:78:92:a3:a9:59:30:4b:62:96:42:5d:17:c9:46:
                    fa:c3:62:71:ef:69:b7:53:df:c1:73:74:08:82:3f:
                    05:2e:34:c5:36:56:88:77:38:47:f1:e4:0f:45:bf:
                    a4:5f:32:bf:e9:64:a8:f7:d8:4e:e1:01:dc:fa:53:
                    8c:7f:df:48:dd:99:05:47:bb:82:ea:64:d2:7e:6c:
                    df:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A0:71:93:D1:DA:8C:72:EC:46:C4:F8:3B:B7:8B:D0:FC:1B:60:26
            X509v3 Authority Key Identifier:
                keyid:96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:9d:37:9a:ae:be:4f:4b:9e:9a:d6:02:7f:79:a4:c4:46:31:
         4d:55:16:db:cb:34:73:03:c0:67:08:a4:93:43:1a:66:15:9e:
         82:7b:5a:0f:24:a0:09:fd:84:7b:83:fb:2f:97:cf:17:bc:dc:
         b0:98:2e:69:88:62:db:59:db:e9:7b:95:dc:fb:25:7b:67:41:
         0e:14:ab:5e:46:b1:9f:6d:d0:50:f4:87:cb:ec:0e:ba:aa:07:
         3f:c2:5b:9b:e3:fe:a4:d2:ec:95:17:83:c8:45:b8:a7:0f:8b:
         d2:f8:82:16:39:5e:14:1f:1f:ef:4d:d3:8e:09:e0:6c:68:b3:
         46:91:7b:c4:58:8a:b9:6c:f3:a3:c7:af:3d:c2:0c:b1:05:79:
         31:8f:62:b1:cd:37:14:f2:7e:8d:ea:e8:13:71:a7:e7:79:bd:
         74:c8:f3:07:e8:cd:e4:29:95:93:22:2b:2b:6f:8e:97:46:9a:
         bb:0b:00:be:25:e0:41:92:e6:e0:16:39:a3:1a:4e:ab:ad:dc:
         a1:9a:05:10:88:66:91:d1:84:a8:dc:d1:a6:b7:74:c7:ae:48:
         cc:69:a8:73:cd:b8:a3:ff:67:e2:0f:43:12:93:17:2b:08:c3:
         ce:38:fe:2e:84:02:45:17:42:70:fb:f8:89:96:b1:07:51:ed:
         bb:74:35:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:24:33 2026 by rpki-client