Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/L6lxpjvCY6602uvyDC_HEYPKZI8.mft
File:                     L6lxpjvCY6602uvyDC_HEYPKZI8.mft (raw, json)
Hash identifier:          iS5h+XmWhQvvFRzXo8LTdurHHQcfvszMUpHI+BKPmUI=
Subject key identifier:   38:C3:0E:49:8C:F7:98:0D:BB:9A:90:FF:21:3C:E9:7E:6A:FF:96:2C
Authority key identifier: 2F:A9:71:A6:3B:C2:63:AE:B4:DA:EB:F2:0C:2F:C7:11:83:CA:64:8F
Certificate issuer:       /CN=A91F5DFB/serialNumber=2FA971A63BC263AEB4DAEBF20C2FC71183CA648F
Certificate serial:       3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L6lxpjvCY6602uvyDC_HEYPKZI8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/L6lxpjvCY6602uvyDC_HEYPKZI8.mft
Manifest number:          38
Signing time:             Mon 11 May 2026 08:45:21 +0000
Manifest this update:     Mon 11 May 2026 08:45:21 +0000
Manifest next update:     Mon 18 May 2026 08:45:21 +0000
Files and hashes:         1: L6lxpjvCY6602uvyDC_HEYPKZI8.crl (hash: qRkt9fDfWVTOL4oLDjSV/Lg/72pcy8pDEX+LF37WTQI=)
                          2: 3C5B5EF4FDC011F0B8AD40E9676F56BC.roa (hash: BSJrDK4V2E7MvwhAcVSpnI4UVhMcWhhRV5ZmWLsrKWM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/L6lxpjvCY6602uvyDC_HEYPKZI8.crl
                          rsync://rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/L6lxpjvCY6602uvyDC_HEYPKZI8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L6lxpjvCY6602uvyDC_HEYPKZI8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:45:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5DFB, serialNumber=2FA971A63BC263AEB4DAEBF20C2FC71183CA648F
        Validity
            Not Before: May 11 08:45:21 2026 GMT
            Not After : May 18 08:45:21 2026 GMT
        Subject: CN=6a019721-fecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c5:8a:36:3b:f3:72:c4:67:a7:68:ed:99:8f:
                    1c:21:eb:f0:3d:f6:1e:06:f8:bb:20:4e:05:bb:17:
                    6c:63:6b:1d:e3:4e:eb:f1:d4:e6:7c:46:8b:3a:da:
                    3c:19:38:5a:9c:8f:80:f7:00:0d:fa:ac:84:37:9d:
                    d3:b4:3b:96:9f:cc:73:84:03:2d:bf:61:ab:2b:3a:
                    70:41:00:4c:30:08:ce:16:8f:75:a7:69:65:04:e6:
                    2f:02:d7:f0:3a:bb:51:01:a1:5f:4f:62:5a:2f:b7:
                    1f:2e:cd:fb:94:06:05:3a:70:e1:bb:fe:f7:0b:8f:
                    33:a3:92:ef:90:3f:cd:af:6f:83:03:af:f6:cd:ab:
                    7d:f3:2b:45:05:63:b6:62:d0:d9:62:a4:4e:20:36:
                    6c:33:c2:2d:2f:dd:bf:0e:17:5a:cd:bf:98:bb:d8:
                    12:12:d2:58:d1:8b:8e:f3:b8:f7:dc:8c:c7:5d:44:
                    0c:79:c6:fe:d1:b5:64:f3:e5:40:50:8e:ba:c0:c4:
                    33:64:7f:bb:bb:c0:ca:d6:cf:78:d5:97:67:a5:47:
                    d5:48:3e:72:75:40:6b:46:48:67:5a:3f:05:6f:22:
                    8c:b0:5f:0b:14:ac:97:9c:7b:7a:14:3f:43:ec:a3:
                    83:67:10:21:5d:a9:24:b7:2f:3c:5f:ac:65:63:8b:
                    fb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C3:0E:49:8C:F7:98:0D:BB:9A:90:FF:21:3C:E9:7E:6A:FF:96:2C
            X509v3 Authority Key Identifier:
                keyid:2F:A9:71:A6:3B:C2:63:AE:B4:DA:EB:F2:0C:2F:C7:11:83:CA:64:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/L6lxpjvCY6602uvyDC_HEYPKZI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L6lxpjvCY6602uvyDC_HEYPKZI8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/L6lxpjvCY6602uvyDC_HEYPKZI8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:9d:ec:44:21:f9:a0:90:16:08:7e:ef:7e:05:22:57:c1:cd:
         3c:e1:47:94:db:c7:2a:34:bd:f1:95:a0:0f:44:bb:ce:eb:fe:
         a6:80:89:cf:4c:d9:ab:28:76:88:fe:a3:77:d7:ea:b9:a7:21:
         b0:41:e1:73:dd:f4:c8:ef:c0:1a:11:9f:ba:b3:23:e2:b3:72:
         a7:d4:02:1c:58:15:39:26:81:e2:88:76:1e:8d:fd:42:1e:0f:
         17:9e:c8:12:54:8c:8f:c3:6a:b9:29:d1:f1:17:d3:36:28:13:
         3a:e8:76:70:7d:d0:65:31:ea:cc:fa:3c:41:5e:aa:d7:67:39:
         6c:09:d2:e6:f3:09:a6:75:b9:e8:2d:34:48:46:0a:73:8c:4c:
         ce:26:3f:1b:a9:15:c3:fe:ae:00:57:df:ad:d7:93:6d:43:45:
         11:e2:68:2f:cf:63:41:9d:2c:07:fe:91:e6:47:80:11:4b:81:
         3b:83:8a:8a:9e:d5:1d:8a:93:f8:17:2b:c0:5c:15:73:c9:8c:
         9a:ef:e2:1b:90:15:81:11:1a:49:6d:bf:a0:aa:30:43:b4:d9:
         ff:f7:df:a1:24:82:1b:a6:d2:a9:42:2b:73:8b:6a:3a:d2:e5:
         e1:65:52:bc:d0:66:b8:dc:77:35:a5:14:3f:e2:a4:d0:a9:a8:
         49:f0:9e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:43:27 2026 by rpki-client