Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
File:                     lXRSk8iKJybhClfVj0LMMWm3ySI.mft (raw, json)
Hash identifier:          E6GLyQmEbQOt76MH2y20P3HO3K8OKVWfQlaMoDQVfk4=
Subject key identifier:   9B:7D:D6:D3:68:04:13:8A:A6:6B:C4:1F:18:15:A6:20:8A:43:F8:7D
Authority key identifier: 95:74:52:93:C8:8A:27:26:E1:0A:57:D5:8F:42:CC:31:69:B7:C9:22
Certificate issuer:       /CN=A91144C9/serialNumber=95745293C88A2726E10A57D58F42CC3169B7C922
Certificate serial:       0102
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
Manifest number:          F3
Signing time:             Wed 17 Jun 2026 07:36:46 +0000
Manifest this update:     Wed 17 Jun 2026 07:36:46 +0000
Manifest next update:     Wed 24 Jun 2026 07:36:46 +0000
Files and hashes:         1: lXRSk8iKJybhClfVj0LMMWm3ySI.crl (hash: nbyd1B6x4E7La3naJDtkJaIAl3hBe4y9GxTSj3UhOwM=)
                          2: 98DD71780ECC11F0B8E48170C4F9AE02.roa (hash: IaV3dmr7MH64uEELqjBq/78684gUfePzw+oStPl/t4w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.crl
                          rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91144C9, serialNumber=95745293C88A2726E10A57D58F42CC3169B7C922
        Validity
            Not Before: Jun 17 07:36:46 2026 GMT
            Not After : Jun 24 07:36:46 2026 GMT
        Subject: CN=6a324e8e-9bb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:74:ae:dd:cd:d1:75:5d:de:da:01:b6:c5:27:
                    c0:f7:b1:26:1d:f4:cf:60:97:96:2e:9a:63:9b:6e:
                    44:cd:6a:83:35:cd:9f:0c:db:5b:fb:ab:72:c8:fe:
                    d2:11:d1:a3:ad:d4:17:9d:f4:9a:52:6a:2b:62:24:
                    00:d8:94:e0:a4:50:0c:b2:e5:87:1d:e4:d8:fe:66:
                    ad:64:94:5d:ae:c6:d6:a7:42:44:ac:8e:82:dc:e6:
                    b1:8c:ea:10:c3:2d:7c:71:16:92:92:af:3f:b3:11:
                    68:d9:94:df:cd:eb:8c:07:06:11:f0:a4:30:b0:0a:
                    d5:a6:6b:79:0d:72:9f:42:b4:7d:6b:59:86:da:16:
                    f1:cf:ec:31:6e:e1:2c:53:f2:e2:20:1a:d4:11:8b:
                    c2:53:a9:5a:f8:48:01:a7:74:2a:40:22:a6:75:dd:
                    e2:ee:69:04:31:64:06:2b:5d:80:e6:91:6b:a1:60:
                    7c:b1:23:cb:5f:c2:52:b7:75:bf:9c:54:47:1c:12:
                    c4:92:db:2e:f8:81:8b:58:af:76:13:45:91:33:97:
                    7f:46:63:f8:c0:88:73:ef:ee:5b:5a:8a:98:93:31:
                    59:83:95:91:89:63:1b:6c:e8:ea:cf:81:a3:3e:f2:
                    be:d8:56:19:70:ae:f3:05:3d:94:ec:54:5d:92:8e:
                    87:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:7D:D6:D3:68:04:13:8A:A6:6B:C4:1F:18:15:A6:20:8A:43:F8:7D
            X509v3 Authority Key Identifier:
                keyid:95:74:52:93:C8:8A:27:26:E1:0A:57:D5:8F:42:CC:31:69:B7:C9:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:30:f0:99:a1:6d:2b:6b:95:62:8e:a1:4f:44:a8:66:84:f4:
         1d:89:ea:f2:29:a7:51:cb:35:5b:e6:96:d9:43:03:03:f9:29:
         b1:6f:5a:db:93:7a:47:84:4f:d1:3d:69:c4:53:51:57:f2:83:
         61:e1:e7:17:46:32:8a:f6:4e:94:e2:2b:6f:4b:f6:f1:93:17:
         40:d4:13:d6:a9:cc:69:58:c0:b6:e8:3b:ab:e8:7c:1a:58:f4:
         20:de:dc:57:35:f8:77:3c:78:00:00:f4:52:f9:eb:49:9e:97:
         01:df:fd:67:fc:c6:5b:4a:ac:9c:d0:d6:69:fe:8c:4f:3e:b6:
         f7:36:ca:b6:01:2d:08:cb:b7:2b:ed:b2:67:d8:da:05:6d:57:
         ac:30:ee:5c:ea:84:45:4d:19:09:06:1b:e4:a7:f4:ab:bc:a6:
         fe:42:a9:a8:ca:7c:98:28:47:c6:6b:c2:06:85:b5:c1:bb:cb:
         3f:9f:63:e9:56:8d:11:b5:ff:1d:f5:de:53:ff:08:56:fd:c4:
         34:43:4e:4b:78:5d:60:af:f1:cf:c1:92:ce:70:fa:0b:b9:51:
         83:4e:79:b0:7a:ba:87:bd:87:52:60:1c:0c:ff:c4:ad:62:86:
         a3:06:66:ca:b4:b2:21:29:95:53:41:07:a8:87:3f:fb:35:c8:
         5e:bf:14:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:38:32 2026 by rpki-client