Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft
File:                     1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft (raw, json)
Hash identifier:          1cGAp4vVYy5qMH/zyjAe1i/JGaXbwTHFQLlW435+trg=
Subject key identifier:   3B:80:BC:42:5C:AF:7B:47:64:52:1E:0D:74:0F:28:BB:E9:98:2C:34
Authority key identifier: D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52
Certificate issuer:       /CN=A911C2E1/serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52
Certificate serial:       0210
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft
Manifest number:          020B
Signing time:             Sat 13 Jun 2026 02:59:57 +0000
Manifest this update:     Sat 13 Jun 2026 02:59:57 +0000
Manifest next update:     Sat 20 Jun 2026 02:59:57 +0000
Files and hashes:         1: 1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl (hash: G5CeBMmevX9wLrWuUVtSVohyT3KseV3ZFnQl8C2mzO4=)
                          2: 3FE30722468C11EE9462EC3AC4F9AE02.roa (hash: GghlvZSMgFSIPZl/c13nz5F4JJXOhoiY0qEmjni18nQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl
                          rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:59:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 528 (0x210)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C2E1, serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52
        Validity
            Not Before: Jun 13 02:59:57 2026 GMT
            Not After : Jun 20 02:59:57 2026 GMT
        Subject: CN=6a2cc7ad-323b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c6:1f:ac:53:2e:d4:7c:bd:5a:0f:fd:c6:22:
                    0c:53:c5:45:56:fe:25:e8:12:38:e9:5f:49:c0:0e:
                    76:19:96:e7:cd:7f:df:9c:80:5a:5d:4a:76:d2:f5:
                    b0:5c:42:60:10:38:98:71:36:a1:d8:7f:19:05:6f:
                    f8:9b:90:25:17:6c:a8:fd:9b:5e:91:6c:09:14:70:
                    b5:5f:27:ba:fc:26:0f:1d:b5:5d:6c:bb:d5:85:fc:
                    ff:08:fe:cd:05:15:1a:97:07:62:03:40:96:c4:df:
                    0f:5b:26:e8:bb:1d:1f:80:c8:bf:3c:44:db:02:ec:
                    d7:0c:d0:eb:89:48:ec:91:d7:e2:4c:ad:54:93:94:
                    86:4e:64:70:e5:8d:ee:15:0c:4b:52:30:b3:81:9d:
                    d5:a8:e8:f8:fb:e2:4e:42:bc:55:d0:e6:a7:6a:f2:
                    bb:78:88:2e:32:11:67:85:6e:b8:79:7d:b3:76:03:
                    12:dd:62:3e:48:2f:f5:c1:df:ac:63:8d:f4:76:19:
                    eb:46:c7:15:a1:c0:3d:1b:18:c2:7a:7d:f2:ec:3d:
                    55:ec:8c:ba:7b:55:42:38:86:40:c6:78:8b:54:c6:
                    97:93:81:0a:05:f2:65:ac:d5:52:ac:00:8b:37:f7:
                    12:59:1a:7b:d2:ee:3f:b3:34:75:b5:59:81:50:7f:
                    87:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:80:BC:42:5C:AF:7B:47:64:52:1E:0D:74:0F:28:BB:E9:98:2C:34
            X509v3 Authority Key Identifier:
                keyid:D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:09:a6:25:8e:d9:03:20:9e:f9:0e:4e:ba:d1:85:33:a7:64:
         4e:4a:a2:3c:e4:2e:83:de:12:e2:8e:dd:01:2e:56:09:93:67:
         e4:f0:80:5d:02:44:24:a9:c6:f0:cf:eb:1e:90:82:d9:f5:74:
         c5:16:18:d2:de:b7:99:ea:49:5e:12:a7:12:1b:2c:4d:60:4f:
         6e:3b:cc:66:c9:ca:2a:67:d0:58:7b:fd:53:b8:75:f5:36:f5:
         ea:fd:dc:8f:d5:c4:b3:88:0d:55:7f:cf:da:6e:e1:33:7e:30:
         ed:a5:20:d2:ff:05:1c:25:13:a2:fa:f2:89:1d:74:b2:58:19:
         b6:67:83:74:58:11:b6:4b:22:c5:6c:b2:db:88:3c:cb:9a:d3:
         31:ed:94:25:43:e2:26:1b:6b:6a:43:f2:a6:d6:f7:ca:9b:f3:
         dc:41:8a:fb:2a:26:2f:a9:0d:d5:9b:e6:59:1c:df:1b:0c:60:
         3c:5f:c4:a7:d3:11:56:4d:5a:31:02:64:ca:34:e2:92:88:47:
         55:21:5b:28:3e:d7:cc:26:96:4a:7b:e3:e2:6f:18:0c:bd:d3:
         8c:a8:6f:f7:96:37:ac:ee:67:03:3a:c7:85:24:18:8f:c2:c8:
         7a:59:7e:f6:82:84:68:3e:ae:2e:1e:a4:13:3c:42:56:59:92:
         b8:af:38:39
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUMyRTExMTAvBgNVBAUTKEQ0QkM3OUE0QjE1MzdGRUIwQUQ5MkVCM0YwQTdDQUYz
NDUzQThGNTIwHhcNMjYwNjEzMDI1OTU3WhcNMjYwNjIwMDI1OTU3WjAYMRYwFAYD
VQQDEw02YTJjYzdhZC0zMjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1sYfrFMu1Hy9Wg/9xiIMU8VFVv4l6BI46V9JwA52GZbnzX/fnIBaXUp20vWw
XEJgEDiYcTah2H8ZBW/4m5AlF2yo/ZtekWwJFHC1Xye6/CYPHbVdbLvVhfz/CP7N
BRUalwdiA0CWxN8PWyboux0fgMi/PETbAuzXDNDriUjskdfiTK1Uk5SGTmRw5Y3u
FQxLUjCzgZ3VqOj4++JOQrxV0OanavK7eIguMhFnhW64eX2zdgMS3WI+SC/1wd+s
Y430dhnrRscVocA9GxjCen3y7D1V7Iy6e1VCOIZAxniLVMaXk4EKBfJlrNVSrACL
N/cSWRp70u4/szR1tVmBUH+HZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDuAvEJc
r3tHZFIeDXQPKLvpmCw0MB8GA1UdIwQYMBaAFNS8eaSxU3/rCtkus/CnyvNFOo9S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzJFMS85MDQ3RUYwNDQ2
OEExMUVFODc5RUI1MzVDNEY5QUUwMi8xTHg1cExGVGYtc0syUzZ6OEtmSzgwVTZq
MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFMeDVwTEZUZi1zSzJTNno4S2ZLODBVNmoxSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QzJFMS85MDQ3RUYwNDQ2OEExMUVFODc5RUI1MzVDNEY5QUUwMi8xTHg1cExGVGYt
c0syUzZ6OEtmSzgwVTZqMUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAowmmJY7ZAyCe+Q5OutGFM6dkTkqiPOQug94S4o7dAS5WCZNn5PCAXQJEJKnG
8M/rHpCC2fV0xRYY0t63mepJXhKnEhssTWBPbjvMZsnKKmfQWHv9U7h19Tb16v3c
j9XEs4gNVX/P2m7hM34w7aUg0v8FHCUTovryiR10slgZtmeDdFgRtksixWyy24g8
y5rTMe2UJUPiJhtrakPyptb3ypvz3EGK+yomL6kN1ZvmWRzfGwxgPF/Ep9MRVk1a
MQJkyjTikohHVSFbKD7XzCaWSnvj4m8YDL3TjKhv95Y3rO5nAzrHhSQYj8LIell+
9oKEaD6uLh6kEzxCVlmSuK84OQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:17:11 2026 by rpki-client