Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft
File:                     LnNTksaGuNjciMDM1Zvyrvun6LA.mft (raw, json)
Hash identifier:          n/8+KhtkFsrRROv6L107+rYF9d5pwv5anXQo6OupB3c=
Subject key identifier:   D7:4E:10:B3:36:51:23:A0:55:88:F9:22:BB:8A:21:A7:7F:A4:6B:DA
Authority key identifier: 2E:73:53:92:C6:86:B8:D8:DC:88:C0:CC:D5:9B:F2:AE:FB:A7:E8:B0
Certificate issuer:       /CN=A911D340/serialNumber=2E735392C686B8D8DC88C0CCD59BF2AEFBA7E8B0
Certificate serial:       0C11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft
Manifest number:          0C06
Signing time:             Tue 28 Jul 2026 19:04:33 +0000
Manifest this update:     Tue 28 Jul 2026 19:04:32 +0000
Manifest next update:     Tue 04 Aug 2026 19:04:32 +0000
Files and hashes:         1: LnNTksaGuNjciMDM1Zvyrvun6LA.crl (hash: e2wBHx5wqMgOg/g2xK12n2hJpJ7VCz7X7yCQwgfEmY0=)
                          2: 14B2A85C3DA611EAAD093F5EC4F9AE02.roa (hash: 57IyN+j5ROGuU5ynfQIQti4jxcGtYYtyy6B0K7wr+nU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.crl
                          rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:04:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3089 (0xc11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D340, serialNumber=2E735392C686B8D8DC88C0CCD59BF2AEFBA7E8B0
        Validity
            Not Before: Jul 28 19:04:32 2026 GMT
            Not After : Aug  4 19:04:32 2026 GMT
        Subject: CN=6a68fd41-af02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:1e:4e:48:75:34:b3:c4:55:4f:3a:4d:42:47:
                    74:46:45:ec:ef:49:c2:c7:9b:eb:18:75:0b:20:48:
                    50:c4:50:b1:bc:e4:7a:69:a6:64:0d:ef:ec:36:ca:
                    a6:ac:3a:5b:69:2e:c5:52:bb:52:38:65:64:f2:5f:
                    66:bc:14:64:36:7b:1f:67:93:10:db:73:59:9a:60:
                    03:16:f2:8a:2c:c8:b8:5a:38:4b:3b:8f:0c:ab:bf:
                    2b:a6:4e:ee:c3:6f:11:e7:fd:c1:ef:bd:89:65:52:
                    66:41:5d:26:a7:07:02:cf:50:d0:05:05:e8:0b:85:
                    09:82:2f:f5:0f:a7:2f:6c:01:13:28:fb:1f:26:1d:
                    29:ed:cb:a4:90:46:4b:5a:fd:93:82:48:e3:50:0b:
                    4a:02:1d:c9:bc:68:92:24:a6:a7:e2:ca:ef:7c:c1:
                    9d:81:c6:8a:5c:dd:4a:70:4a:af:06:eb:4e:0e:38:
                    fd:ca:9a:54:1d:96:f1:d4:ad:0f:1f:d0:5c:aa:5e:
                    8d:c3:5c:2d:f2:19:a2:22:ac:1e:5e:a6:d6:db:83:
                    c6:3b:e0:57:1f:d0:be:e3:b1:6a:46:7d:46:13:40:
                    e7:19:e0:41:4a:49:6c:8f:2f:0e:a7:6d:85:10:ce:
                    5b:3b:34:ba:68:e2:16:2c:32:e6:78:3d:a5:63:8e:
                    07:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:4E:10:B3:36:51:23:A0:55:88:F9:22:BB:8A:21:A7:7F:A4:6B:DA
            X509v3 Authority Key Identifier:
                keyid:2E:73:53:92:C6:86:B8:D8:DC:88:C0:CC:D5:9B:F2:AE:FB:A7:E8:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:41:11:ff:a1:1c:c9:7f:51:74:86:c2:c1:cb:e4:cd:03:a5:
         a6:fc:91:d3:c2:8b:42:c1:c8:5a:f6:93:4d:9e:f2:b6:45:f0:
         cb:e1:f5:aa:e5:96:88:37:85:5a:69:e6:5d:6f:e4:cb:4f:10:
         ce:c1:05:0f:13:8d:6d:ea:c0:1f:b9:60:35:58:8b:a8:c5:39:
         2c:7b:c9:74:83:cb:ca:bf:46:03:b9:ef:92:77:c9:18:15:00:
         cc:5e:77:d9:87:c8:28:02:ae:fe:c8:f8:22:36:b4:a0:53:aa:
         87:89:ff:21:34:85:11:df:f4:c3:80:70:00:23:10:c9:12:49:
         f9:8f:54:16:25:0d:a3:d0:58:25:41:33:96:e0:aa:46:23:18:
         b2:c1:27:9f:90:6e:db:b1:4f:df:19:42:f5:7e:6a:11:80:f4:
         8d:32:59:78:9c:da:10:b5:c0:f6:c9:9d:db:6e:77:a9:b6:0c:
         35:c6:85:e3:30:06:64:3b:4d:e8:23:5d:cc:b7:7a:69:04:96:
         94:31:7c:3d:99:a7:f7:c9:6b:87:73:dc:27:ce:e5:22:a7:38:
         d7:1c:f0:78:cc:7c:d7:d6:17:ef:64:90:80:8b:b8:40:06:05:
         09:b0:f8:36:04:86:b5:b8:99:23:4f:fc:56:da:d5:08:6e:f9:
         f0:db:c4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:48:13 2026 by rpki-client