Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft
File:                     ak_LGM3Y70HSMyE57mLo_Sc7b98.mft (raw, json)
Hash identifier:          wwwBMNnHKshPlcLrNiYOTOn2QlrgdRf1jxnOkj72v/c=
Subject key identifier:   26:2D:50:CD:E4:BE:06:85:78:50:FE:C0:46:53:FE:E6:97:85:A2:C3
Authority key identifier: 6A:4F:CB:18:CD:D8:EF:41:D2:33:21:39:EE:62:E8:FD:27:3B:6F:DF
Certificate issuer:       /CN=A9199B85/serialNumber=6A4FCB18CDD8EF41D2332139EE62E8FD273B6FDF
Certificate serial:       033B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft
Manifest number:          0337
Signing time:             Sun 01 Mar 2026 01:51:28 +0000
Manifest this update:     Sun 01 Mar 2026 01:51:28 +0000
Manifest next update:     Sun 08 Mar 2026 01:51:28 +0000
Files and hashes:         1: ak_LGM3Y70HSMyE57mLo_Sc7b98.crl (hash: 1PjkhWreuO9POQayPX2i3fMdtm0aNGuGlbCVpWCITI8=)
                          2: EF1B381EF93911ECBD1E663DC4F9AE02.roa (hash: LqMQ8S/3IECVVRLn50FlnyT89fd2Q+6nyvw3xYa+ytU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.crl
                          rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 01:51:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 827 (0x33b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199B85, serialNumber=6A4FCB18CDD8EF41D2332139EE62E8FD273B6FDF
        Validity
            Not Before: Mar  1 01:51:28 2026 GMT
            Not After : Mar  8 01:51:28 2026 GMT
        Subject: CN=69a39ba0-ea4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e2:fb:73:bb:9b:af:fc:d1:06:0b:25:d0:c7:
                    ef:ac:f1:f8:86:05:a6:d2:91:2d:8a:37:18:d1:f6:
                    ba:cd:19:76:88:96:0a:87:60:bf:2b:7c:60:f2:36:
                    e2:ce:2f:16:84:31:14:e7:dd:cc:d8:0e:3c:86:37:
                    56:08:24:f6:59:6e:5a:79:c4:a4:6b:77:5b:0e:92:
                    cb:8f:bc:5c:32:6d:93:ad:03:95:21:89:0b:87:28:
                    0d:c5:27:8c:72:ce:28:0c:c8:7f:8b:35:88:f3:03:
                    e1:8b:12:be:39:9b:29:26:98:77:0a:8d:75:40:fd:
                    99:f0:a6:a6:05:3b:2a:7a:4a:5f:45:c6:c4:b1:18:
                    43:cb:8f:d2:82:df:d2:08:72:b5:fb:3a:0d:2e:65:
                    3d:42:28:d4:6c:9c:5e:b5:15:5a:87:7d:11:60:7c:
                    50:08:95:1d:8f:53:f1:aa:c1:78:33:96:80:77:ed:
                    77:cb:22:01:69:30:fc:e0:a2:b1:dc:9b:20:1e:94:
                    da:4d:fd:55:20:f2:62:1c:c2:e4:e6:1d:ec:fd:75:
                    e0:13:8e:81:98:df:a9:6e:0b:a3:b6:d5:2b:a4:5a:
                    1a:39:eb:f2:7f:56:ae:85:22:53:60:de:8f:39:95:
                    af:8b:46:d2:09:c1:f0:84:09:c3:ab:e5:81:3c:4b:
                    d7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:2D:50:CD:E4:BE:06:85:78:50:FE:C0:46:53:FE:E6:97:85:A2:C3
            X509v3 Authority Key Identifier:
                keyid:6A:4F:CB:18:CD:D8:EF:41:D2:33:21:39:EE:62:E8:FD:27:3B:6F:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:ba:e4:4b:4c:4f:8b:39:c6:b5:db:89:6a:97:c1:ca:92:58:
         5c:5a:d1:bc:01:e2:fd:ec:e4:b3:e6:0a:9f:87:b2:79:7a:59:
         bc:4e:55:46:58:83:16:ea:1d:45:5c:84:b5:e0:b5:38:9e:77:
         00:4f:b5:eb:33:16:cf:c4:40:07:19:cf:4d:76:6f:a1:2e:f7:
         e9:83:bc:16:5f:41:c4:57:47:d3:a9:00:e2:d5:a1:b4:41:07:
         ba:7f:44:cb:44:fb:79:04:3a:d3:07:4c:41:4e:fd:ac:ab:ee:
         64:1e:f6:24:32:b4:36:03:14:b1:94:fa:cf:01:b9:ee:e7:2b:
         65:37:ac:e8:9f:7c:df:37:e3:a3:57:c6:50:d2:76:53:a4:77:
         08:46:ad:81:67:34:f7:fc:08:14:a3:73:92:55:90:76:37:41:
         47:96:ac:c8:36:a6:f7:7e:8d:a7:4b:c3:82:3f:11:f1:1a:95:
         d5:ff:79:5d:cc:bb:94:ec:45:12:c1:67:87:f8:49:b8:68:f1:
         90:4a:93:08:28:12:42:b1:4e:e7:14:af:85:57:4a:d0:d5:73:
         7e:61:41:37:08:4d:e7:03:fd:04:a9:6c:86:b7:a6:17:ca:2d:
         0c:7a:ed:8f:5f:5e:e4:6b:16:f2:b7:3d:12:3c:ba:75:a2:90:
         ff:ae:29:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:12:43 2026 by rpki-client