Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft
File:                     lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft (raw, json)
Hash identifier:          50Z4XhZKr57V1wf9eRKwrj1UPaQT5ulGOMLHB+JGiw0=
Subject key identifier:   0F:DA:7D:3E:F9:49:97:DF:A2:90:94:0C:3F:CB:B7:14:46:67:96:BE
Authority key identifier: 97:37:71:30:04:81:9B:6B:66:FC:56:E6:EC:86:BE:4D:C2:E2:8E:17
Certificate issuer:       /CN=A91A1C06/serialNumber=9737713004819B6B66FC56E6EC86BE4DC2E28E17
Certificate serial:       357E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft
Manifest number:          356B
Signing time:             Fri 12 Jun 2026 14:58:49 +0000
Manifest this update:     Fri 12 Jun 2026 14:58:48 +0000
Manifest next update:     Fri 19 Jun 2026 14:58:48 +0000
Files and hashes:         1: lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl (hash: T2asLdf95lRGeVlRuugwdvtVX/Np4ZjF1O4TY4ckzL0=)
                          2: F3E1B79CB8F811F08ABED010C4F9AE02.roa (hash: tS4RWCL5pxa5UjyzIdHh2QDGb2clP9SaVI3vEhg55R8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl
                          rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 14:58:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13694 (0x357e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1C06, serialNumber=9737713004819B6B66FC56E6EC86BE4DC2E28E17
        Validity
            Not Before: Jun 12 14:58:48 2026 GMT
            Not After : Jun 19 14:58:48 2026 GMT
        Subject: CN=6a2c1ea8-5d94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:b6:8d:f6:fb:95:fb:19:b3:86:86:09:54:1e:
                    0f:a1:8f:7f:af:fd:68:b9:32:61:51:46:fb:bf:ab:
                    ec:15:47:54:0b:8f:9b:53:3e:37:2a:5d:6e:1d:bd:
                    e6:1d:93:5e:e2:88:8a:fc:67:dc:59:c4:f8:f9:f6:
                    1b:6b:5c:2d:18:83:e9:fb:7d:75:19:90:87:97:b6:
                    2a:a0:af:1d:22:bd:1f:a3:f9:88:2b:f0:82:44:5f:
                    ea:d4:b3:74:e2:86:06:31:51:18:54:22:ca:5f:ed:
                    b7:cf:f8:58:4b:df:d2:ae:08:05:ee:6d:24:bc:9e:
                    bc:d9:ad:4a:1b:9d:7a:5f:23:f1:9f:08:c6:e5:2c:
                    1b:3d:06:09:7d:21:66:97:50:07:cd:c8:62:a5:32:
                    18:05:76:6a:59:dd:76:b5:f6:70:91:28:32:02:4e:
                    e0:eb:b8:85:30:29:5a:9b:31:36:65:04:32:e3:cf:
                    09:37:65:ea:e0:01:88:95:61:53:58:f8:7f:5f:02:
                    68:8a:36:10:2a:58:fe:0b:3e:20:22:31:72:9b:f9:
                    0f:f5:83:b8:4b:63:36:6e:e5:06:5d:be:be:09:5e:
                    c6:54:bb:61:6b:ad:a0:fa:cf:62:35:f4:29:59:83:
                    44:f5:66:8f:71:27:66:bb:db:5e:8a:2b:84:2e:49:
                    ff:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:DA:7D:3E:F9:49:97:DF:A2:90:94:0C:3F:CB:B7:14:46:67:96:BE
            X509v3 Authority Key Identifier:
                keyid:97:37:71:30:04:81:9B:6B:66:FC:56:E6:EC:86:BE:4D:C2:E2:8E:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:b4:c5:ae:ca:45:42:48:df:e4:cd:7a:a4:b1:54:26:85:c9:
         69:67:f8:a2:7b:5e:8a:fa:70:75:a8:b4:83:62:e7:62:ea:f9:
         19:22:16:5e:91:e5:8d:87:65:37:af:49:b9:02:77:1e:92:ae:
         ea:83:29:fa:2e:7c:66:ba:d5:5e:50:01:89:6c:19:27:4f:7b:
         8c:fd:d0:7c:08:fc:21:48:ee:4f:77:40:01:c5:17:94:13:ec:
         8e:dc:0b:e4:80:fe:c4:fa:1c:da:40:f3:be:0c:3e:05:c5:f0:
         ad:23:5f:db:32:1a:33:51:a2:30:d0:08:e0:c9:e5:77:41:e9:
         54:64:d5:85:34:b8:d4:83:da:d5:0a:50:de:80:58:91:47:6a:
         d4:a6:d3:a5:b3:96:ab:56:25:41:d4:6f:c3:5e:ef:34:8b:d3:
         38:bd:91:6d:88:8c:7c:bb:32:3a:84:25:e6:cf:2b:28:c8:5f:
         67:24:c6:f1:d4:f2:4d:01:b4:1f:52:07:1d:a9:ff:4b:bf:4b:
         bd:32:85:3c:8f:43:83:b8:75:c3:02:dd:0a:b8:a4:3b:c9:61:
         30:f6:41:9c:c4:70:94:e9:87:21:a1:cc:7c:bb:5c:6f:8d:f5:
         b2:97:8b:a5:ad:63:9d:4a:a3:58:83:2a:10:5f:12:3d:a8:00:
         f8:44:4c:02
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTFDMDYxMTAvBgNVBAUTKDk3Mzc3MTMwMDQ4MTlCNkI2NkZDNTZFNkVDODZCRTRE
QzJFMjhFMTcwHhcNMjYwNjEyMTQ1ODQ4WhcNMjYwNjE5MTQ1ODQ4WjAYMRYwFAYD
VQQDEw02YTJjMWVhOC01ZDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA97aN9vuV+xmzhoYJVB4PoY9/r/1ouTJhUUb7v6vsFUdUC4+bUz43Kl1uHb3m
HZNe4oiK/GfcWcT4+fYba1wtGIPp+311GZCHl7YqoK8dIr0fo/mIK/CCRF/q1LN0
4oYGMVEYVCLKX+23z/hYS9/SrggF7m0kvJ682a1KG516XyPxnwjG5SwbPQYJfSFm
l1AHzchipTIYBXZqWd12tfZwkSgyAk7g67iFMClamzE2ZQQy488JN2Xq4AGIlWFT
WPh/XwJoijYQKlj+Cz4gIjFym/kP9YO4S2M2buUGXb6+CV7GVLtha62g+s9iNfQp
WYNE9WaPcSdmu9teiiuELkn/EQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA/afT75
SZffopCUDD/LtxRGZ5a+MB8GA1UdIwQYMBaAFJc3cTAEgZtrZvxW5uyGvk3C4o4X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUMwNi82REVBRTIxQzFE
OUQxMUUyOEIxRkE3OEMwOEIwMkNEMi9semR4TUFTQm0ydG1fRmJtN0lhLVRjTGlq
aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2x6ZHhNQVNCbTJ0bV9GYm03SWEtVGNMaWpoYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MUMwNi82REVBRTIxQzFEOUQxMUUyOEIxRkE3OEMwOEIwMkNEMi9semR4TUFTQm0y
dG1fRmJtN0lhLVRjTGlqaGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAd7TFrspFQkjf5M16pLFUJoXJaWf4onteivpwdai0g2LnYur5GSIWXpHljYdl
N69JuQJ3HpKu6oMp+i58ZrrVXlABiWwZJ097jP3QfAj8IUjuT3dAAcUXlBPsjtwL
5ID+xPoc2kDzvgw+BcXwrSNf2zIaM1GiMNAI4Mnld0HpVGTVhTS41IPa1QpQ3oBY
kUdq1KbTpbOWq1YlQdRvw17vNIvTOL2RbYiMfLsyOoQl5s8rKMhfZyTG8dTyTQG0
H1IHHan/S79LvTKFPI9Dg7h1wwLdCrikO8lhMPZBnMRwlOmHIaHMfLtcb431speL
pa1jnUqjWIMqEF8SPagA+ERMAg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:49:53 2026 by rpki-client