Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft
File:                     L9JLb9eYBEVzVDhmYs4w3aOyALU.mft (raw, json)
Hash identifier:          QXLaUh371RCGe7gN1j7MuCyoFxPnzQS7m1LaBAZ1imU=
Subject key identifier:   FC:25:A2:F2:9E:1E:3E:31:EA:DC:DB:6B:E9:D1:3C:84:ED:E2:CC:A9
Authority key identifier: 2F:D2:4B:6F:D7:98:04:45:73:54:38:66:62:CE:30:DD:A3:B2:00:B5
Certificate issuer:       /CN=A91A29DA/serialNumber=2FD24B6FD79804457354386662CE30DDA3B200B5
Certificate serial:       01B8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L9JLb9eYBEVzVDhmYs4w3aOyALU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft
Manifest number:          01AF
Signing time:             Sat 13 Jun 2026 04:05:50 +0000
Manifest this update:     Sat 13 Jun 2026 04:05:49 +0000
Manifest next update:     Sat 20 Jun 2026 04:05:49 +0000
Files and hashes:         1: L9JLb9eYBEVzVDhmYs4w3aOyALU.crl (hash: +Q5Ag78G83SQYyA8HjtxmKnb2nD13NRF/7d/Rs5XWbI=)
                          2: C659227E3D9611F1B3BD8648C4833773.roa (hash: URpwa68ICBHx7NH87HQVK1oNTdznNSwb1RkzR4QbR8U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.crl
                          rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L9JLb9eYBEVzVDhmYs4w3aOyALU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 04:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 440 (0x1b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A29DA, serialNumber=2FD24B6FD79804457354386662CE30DDA3B200B5
        Validity
            Not Before: Jun 13 04:05:49 2026 GMT
            Not After : Jun 20 04:05:49 2026 GMT
        Subject: CN=6a2cd71d-5f0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:48:24:26:5f:32:3d:26:cc:b6:f9:be:d3:16:
                    7f:36:1c:75:e8:33:af:98:96:f4:f9:30:43:a0:eb:
                    ba:be:f4:a4:8f:44:4c:65:a0:28:9b:bb:d5:d1:85:
                    96:0a:4c:13:64:77:50:5c:d6:10:fd:ba:68:ef:5d:
                    93:1d:e2:b6:5f:fe:c0:ff:86:6a:6b:74:41:bb:a4:
                    35:0d:64:5a:a7:cf:5a:b7:2a:7c:26:2d:a5:17:e6:
                    e2:ad:39:2c:d5:67:90:cd:5a:49:a1:58:b5:df:df:
                    16:4a:b4:60:5b:ad:e1:ea:a0:a0:45:96:a7:2d:4b:
                    aa:2d:f2:55:0d:17:88:78:5d:4a:21:d3:df:7a:07:
                    fb:a1:5e:e0:5c:4e:7f:14:7f:cd:50:bf:a7:91:7e:
                    d9:90:74:b5:93:d4:56:81:d5:06:73:e1:50:cf:13:
                    0d:9e:50:59:2b:e8:28:7b:0f:ab:71:d0:5c:3d:84:
                    0f:45:b2:2f:c7:92:cb:a6:85:e0:b0:72:12:73:8f:
                    00:dc:e5:56:cc:a6:a9:ee:6e:04:05:61:a6:cd:28:
                    66:eb:c4:46:ab:4a:5f:10:f6:ac:b8:f2:91:b7:b5:
                    59:68:1c:8b:87:c4:5c:02:17:29:72:6a:35:ce:55:
                    48:a3:54:43:54:5f:5b:59:e1:19:fc:f1:59:93:40:
                    5d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:25:A2:F2:9E:1E:3E:31:EA:DC:DB:6B:E9:D1:3C:84:ED:E2:CC:A9
            X509v3 Authority Key Identifier:
                keyid:2F:D2:4B:6F:D7:98:04:45:73:54:38:66:62:CE:30:DD:A3:B2:00:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L9JLb9eYBEVzVDhmYs4w3aOyALU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:52:0e:aa:24:d2:6c:5b:60:41:08:a8:e8:9a:4d:1e:69:67:
         d6:0f:cc:27:0d:ce:37:b9:59:dc:4f:c7:54:3d:32:d9:a8:1c:
         7b:1d:b6:df:dc:2a:7a:38:e9:4b:54:92:4a:5a:2d:b2:94:8e:
         e8:a1:bf:d4:2d:40:42:08:ed:e0:b4:b7:ca:6c:58:e8:6a:0d:
         e8:9d:95:25:fa:2e:21:5d:42:50:5e:c8:03:cf:fa:01:22:49:
         7a:ba:98:3f:1b:b8:40:7f:3d:58:6b:9f:f1:9b:2d:fb:d2:d1:
         8b:7a:4e:c0:a5:0b:6b:c4:25:f7:dd:d3:62:a1:35:50:50:cc:
         8c:71:01:f9:76:95:3f:5e:3e:05:e6:1d:9c:f6:84:55:c7:67:
         c8:21:be:ff:80:50:87:2e:95:e2:20:f6:a9:18:01:3f:12:ef:
         41:6c:36:a4:d9:fb:75:6f:39:56:70:69:c1:7b:3d:f9:8d:39:
         48:f2:43:5b:0a:90:bc:27:b5:53:14:0b:1c:07:d3:c8:5a:2f:
         84:b5:de:ab:dc:58:2e:ba:9e:91:f1:c9:0b:c2:3a:dc:19:29:
         8e:73:28:ed:87:d6:7b:ff:e0:46:5a:b9:2f:5d:06:90:de:71:
         46:a6:7a:a2:26:9b:60:24:a3:9d:4a:3e:b8:b2:8f:e6:1a:e5:
         ae:5e:1d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:30:47 2026 by rpki-client