Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft
File:                     lAjp17bOuDTKkJAeRXhgEMBpwys.mft (raw, json)
Hash identifier:          9jQmQhNeMoljDv543PSHUyXxHjdHXICZqR91S5o2Afc=
Subject key identifier:   A2:30:A5:89:BA:35:D1:D5:CD:AF:AE:58:E0:81:54:B8:60:15:13:27
Authority key identifier: 94:08:E9:D7:B6:CE:B8:34:CA:90:90:1E:45:78:60:10:C0:69:C3:2B
Certificate issuer:       /CN=A91A394B/serialNumber=9408E9D7B6CEB834CA90901E45786010C069C32B
Certificate serial:       0200
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft
Manifest number:          01FA
Signing time:             Sat 13 Jun 2026 03:11:55 +0000
Manifest this update:     Sat 13 Jun 2026 03:11:54 +0000
Manifest next update:     Sat 20 Jun 2026 03:11:54 +0000
Files and hashes:         1: lAjp17bOuDTKkJAeRXhgEMBpwys.crl (hash: tEYvYNwaThU8oEKRi9vnSqDrFWHfrQ8QPMB1WM1vaWM=)
                          2: 6015E82861B411EEBAA6AD59C4F9AE02.roa (hash: UORe/0TZF8IoRoAarwALcIbpOxjo7QBKBArFHjwhFB4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.crl
                          rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 03:11:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 512 (0x200)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A394B, serialNumber=9408E9D7B6CEB834CA90901E45786010C069C32B
        Validity
            Not Before: Jun 13 03:11:54 2026 GMT
            Not After : Jun 20 03:11:54 2026 GMT
        Subject: CN=6a2cca7b-924e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:0d:be:51:f5:67:7e:1e:60:e9:72:c6:f8:00:
                    4c:b9:9c:ba:3f:7b:4e:70:a7:64:ff:06:ee:a2:34:
                    b8:27:bb:b1:c2:29:2c:5f:24:d3:19:b5:a7:e1:c3:
                    47:b8:f9:b3:ca:4a:4a:ec:ed:03:df:ba:4f:bc:39:
                    78:46:fb:58:59:63:e4:71:d7:39:ee:1d:6e:97:81:
                    3a:2e:12:8d:5f:1a:a0:b0:01:4f:53:17:85:66:97:
                    27:33:a1:01:63:fe:b4:82:e2:82:a6:65:14:92:47:
                    d7:ab:16:85:21:7a:b0:4f:a7:51:d1:8f:72:65:21:
                    c8:d7:10:85:91:28:98:9c:01:89:93:68:e0:b2:21:
                    8c:58:ed:b9:ba:c7:7a:23:37:e5:bc:76:e1:58:7d:
                    24:35:2d:41:a3:c6:45:e0:b9:54:e6:25:16:82:df:
                    4e:e4:d8:64:b4:ab:4b:47:28:57:05:42:77:e4:a0:
                    25:99:a8:87:51:06:c1:5b:1d:ae:8c:2d:57:b7:d1:
                    ca:d3:a4:f1:d1:55:95:7d:22:a2:49:eb:d0:36:f5:
                    d6:51:1b:9a:73:67:43:63:68:37:93:b7:a8:2e:60:
                    7c:56:52:cd:47:f2:f1:fd:f0:55:77:3e:de:42:13:
                    66:cd:8c:ae:2d:5e:74:22:a1:5b:e8:a9:a1:8a:c2:
                    b4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:30:A5:89:BA:35:D1:D5:CD:AF:AE:58:E0:81:54:B8:60:15:13:27
            X509v3 Authority Key Identifier:
                keyid:94:08:E9:D7:B6:CE:B8:34:CA:90:90:1E:45:78:60:10:C0:69:C3:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:4b:68:47:78:96:71:e3:64:87:5e:1c:10:15:cc:5b:f7:28:
         92:f1:67:9f:e4:3b:34:f1:60:a1:c5:62:d3:d3:53:f4:ce:e5:
         b1:4b:6b:68:43:42:9b:3b:d0:00:39:8e:d6:4a:a5:a1:54:a3:
         0e:bb:c2:48:72:f9:35:76:b8:63:80:bb:43:e6:6f:b3:d2:01:
         bb:62:5f:a7:05:23:1a:89:8b:18:33:95:e6:fe:a8:c5:e7:0d:
         6d:71:2e:32:cc:a2:3b:7b:f1:e6:3a:4c:c1:4a:40:3e:d4:00:
         df:f8:75:d7:c8:1f:05:78:f5:f1:73:48:88:7b:c9:17:ba:df:
         72:25:4f:d4:86:b2:44:68:b0:44:11:d1:81:95:78:32:9b:ba:
         64:4a:34:a8:36:9d:8a:43:6c:8f:09:96:dd:e1:cd:a4:ec:0a:
         b3:54:6f:30:c2:7e:75:94:43:3d:d2:15:ae:a3:b3:09:13:9e:
         29:24:12:b4:5c:10:08:f4:d7:0f:51:e9:9a:e0:81:f8:b8:08:
         19:b8:37:d7:af:f1:8a:79:cc:04:45:93:fe:13:af:94:1b:63:
         4f:81:98:4a:4f:17:9a:3c:e2:b6:5b:a7:e2:9a:e5:8a:4c:6d:
         f6:e1:4c:b5:8a:72:c4:1a:3b:59:4b:ca:1f:98:d0:57:28:16:
         db:3b:f8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:59:33 2026 by rpki-client