Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
File:                     Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft (raw, json)
Hash identifier:          W8+DKb/brfLD1mVddtHU1oreXs20Tk1+6eZeiaaZhrQ=
Subject key identifier:   13:CB:55:38:80:06:AF:48:1D:05:EF:A1:83:12:01:5A:22:B5:67:4F
Authority key identifier: 2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2
Certificate issuer:       /CN=A91A8A85/serialNumber=2EAF60095334E7F0BAA065A92F653F5C744895C2
Certificate serial:       07B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
Manifest number:          07A5
Signing time:             Fri 12 Jun 2026 21:34:09 +0000
Manifest this update:     Fri 12 Jun 2026 21:34:08 +0000
Manifest next update:     Fri 19 Jun 2026 21:34:08 +0000
Files and hashes:         1: Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl (hash: LsfH5Askx7I0aqzKo5TOG+QH9ZYzmkPQKdArRy2atEg=)
                          2: 6FBFD196C3B811EF82B40031C4F9AE02.roa (hash: r2E33zBN68DzdFBxJzHPWNCremEV/5Gpjhm3sPaTCEM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl
                          rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 21:34:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1976 (0x7b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8A85, serialNumber=2EAF60095334E7F0BAA065A92F653F5C744895C2
        Validity
            Not Before: Jun 12 21:34:08 2026 GMT
            Not After : Jun 19 21:34:08 2026 GMT
        Subject: CN=6a2c7b51-5537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e7:be:ef:96:0e:0e:13:25:bf:6e:9d:d7:88:
                    be:c7:32:63:a2:33:53:f7:32:ef:e7:90:e3:3f:c4:
                    5e:7c:5b:82:3b:7d:3b:7e:7d:44:c0:2d:01:b6:cd:
                    6a:aa:74:c2:15:78:3a:66:15:a3:a3:30:50:ae:f4:
                    76:93:ec:b5:b7:57:9b:20:55:90:a3:99:14:9d:02:
                    24:f3:5c:3b:68:e8:8a:8b:87:36:83:0c:85:2e:81:
                    9c:96:d3:84:c6:8a:7e:4e:bd:f6:01:d7:d1:43:e6:
                    f8:00:39:7f:26:51:9d:c6:02:33:b1:c1:1e:25:e1:
                    3f:5b:83:dc:08:47:3c:cb:12:16:de:c3:7c:8f:40:
                    f8:41:90:d4:33:30:02:f1:42:9f:53:f0:e0:3f:9e:
                    35:9d:2d:56:32:75:38:fc:38:de:db:82:22:22:d1:
                    12:ed:58:29:a1:ba:60:fd:6c:6c:97:5e:ca:8f:c7:
                    6e:78:cf:8a:d7:fa:33:e8:35:bd:25:4a:0b:5a:0c:
                    06:d7:13:66:a9:5a:d2:7e:9b:09:77:f2:a5:e3:77:
                    7f:b7:52:a7:07:d4:b9:6c:3e:29:f5:bc:12:13:4d:
                    b3:da:1a:a3:c1:86:ec:2e:9c:84:db:fe:87:a7:ba:
                    a7:32:d8:a9:ee:c2:c0:7d:9b:c9:b1:16:16:21:9c:
                    50:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:CB:55:38:80:06:AF:48:1D:05:EF:A1:83:12:01:5A:22:B5:67:4F
            X509v3 Authority Key Identifier:
                keyid:2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:38:8e:b4:3b:39:6c:f7:c4:36:1f:d5:94:e6:50:22:6a:35:
         f8:12:5c:7d:91:2f:d2:c7:20:0d:85:b7:75:52:5c:f3:90:43:
         2a:17:7f:b2:73:a0:07:69:28:7f:91:09:70:a6:07:fb:5d:db:
         0f:71:58:a3:2f:40:31:c7:bc:e2:7d:d3:57:f6:a6:84:94:b5:
         66:3f:f4:24:58:ad:30:1d:db:b1:ea:e7:5f:31:75:29:fa:ec:
         a7:12:3b:4a:0e:81:d0:cf:ab:ec:39:55:82:a0:c4:c4:92:09:
         4c:d2:cb:a5:7d:92:eb:8f:74:4d:76:fc:d1:8b:8a:ce:88:8f:
         c6:a7:dd:2a:21:66:0d:54:aa:19:30:81:4e:a1:27:66:b9:32:
         64:46:bc:a8:a2:64:1a:c0:a1:c8:03:4e:bb:c1:25:67:ca:3b:
         cd:c1:3d:7b:11:91:e5:c5:ec:6e:01:6f:b1:fa:c6:fa:c5:5b:
         c3:2a:f4:a6:c6:76:d0:3c:22:bb:2d:c2:12:48:c9:6d:0d:34:
         c8:23:1a:d8:33:cb:d7:fb:15:82:f7:99:90:05:b8:dd:f2:a5:
         b6:89:dd:02:c1:fd:0d:52:13:2a:15:56:a5:0f:a8:88:9e:53:
         5b:3d:a4:11:d6:5e:86:b5:1e:8f:c6:bc:f8:fd:4c:de:57:15:
         54:30:0d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:23:58 2026 by rpki-client