Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft
File:                     lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft (raw, json)
Hash identifier:          bfPUy9pfdXUmxdxWn4RX6Mzd4rmYFLkUfPile4YCLK4=
Subject key identifier:   FA:9C:23:C8:B6:F0:D6:49:CA:F1:9C:7C:BA:91:27:05:4F:CF:C0:16
Authority key identifier: 94:C6:43:E1:6D:04:A7:73:8B:C7:2B:5B:10:7E:05:B1:61:61:40:13
Certificate issuer:       /CN=A91CAA8A/serialNumber=94C643E16D04A7738BC72B5B107E05B161614013
Certificate serial:       51
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lMZD4W0Ep3OLxytbEH4FsWFhQBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft
Manifest number:          4F
Signing time:             Sat 13 Jun 2026 08:22:54 +0000
Manifest this update:     Sat 13 Jun 2026 08:22:53 +0000
Manifest next update:     Sat 20 Jun 2026 08:22:53 +0000
Files and hashes:         1: lMZD4W0Ep3OLxytbEH4FsWFhQBM.crl (hash: ymO7zV3JS2MhNMncXpSp1rXV3xs+uVQ9jJJaCCB9fX4=)
                          2: 537A2262F2D211F0BAE73FD33C6F56BC.roa (hash: dMndGGXMF1UUV3V1XnDiN6BWOBr7tp/sHPGvsw6xkRE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.crl
                          rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lMZD4W0Ep3OLxytbEH4FsWFhQBM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:22:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CAA8A, serialNumber=94C643E16D04A7738BC72B5B107E05B161614013
        Validity
            Not Before: Jun 13 08:22:53 2026 GMT
            Not After : Jun 20 08:22:53 2026 GMT
        Subject: CN=6a2d135d-4dda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8b:4c:42:3a:56:dc:2e:89:47:ab:a5:42:6e:
                    b7:79:60:cd:05:bb:8e:ba:0b:83:ce:15:52:50:db:
                    63:49:a7:45:8f:49:ac:ea:84:dd:bc:19:2e:fa:0d:
                    b1:c8:e7:61:24:2e:4e:b2:34:e6:99:7a:ed:c6:e5:
                    1a:c6:c0:bf:29:7c:7b:78:be:cd:1a:10:63:ec:7b:
                    9c:0a:de:70:27:c5:a7:3d:c5:4c:5c:ac:50:8b:f1:
                    45:81:04:dc:21:84:32:54:fa:0b:bd:af:81:1c:f0:
                    97:bf:f8:4f:ef:fe:ba:eb:54:fb:0f:ab:c3:af:ba:
                    10:6f:7e:9b:1d:fa:ee:c9:6b:81:49:c5:a5:fd:f3:
                    04:6d:18:32:6b:d9:1b:93:c7:7c:1e:3f:80:22:7a:
                    d9:86:5f:ec:23:28:ab:3d:90:9e:91:fd:b4:63:b7:
                    ee:db:b7:48:ba:4b:04:37:4f:68:59:bc:13:39:17:
                    cb:03:d8:82:dd:44:15:8c:c3:22:85:4c:81:ff:9a:
                    e1:5f:e9:4c:22:db:76:6c:f6:b4:dc:43:d9:de:99:
                    86:a3:20:1c:ce:9b:21:8d:69:0f:68:37:b9:64:73:
                    f0:fd:c5:bc:e9:41:27:c5:16:52:35:78:d8:d7:41:
                    29:cd:f6:ec:de:18:1f:19:80:d1:e5:ba:33:27:17:
                    82:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:9C:23:C8:B6:F0:D6:49:CA:F1:9C:7C:BA:91:27:05:4F:CF:C0:16
            X509v3 Authority Key Identifier:
                keyid:94:C6:43:E1:6D:04:A7:73:8B:C7:2B:5B:10:7E:05:B1:61:61:40:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lMZD4W0Ep3OLxytbEH4FsWFhQBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:18:a5:06:84:08:f1:34:ec:9f:e8:25:21:fc:47:f4:80:09:
         e5:87:ec:50:f6:80:23:85:0b:4b:c0:66:f4:cc:fd:4e:c3:a1:
         b1:a7:72:22:e3:d9:da:92:1c:f4:ac:63:2b:ef:96:36:5b:31:
         d3:dd:bf:6c:87:d9:f0:28:84:40:21:da:7e:b2:c2:bc:c0:59:
         81:61:53:ac:e2:ef:09:1a:ea:87:01:b8:31:43:be:07:a4:af:
         6a:a2:7b:e7:83:2a:7d:20:3f:e0:6a:da:2f:c7:85:07:a0:8f:
         22:0c:cf:12:f8:32:95:35:f0:e3:2a:c0:98:69:9e:2c:8b:e1:
         14:2a:24:ce:a9:03:91:a7:15:b8:e3:fc:c2:c1:a2:21:91:96:
         1b:89:51:d5:db:3e:9e:7e:70:72:a7:e1:11:0b:64:90:09:14:
         33:07:12:58:6d:b3:d1:74:f3:89:06:a5:99:2a:aa:23:1f:03:
         36:ef:19:62:2c:fc:74:3c:50:41:47:a3:c3:33:e1:49:a9:27:
         45:d2:39:96:f0:cc:dc:85:3c:55:52:2b:9e:db:e8:89:d7:19:
         15:40:27:f8:08:d9:ee:7f:40:f6:6c:bf:82:20:90:1f:ca:91:
         7b:a3:35:48:6a:14:eb:a7:41:fb:5e:ac:1f:c3:a5:b8:0c:16:
         18:4f:ce:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:27:50 2026 by rpki-client