Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.mft
File:                     LZqjsNhdis2WNSgFXHSHpmkEyHk.mft (raw, json)
Hash identifier:          iuCktxHxMhnbqhUqyz3ekPYKoOEosm7eA7WMo6n+jWw=
Subject key identifier:   9C:76:D0:34:1A:CF:E8:DE:6B:B5:C7:72:A4:CD:F7:90:88:42:17:A8
Authority key identifier: 2D:9A:A3:B0:D8:5D:8A:CD:96:35:28:05:5C:74:87:A6:69:04:C8:79
Certificate issuer:       /CN=A91CD883/serialNumber=2D9AA3B0D85D8ACD963528055C7487A66904C879
Certificate serial:       20
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LZqjsNhdis2WNSgFXHSHpmkEyHk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.mft
Manifest number:          1F
Signing time:             Wed 17 Jun 2026 09:04:00 +0000
Manifest this update:     Wed 17 Jun 2026 09:03:59 +0000
Manifest next update:     Wed 24 Jun 2026 09:03:59 +0000
Files and hashes:         1: LZqjsNhdis2WNSgFXHSHpmkEyHk.crl (hash: HS3vt9sTiODs2A74WxmW2uAx+ag1DEnjyeamiCYIARc=)
                          2: FFF0486A3D7C11F1AE97A9BABA833773.roa (hash: 8PBVOn5rHRwK4EpJUtLvYRy9A1Nxp+wwyWqks95ix4w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.crl
                          rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LZqjsNhdis2WNSgFXHSHpmkEyHk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD883, serialNumber=2D9AA3B0D85D8ACD963528055C7487A66904C879
        Validity
            Not Before: Jun 17 09:03:59 2026 GMT
            Not After : Jun 24 09:03:59 2026 GMT
        Subject: CN=6a326300-76da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:97:5b:37:7e:42:22:fd:b8:58:df:c4:ed:14:
                    f2:ba:d8:1b:e3:46:2e:21:ef:fc:b5:0e:5d:7e:c7:
                    56:84:a8:17:d6:c4:a6:56:35:b6:33:41:b6:81:ba:
                    e4:4d:4c:01:40:78:a5:74:65:1a:9e:2f:e4:a6:0a:
                    4f:f5:cd:cc:59:ef:3d:7c:2b:47:a4:9e:61:6e:fa:
                    97:10:be:fa:91:05:5f:1b:f5:d7:b3:9d:fe:77:e2:
                    38:5d:4e:96:1b:59:61:e1:17:f1:53:e7:be:90:4d:
                    c8:05:1d:14:9e:bd:95:fb:2e:2b:c0:2b:9d:a9:90:
                    97:c7:ae:ce:97:80:62:c7:77:a2:3a:14:0f:39:ad:
                    e3:24:3c:10:97:1f:2a:9f:8d:98:45:d7:08:a4:4e:
                    04:64:b7:3d:9a:07:d1:09:49:d4:73:12:c8:e6:1a:
                    88:94:2f:d5:06:01:68:14:99:59:71:86:db:4e:36:
                    85:49:a4:50:7a:d7:0c:d0:1e:e6:fa:86:83:2e:1e:
                    34:56:1b:fe:f4:b2:f9:a2:52:83:c6:06:9e:f0:f9:
                    a3:91:eb:08:fa:8d:10:ec:c6:c6:1e:1e:52:52:20:
                    f3:66:9f:d1:ed:2b:23:e7:2f:16:41:cd:f3:30:01:
                    7a:67:21:46:4d:5a:e1:f1:0f:fb:3c:a9:b2:49:d4:
                    8e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:76:D0:34:1A:CF:E8:DE:6B:B5:C7:72:A4:CD:F7:90:88:42:17:A8
            X509v3 Authority Key Identifier:
                keyid:2D:9A:A3:B0:D8:5D:8A:CD:96:35:28:05:5C:74:87:A6:69:04:C8:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LZqjsNhdis2WNSgFXHSHpmkEyHk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:95:1c:15:2b:61:15:5f:bf:06:d8:c1:d6:95:ef:12:bb:03:
         79:ba:9f:a9:aa:e7:02:a0:f8:d6:20:20:c0:c3:48:8e:53:49:
         53:de:3d:2d:57:63:bd:fd:57:7d:8f:6e:98:d3:fe:3d:fd:f3:
         c9:c0:60:a7:07:2d:fb:bf:cf:2c:a6:12:50:59:8e:81:0d:d8:
         23:b7:9b:8d:09:e9:83:3d:5f:e0:3f:49:d0:60:a2:10:d2:bf:
         e6:62:4d:96:91:dc:e2:da:06:48:42:f8:7b:76:a5:19:db:05:
         21:9d:d4:be:77:ef:1b:6c:5e:08:d7:27:b5:99:50:a1:21:24:
         fa:b0:40:50:77:3a:ac:34:68:d6:0b:47:14:cf:f3:a6:85:e9:
         18:73:67:bf:30:bd:5d:59:46:dd:28:32:ea:0b:18:af:21:d8:
         f8:86:ce:c4:15:5d:20:a4:63:f6:ea:91:3c:32:15:a7:66:15:
         55:07:91:f9:37:36:44:04:94:6b:37:de:b2:38:86:b4:ef:66:
         17:78:98:41:40:3f:82:f9:54:bf:7d:28:d6:e8:33:51:d8:08:
         8d:a9:e0:fa:07:28:d8:68:f8:f5:95:23:44:77:32:21:41:21:
         a7:49:8f:d8:9a:dc:e9:a9:4b:d9:92:d2:ca:bc:a9:97:32:52:
         09:70:c0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:30:33 2026 by rpki-client