Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft
File:                     LnNTksaGuNjciMDM1Zvyrvun6LA.mft (raw, json)
Hash identifier:          SoZWAKCtG57JxH2agK3uhvjJwfEhNaaGKMDlyR7S4R8=
Subject key identifier:   71:02:12:51:6E:6D:99:1D:C8:47:BB:61:E3:BE:41:69:8B:76:DD:DD
Authority key identifier: 2E:73:53:92:C6:86:B8:D8:DC:88:C0:CC:D5:9B:F2:AE:FB:A7:E8:B0
Certificate issuer:       /CN=A911D340/serialNumber=2E735392C686B8D8DC88C0CCD59BF2AEFBA7E8B0
Certificate serial:       0C1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft
Manifest number:          0C11
Signing time:             Tue 18 Aug 2026 19:05:59 +0000
Manifest this update:     Tue 18 Aug 2026 19:05:58 +0000
Manifest next update:     Tue 25 Aug 2026 19:05:58 +0000
Files and hashes:         1: LnNTksaGuNjciMDM1Zvyrvun6LA.crl (hash: Uww2kLSMk9yKdwL0EWyWr0j9HHY/52AdY4l4nUoPVr0=)
                          2: 14B2A85C3DA611EAAD093F5EC4F9AE02.roa (hash: 57IyN+j5ROGuU5ynfQIQti4jxcGtYYtyy6B0K7wr+nU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.crl
                          rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 19:05:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3100 (0xc1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D340, serialNumber=2E735392C686B8D8DC88C0CCD59BF2AEFBA7E8B0
        Validity
            Not Before: Aug 18 19:05:58 2026 GMT
            Not After : Aug 25 19:05:58 2026 GMT
        Subject: CN=6a84ad17-caab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a8:be:80:3c:7b:e2:af:62:bb:a8:39:86:76:
                    4f:5f:ce:c2:4e:18:69:6f:dd:9d:17:51:89:d3:54:
                    09:dd:a0:11:90:31:a1:ab:00:ff:ea:16:6a:78:3d:
                    f5:09:65:f5:d1:8c:9b:ba:bd:63:e8:da:21:e2:cc:
                    a1:22:ce:2e:5c:fc:cb:95:77:65:90:8f:2c:ed:c2:
                    36:94:73:db:d9:5d:b8:7c:c4:94:97:52:aa:fc:4d:
                    ab:95:6c:c1:b8:e1:71:f6:d8:09:84:6a:a3:56:92:
                    de:97:c9:52:f4:42:af:e0:ea:69:ec:f0:4c:82:f8:
                    fe:5e:a0:e0:08:43:0f:c7:7f:2e:12:3e:16:b0:47:
                    7a:08:e2:73:2b:d6:b5:e7:d4:c3:e4:a2:2f:99:60:
                    ef:c5:ab:c0:8c:66:9b:35:c2:f2:74:d2:8c:c6:6b:
                    50:ae:5d:18:4d:11:42:b4:93:2d:a8:d4:1a:87:d5:
                    78:2b:40:e9:cb:da:6d:d7:32:97:a5:04:73:fc:32:
                    48:99:44:0a:ec:02:fc:66:6d:38:0b:df:68:d2:27:
                    5b:ff:72:10:3d:e1:4d:a4:ce:58:e9:3a:db:24:0f:
                    33:f7:f8:40:00:2b:0f:e1:8b:ae:80:4c:fd:63:e3:
                    18:2b:f1:6a:4f:0c:29:41:47:ac:1d:50:c4:1a:df:
                    9b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:02:12:51:6E:6D:99:1D:C8:47:BB:61:E3:BE:41:69:8B:76:DD:DD
            X509v3 Authority Key Identifier:
                keyid:2E:73:53:92:C6:86:B8:D8:DC:88:C0:CC:D5:9B:F2:AE:FB:A7:E8:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:57:a3:40:2d:3c:f0:90:7f:93:4a:bd:89:3d:fe:c5:57:2f:
         c4:99:f2:b1:de:28:bf:2f:1f:f3:9f:90:23:91:5e:12:b3:db:
         d4:6c:7f:c8:54:81:25:ed:7a:03:5a:cf:8b:d7:30:5b:50:7b:
         e5:f7:a4:f0:ee:03:ae:b2:dc:c4:77:ba:f1:94:cf:27:31:34:
         90:02:dd:d9:09:a0:6f:aa:75:6a:15:36:6e:82:26:f9:32:7f:
         76:75:1c:a6:40:38:25:46:97:77:d9:ad:c5:18:85:61:fe:d3:
         32:05:6b:55:10:69:98:77:33:3c:0d:46:f6:c0:07:72:ec:73:
         0c:75:2a:cf:9c:56:d3:7f:2e:3a:f5:94:18:ed:de:99:9a:25:
         64:7d:7d:6e:4b:1b:f4:ca:e9:ea:3d:9e:e2:40:70:db:65:53:
         ad:71:b7:bf:5c:8c:55:bf:c9:e1:52:ef:64:8b:74:36:38:e3:
         7b:b2:80:4b:e3:ff:cc:98:3f:07:9a:ff:32:e8:a9:b2:08:c4:
         87:59:0e:70:c3:4e:a2:af:41:a0:5f:17:b0:a1:a7:f8:0e:9a:
         8e:52:66:a9:c2:f9:ca:99:91:f5:b3:e0:c8:e8:6d:70:3c:4d:
         67:50:66:f4:c0:cf:59:e0:cf:09:bc:11:26:2f:18:73:f0:dc:
         4d:af:a1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:09 2026 by rpki-client