Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft
File:                     LnNTksaGuNjciMDM1Zvyrvun6LA.mft (raw, json)
Hash identifier:          porfabNrE2U7aVNHVes50QSqX4VTi5N+eYPii08xeGM=
Subject key identifier:   F2:81:62:88:50:97:8A:5E:AE:20:FB:69:7A:67:56:80:F5:B6:DB:3D
Authority key identifier: 2E:73:53:92:C6:86:B8:D8:DC:88:C0:CC:D5:9B:F2:AE:FB:A7:E8:B0
Certificate issuer:       /CN=A911D340/serialNumber=2E735392C686B8D8DC88C0CCD59BF2AEFBA7E8B0
Certificate serial:       0BFF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft
Manifest number:          0BF4
Signing time:             Mon 22 Jun 2026 18:52:13 +0000
Manifest this update:     Mon 22 Jun 2026 18:52:12 +0000
Manifest next update:     Mon 29 Jun 2026 18:52:12 +0000
Files and hashes:         1: LnNTksaGuNjciMDM1Zvyrvun6LA.crl (hash: u9x2/kOYqOaIda+T6fOZnkUFklXkiqOBRR5v77nrxYk=)
                          2: 14B2A85C3DA611EAAD093F5EC4F9AE02.roa (hash: 57IyN+j5ROGuU5ynfQIQti4jxcGtYYtyy6B0K7wr+nU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.crl
                          rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 18:52:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3071 (0xbff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D340, serialNumber=2E735392C686B8D8DC88C0CCD59BF2AEFBA7E8B0
        Validity
            Not Before: Jun 22 18:52:12 2026 GMT
            Not After : Jun 29 18:52:12 2026 GMT
        Subject: CN=6a39845d-9be5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5e:b2:b9:3a:83:06:70:d8:21:c8:3b:2b:62:
                    7c:f6:30:04:c9:68:57:fd:6e:89:f8:6d:92:c7:1d:
                    f9:bb:71:04:86:b7:01:80:4b:32:39:c6:8d:df:bc:
                    ad:6c:51:ff:85:5e:94:b3:f8:98:39:f2:bc:4e:88:
                    3f:f9:45:16:ab:1a:3e:4b:e2:c0:36:4e:b2:fc:60:
                    c4:93:61:61:6f:4e:e0:02:ba:9f:c1:d4:7a:59:b6:
                    f4:a9:9c:ef:1c:91:a0:c0:5c:80:28:af:24:c7:72:
                    2c:a1:0a:f0:64:3b:3d:93:26:60:23:9b:ac:2e:db:
                    59:07:c0:90:fb:b3:2b:55:19:73:8f:69:26:7e:36:
                    8b:2b:a2:96:f2:c3:7e:d3:90:c8:60:7d:4e:17:59:
                    0d:34:a3:3c:1a:1b:d3:58:9d:44:df:bd:95:d0:04:
                    1a:57:c0:ee:cb:3d:2e:8e:e5:17:35:5c:e2:ef:9d:
                    24:65:46:d3:31:2b:1f:35:8f:94:83:10:5e:21:24:
                    0d:eb:50:3f:6e:53:62:64:38:0f:fd:67:c6:2b:04:
                    80:a8:39:60:e9:cc:c6:c9:44:7d:39:b5:54:b8:f2:
                    ed:e4:44:fc:61:41:28:13:b7:e3:59:a3:6e:3d:9e:
                    ca:1f:17:b3:aa:73:fd:1c:73:f1:12:28:d3:16:18:
                    3f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:81:62:88:50:97:8A:5E:AE:20:FB:69:7A:67:56:80:F5:B6:DB:3D
            X509v3 Authority Key Identifier:
                keyid:2E:73:53:92:C6:86:B8:D8:DC:88:C0:CC:D5:9B:F2:AE:FB:A7:E8:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:d8:7b:f4:67:2a:e6:1e:d9:ac:7f:39:76:f6:0d:d2:cc:e2:
         51:04:21:68:88:0a:b3:53:16:42:4d:81:02:69:de:ab:7f:7f:
         87:a2:af:dc:3b:33:71:d0:ee:f2:ee:e1:1d:5a:4d:3a:8d:ba:
         fb:09:25:84:20:60:68:6a:e7:34:a5:b0:e3:15:b7:f9:62:82:
         93:89:c9:3e:a3:e4:d2:80:8a:90:46:44:00:5f:60:56:f7:84:
         e3:15:de:d6:3f:f2:08:fa:9b:9f:78:f3:d8:98:64:2d:e1:9c:
         1b:49:f4:db:96:2f:c6:91:bf:68:55:27:67:6f:c2:a9:dd:3c:
         82:a9:8d:11:70:11:ce:2f:ec:e4:d3:4f:29:48:b9:92:97:fb:
         41:61:23:f7:d7:42:45:5f:c7:cd:d6:b8:a2:b3:76:a6:59:e8:
         3a:c2:d0:37:0c:f6:74:8f:b3:80:f0:24:e0:63:36:14:3e:85:
         6e:87:6d:28:32:9c:79:ac:9a:86:2d:12:df:72:e6:3f:e3:44:
         8a:cf:6b:74:e1:61:09:e1:15:67:ac:11:a3:2c:e6:85:94:df:
         7a:ee:eb:ff:ec:41:f3:0b:71:98:8d:32:41:7a:a0:56:3a:32:
         c3:d2:b2:f4:e7:5f:0c:1c:8e:37:51:f5:80:9a:50:a6:57:c3:
         7e:02:6b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:29:10 2026 by rpki-client