Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft
File:                     LXsNej-fFd4AcqWmxO0KX48iHgM.mft (raw, json)
Hash identifier:          TTZY972ceq7M8VeKJt+rhO8fYgMweF+j3ai/OKKMqm0=
Subject key identifier:   EE:78:3B:1F:7E:69:48:52:06:E8:85:BF:92:5F:03:2B:1E:D7:47:4B
Authority key identifier: 2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03
Certificate issuer:       /CN=A917EC46/serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03
Certificate serial:       0A55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft
Manifest number:          0A4D
Signing time:             Wed 20 May 2026 19:42:24 +0000
Manifest this update:     Wed 20 May 2026 19:42:24 +0000
Manifest next update:     Wed 27 May 2026 19:42:24 +0000
Files and hashes:         1: LXsNej-fFd4AcqWmxO0KX48iHgM.crl (hash: zeLtybPUOBB9VZ45kSeSgtGvHcDL7BOFVAmtNX3Zo+0=)
                          2: 73BD59AE8A8C11EA8CB4F53CC4F9AE02.roa (hash: cj0uIogezd0yWwaHnlYBF13kTbwkCk4qf3kI26mN/jI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl
                          rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 19:42:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2645 (0xa55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917EC46, serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03
        Validity
            Not Before: May 20 19:42:24 2026 GMT
            Not After : May 27 19:42:24 2026 GMT
        Subject: CN=6a0e0ea0-73a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e2:a3:91:64:3e:23:cd:20:1c:aa:2b:ed:f0:
                    99:ee:05:b4:1d:a7:ad:43:18:59:d2:70:77:bd:22:
                    6b:ee:74:81:f5:64:ee:3f:34:fc:01:76:40:16:a0:
                    c1:c7:bd:c0:8a:c5:d3:81:ce:2c:d9:ae:b1:4b:aa:
                    fd:90:56:a8:cf:8a:95:0b:cf:52:dc:47:c5:7e:4a:
                    20:fc:05:19:3a:29:07:cf:e9:a9:63:7b:00:ee:83:
                    e7:84:31:27:3b:35:ce:9e:f2:d3:3f:d2:01:a9:a9:
                    d6:4e:e4:af:9e:39:7d:af:15:06:78:d4:90:bc:63:
                    00:a1:dd:fa:5a:91:67:60:c1:89:0d:72:a9:83:5f:
                    0a:03:ba:74:60:ca:2d:aa:44:89:16:02:d1:aa:c4:
                    b4:7b:86:ff:9b:d7:08:78:30:14:0a:00:47:33:c8:
                    17:63:ba:e1:67:b6:f3:dc:04:c2:13:cd:80:97:fd:
                    f8:0f:03:53:46:56:c6:60:0c:28:23:a4:d9:8d:e4:
                    76:af:4b:35:2c:e5:46:a6:8f:01:96:0b:7e:b8:50:
                    2d:e5:e5:3e:18:7c:9c:97:26:89:d1:6a:4c:1e:7d:
                    6a:b1:e7:9d:17:20:76:23:fc:6b:9e:6a:c3:12:2c:
                    92:22:fb:b8:b7:18:f6:80:3f:ab:60:2b:f9:83:17:
                    98:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:78:3B:1F:7E:69:48:52:06:E8:85:BF:92:5F:03:2B:1E:D7:47:4B
            X509v3 Authority Key Identifier:
                keyid:2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:97:1d:6f:29:ef:bc:47:39:35:f5:5e:4e:a6:f7:d1:43:0f:
         72:f4:a3:9f:e4:b9:04:59:61:48:20:b8:93:74:ae:40:ee:05:
         d9:a2:27:ac:ef:57:f9:52:58:7c:f3:29:1c:fd:5f:34:fa:d8:
         b8:19:55:31:aa:09:10:61:2c:3a:67:8d:b8:6f:6d:04:70:8b:
         51:d9:e2:1b:0e:63:57:96:0d:ef:e3:4e:49:e1:a7:22:ff:48:
         67:1c:85:91:d7:40:ef:d8:1a:2f:91:d2:2b:8a:16:8f:e6:69:
         38:f2:b7:7c:8f:31:85:a4:ac:2e:3a:69:1c:e4:34:69:49:9a:
         25:45:11:50:d8:a4:76:7b:d2:16:99:30:3a:34:17:87:65:bd:
         7c:6c:41:15:30:a6:f0:0a:3f:1f:85:5a:27:21:11:e6:04:ec:
         c0:94:26:b2:70:d4:c0:f4:8e:2c:4f:80:c7:70:06:88:a0:f3:
         c9:53:f9:4d:6e:c0:b5:0d:ea:6b:b5:af:1d:66:b3:0b:ac:6d:
         5d:b3:ed:f7:24:f1:17:c5:af:a8:a6:b1:87:c0:5f:f4:b3:c7:
         5b:86:79:5e:a5:f5:51:3e:1e:6a:03:0a:e3:28:d5:b6:9c:d3:
         86:b2:ec:0c:33:01:b5:51:33:99:09:92:37:2b:6a:7d:4c:42:
         e4:e8:42:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:15:22 2026 by rpki-client