Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
File:                     LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft (raw, json)
Hash identifier:          qFlUMWb4pMMe+firbTldeXTh5k7Ui5CmR93d/FYiEIo=
Subject key identifier:   F0:C1:F9:F1:74:66:A0:2C:3E:DB:86:F2:0F:90:95:C2:5F:85:24:D6
Authority key identifier: 2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F
Certificate issuer:       /CN=A91A8405/serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F
Certificate serial:       0C5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
Manifest number:          0C2F
Signing time:             Wed 10 Jun 2026 18:48:59 +0000
Manifest this update:     Wed 10 Jun 2026 18:48:59 +0000
Manifest next update:     Wed 17 Jun 2026 18:48:59 +0000
Files and hashes:         1: LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl (hash: 52LO3CZe4/FKWbIaBwjIIMSWMj9HV42XyddoxzcHqEo=)
                          2: F8088528E65D11EDB5112931C4F9AE02.roa (hash: PKj9sFGG8PoYLlt4SuP/keqFiSjZV6/K10jPwAvS8jU=)
                          3: D9173AE459E811ED85614349C4F9AE02.roa (hash: leMECVmhVTsAWm2huPmHyjfAW/BQtxrDM48+UQZcH9Y=)
                          4: D7D5B86859E811ED85614349C4F9AE02.roa (hash: bTCwQurYG8Xk94vaUk8PvdDkAz4L8d6mn3Wu2OIibFA=)
                          5: 933DE524C2B811EEAA1FD486C4F9AE02.roa (hash: WF5zZF6qWOdmRefH/8xgl7eODKn3xPKvlJlYV7opxnI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl
                          rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 18:48:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3162 (0xc5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8405, serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F
        Validity
            Not Before: Jun 10 18:48:59 2026 GMT
            Not After : Jun 17 18:48:59 2026 GMT
        Subject: CN=6a29b19b-f47e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0c:60:78:b4:80:3e:47:f4:cd:34:2b:14:eb:
                    86:5f:23:19:f7:65:11:85:86:4f:bb:cd:26:cd:55:
                    43:9e:e0:c4:76:b8:22:b9:95:55:d6:a9:68:b9:a0:
                    70:ea:7b:b9:b6:62:5d:a9:f5:24:97:13:2d:7b:d4:
                    76:0c:f6:36:41:15:07:20:12:c2:21:2e:6b:93:57:
                    3b:9e:fa:db:71:b0:0f:c9:69:3e:c7:a9:53:4c:c3:
                    f3:d1:fd:2e:20:86:50:e9:d4:5f:08:7a:af:ca:c5:
                    08:4a:f1:f9:95:3a:0a:70:99:9d:3b:29:21:43:e5:
                    44:2c:ce:64:a3:d4:a7:2d:98:32:c2:87:9a:46:2a:
                    23:2c:1b:4d:bb:16:6d:bc:54:1b:d9:91:19:41:56:
                    20:10:39:fa:fa:15:4b:34:89:1a:89:16:db:8c:de:
                    b6:81:eb:12:58:cc:35:3d:e2:3d:6e:51:6c:5d:d5:
                    e1:77:85:1d:a0:ec:0e:c5:b3:34:af:6b:14:27:aa:
                    ba:ab:c5:fb:aa:f4:8c:08:fd:35:9c:da:84:e2:36:
                    be:b7:3a:7a:86:81:03:55:ee:9c:96:53:3c:b2:b7:
                    80:ce:0a:21:a4:0d:75:62:75:c2:c8:69:05:0f:7b:
                    d6:30:de:8c:6d:eb:c2:59:c6:7b:0b:57:0f:a5:39:
                    76:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C1:F9:F1:74:66:A0:2C:3E:DB:86:F2:0F:90:95:C2:5F:85:24:D6
            X509v3 Authority Key Identifier:
                keyid:2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:52:a3:0e:e9:da:e2:78:d3:5d:94:37:a4:d9:22:f5:17:d5:
         13:03:db:e4:61:5b:cd:16:42:96:61:55:3d:f3:f3:49:1e:b2:
         b2:a6:69:fb:b8:24:13:b5:0f:79:f3:02:15:70:a0:43:55:97:
         de:10:23:81:68:17:47:33:ae:62:6d:9f:be:8d:19:c1:0a:e9:
         0b:6b:de:1e:fd:c5:6f:c6:89:91:21:da:ac:82:e5:9d:7c:03:
         8c:c9:22:00:7c:88:16:12:04:57:c4:7d:a8:5d:fd:97:4c:ff:
         fb:f1:4e:ea:52:d9:02:8d:c2:be:b0:84:ca:f2:11:bc:25:c3:
         b6:2c:e6:78:9b:e4:bc:4a:35:29:df:f2:51:3d:b0:9a:b4:f2:
         1e:45:a3:81:2e:2f:af:77:35:63:65:d2:5f:e7:7d:2b:6b:4b:
         f7:81:d8:3a:49:bc:bb:b5:30:30:32:d7:96:96:2f:46:ea:f4:
         85:28:f1:f1:fd:31:9d:ae:da:45:b3:b5:a2:60:c8:fb:e6:7a:
         b2:53:15:89:f9:cb:d0:ca:48:11:e2:3d:01:7f:5a:03:8b:79:
         77:c8:c3:b6:eb:43:e1:34:d0:f9:87:b4:e6:b0:4c:fa:c9:8b:
         19:6a:69:6c:bd:e8:f7:f0:c9:d4:bd:50:3d:46:a6:0d:b1:4b:
         97:9e:b6:44
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTg0MDUxMTAvBgNVBAUTKDJEOUVEM0QyNkU2MzVGN0NGRkU0QkJGNTIwODcxNTBC
N0E0MjE4OEYwHhcNMjYwNjEwMTg0ODU5WhcNMjYwNjE3MTg0ODU5WjAYMRYwFAYD
VQQDEw02YTI5YjE5Yi1mNDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsAxgeLSAPkf0zTQrFOuGXyMZ92URhYZPu80mzVVDnuDEdrgiuZVV1qlouaBw
6nu5tmJdqfUklxMte9R2DPY2QRUHIBLCIS5rk1c7nvrbcbAPyWk+x6lTTMPz0f0u
IIZQ6dRfCHqvysUISvH5lToKcJmdOykhQ+VELM5ko9SnLZgywoeaRiojLBtNuxZt
vFQb2ZEZQVYgEDn6+hVLNIkaiRbbjN62gesSWMw1PeI9blFsXdXhd4UdoOwOxbM0
r2sUJ6q6q8X7qvSMCP01nNqE4ja+tzp6hoEDVe6cllM8sreAzgohpA11YnXCyGkF
D3vWMN6MbevCWcZ7C1cPpTl2PQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPDB+fF0
ZqAsPtuG8g+QlcJfhSTWMB8GA1UdIwQYMBaAFC2e09JuY198/+S79SCHFQt6QhiP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODQwNS9GOUMxOTY5NjMy
MTIxMUVBOTM2MzNBNTlDNEY5QUUwMi9MWjdUMG01algzel81THYxSUljVkMzcENH
STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xaN1QwbTVqWDN6XzVMdjFJSWNWQzNwQ0dJOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
ODQwNS9GOUMxOTY5NjMyMTIxMUVBOTM2MzNBNTlDNEY5QUUwMi9MWjdUMG01algz
el81THYxSUljVkMzcENHSTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlFKjDuna4njTXZQ3pNki9RfVEwPb5GFbzRZClmFVPfPzSR6ysqZp+7gkE7UP
efMCFXCgQ1WX3hAjgWgXRzOuYm2fvo0ZwQrpC2veHv3Fb8aJkSHarILlnXwDjMki
AHyIFhIEV8R9qF39l0z/+/FO6lLZAo3CvrCEyvIRvCXDtizmeJvkvEo1Kd/yUT2w
mrTyHkWjgS4vr3c1Y2XSX+d9K2tL94HYOkm8u7UwMDLXlpYvRur0hSjx8f0xna7a
RbO1omDI++Z6slMVifnL0MpIEeI9AX9aA4t5d8jDtutD4TTQ+Ye05rBM+smLGWpp
bL3o9/DJ1L1QPUamDbFLl562RA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 17:58:12 2026 by rpki-client