Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft
File:                     ltGlmUmhu3ombXKg8S_81fUFnxc.mft (raw, json)
Hash identifier:          k1ujJl4/EGTrgzAbFvGqtLwV6dXecf1ktVW9eAcR5KE=
Subject key identifier:   90:42:A6:BB:0A:6F:3A:6D:5C:64:6E:B3:52:44:42:B3:2F:1E:B1:DD
Authority key identifier: 96:D1:A5:99:49:A1:BB:7A:26:6D:72:A0:F1:2F:FC:D5:F5:05:9F:17
Certificate issuer:       /CN=A91AB001/serialNumber=96D1A59949A1BB7A266D72A0F12FFCD5F5059F17
Certificate serial:       050D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft
Manifest number:          0505
Signing time:             Wed 20 May 2026 23:45:29 +0000
Manifest this update:     Wed 20 May 2026 23:45:29 +0000
Manifest next update:     Wed 27 May 2026 23:45:29 +0000
Files and hashes:         1: ltGlmUmhu3ombXKg8S_81fUFnxc.crl (hash: NLpS2XRy9JbI3FfK5eqt7961BBpvwK9Nxw7PMcp+Jmw=)
                          2: 5BD4372457DE11EC88BC6713C4F9AE02.roa (hash: HfIHCgE3FqwzFZeum4TKPXX/IhXg0j6Cd01v1i5w0B0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.crl
                          rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 23:45:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1293 (0x50d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB001, serialNumber=96D1A59949A1BB7A266D72A0F12FFCD5F5059F17
        Validity
            Not Before: May 20 23:45:29 2026 GMT
            Not After : May 27 23:45:29 2026 GMT
        Subject: CN=6a0e4799-db6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:38:60:05:15:96:b5:11:a4:0f:12:62:46:45:
                    ea:1d:44:04:55:a4:24:09:d8:c9:3c:ad:a8:91:9f:
                    d8:c9:df:91:d5:98:ca:82:8b:33:5c:e3:03:3b:d9:
                    4c:b8:20:b4:f0:d9:1a:35:29:96:c6:cd:d2:72:c7:
                    c2:5e:48:49:21:e3:ec:65:59:73:e8:d1:d7:e9:d9:
                    31:6c:3f:eb:de:98:92:bc:75:33:4c:46:83:a0:bb:
                    2b:dd:f6:a4:5c:d9:fe:8c:67:dc:ca:98:77:58:c0:
                    65:80:b0:47:74:4e:bb:2a:0a:25:b4:95:52:48:8f:
                    e8:7c:1c:0c:81:31:30:99:58:2a:80:f6:37:7a:42:
                    19:e6:57:5a:9c:65:06:aa:6c:1f:af:e6:af:70:e9:
                    96:34:a5:3f:58:91:56:e5:6c:3f:aa:00:c5:d7:27:
                    70:c2:fd:15:b8:1d:79:0d:d5:30:7d:a4:80:72:ca:
                    06:91:d8:9d:e6:60:c6:94:f5:db:c2:20:64:f2:3c:
                    7e:fa:74:7f:19:99:42:48:53:a8:8c:1b:65:63:93:
                    66:4c:47:f1:00:88:6c:f7:43:2b:e1:30:d0:fa:fb:
                    fd:d9:85:32:f5:91:bb:8c:2d:e4:77:f9:16:25:71:
                    b2:9b:a7:cb:a6:96:d7:39:0a:ed:0e:ed:e7:05:41:
                    e4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:42:A6:BB:0A:6F:3A:6D:5C:64:6E:B3:52:44:42:B3:2F:1E:B1:DD
            X509v3 Authority Key Identifier:
                keyid:96:D1:A5:99:49:A1:BB:7A:26:6D:72:A0:F1:2F:FC:D5:F5:05:9F:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:98:b3:82:04:02:1d:e0:98:ad:d4:c5:9d:34:b1:4a:87:6a:
         9e:b6:94:0e:dd:c9:99:78:ff:da:47:23:79:74:74:f6:60:c1:
         54:1b:0b:f1:13:83:2e:2e:d7:7f:0c:bb:8d:7e:47:0b:06:e8:
         cf:32:82:75:9f:29:c5:01:bb:cb:c0:f1:25:a6:7e:fa:aa:28:
         69:ca:8a:45:0b:7e:2e:09:66:fa:4c:e3:73:c6:0d:50:30:46:
         99:02:7c:a8:5c:d0:2a:f7:a2:a0:67:cd:ec:28:4b:28:4d:6f:
         fb:1d:16:ac:9b:a9:ba:38:59:49:b6:9d:52:5f:75:80:e1:27:
         32:f4:2c:26:88:1d:b6:57:a6:1c:ef:97:d8:53:10:1f:5a:ba:
         72:8f:65:85:76:9a:f9:a3:24:5f:72:26:bf:dd:85:aa:b9:15:
         ff:8a:18:ac:da:61:fd:d2:40:f9:ef:79:e4:33:af:fe:a1:a4:
         51:8f:01:8c:03:13:c7:70:d5:13:2c:cd:9d:1b:4d:db:ac:71:
         b6:ec:b8:b2:e8:6b:43:f7:64:84:59:5b:0e:bf:0d:9d:b5:05:
         36:c2:9a:e0:40:87:ae:aa:a0:de:40:1e:97:8c:f0:80:fb:73:
         9d:e9:43:a0:18:da:6d:88:e0:1f:ad:c6:0e:9a:49:28:c3:6f:
         a5:7a:77:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:16:34 2026 by rpki-client