Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2A10/F256CC16232C11F193A4D832A3833773/lNLPRKNppCI0T3ZXg78B6YKpxAE.mft
File:                     lNLPRKNppCI0T3ZXg78B6YKpxAE.mft (raw, json)
Hash identifier:          dDg0KLrU/UuQUEiff5uGunIbFJkgHBLOej7DQNXrYPU=
Subject key identifier:   68:66:92:35:A1:B1:55:31:D5:2C:F9:97:C8:0B:B8:E6:E7:17:36:61
Authority key identifier: 94:D2:CF:44:A3:69:A4:22:34:4F:76:57:83:BF:01:E9:82:A9:C4:01
Certificate issuer:       /CN=A91D2A10/serialNumber=94D2CF44A369A422344F765783BF01E982A9C401
Certificate serial:       26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNLPRKNppCI0T3ZXg78B6YKpxAE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2A10/F256CC16232C11F193A4D832A3833773/lNLPRKNppCI0T3ZXg78B6YKpxAE.mft
Manifest number:          23
Signing time:             Tue 19 May 2026 08:43:36 +0000
Manifest this update:     Tue 19 May 2026 08:43:36 +0000
Manifest next update:     Tue 26 May 2026 08:43:36 +0000
Files and hashes:         1: lNLPRKNppCI0T3ZXg78B6YKpxAE.crl (hash: wlFJG+kSIIvz1g1YT+yp1nC1FdMn5kAjEWmiFVtSCtI=)
                          2: A1E11254233211F193BBD607A5833773.roa (hash: yATqUA3STQ8R5PmkT2WcIp8HtIqcDGU6lhFcb0afmd4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2A10/F256CC16232C11F193A4D832A3833773/lNLPRKNppCI0T3ZXg78B6YKpxAE.crl
                          rsync://rpki.apnic.net/member_repository/A91D2A10/F256CC16232C11F193A4D832A3833773/lNLPRKNppCI0T3ZXg78B6YKpxAE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNLPRKNppCI0T3ZXg78B6YKpxAE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 May 2026 08:43:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2A10, serialNumber=94D2CF44A369A422344F765783BF01E982A9C401
        Validity
            Not Before: May 19 08:43:36 2026 GMT
            Not After : May 26 08:43:36 2026 GMT
        Subject: CN=6a0c22b8-0c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:75:fe:40:f5:c8:a5:c4:dd:ce:5b:d7:20:cd:
                    06:6b:ba:5b:b1:34:73:a5:8b:76:e2:1c:79:f1:84:
                    6f:7a:42:22:d3:c6:ca:d6:76:65:b3:a4:fe:73:15:
                    88:28:2a:b0:e5:06:03:26:e1:22:18:a6:da:27:15:
                    cd:e6:b0:45:bb:e0:36:1f:1f:48:44:e8:9e:87:94:
                    a8:e6:f7:dc:de:fe:0e:63:9f:d4:63:37:e4:b1:fa:
                    7e:c6:af:c9:24:92:8f:4c:ad:5e:6c:e4:22:83:f0:
                    c7:0b:ef:dc:cb:1f:a5:c9:5d:50:6c:ea:4b:dd:9d:
                    8a:a2:ee:b4:dd:3f:b4:df:e0:79:bd:8d:e8:8e:1a:
                    0f:c4:0e:64:ca:48:f1:6e:43:13:e0:8c:40:ce:aa:
                    14:a8:f0:46:78:5e:61:7f:2e:58:1b:4f:66:4e:bc:
                    88:21:3b:4e:b3:48:60:80:46:96:cb:42:67:9c:77:
                    03:f5:36:35:81:83:c9:19:c2:4f:8c:cb:1a:92:f1:
                    19:a4:d5:bc:9b:d2:1e:5f:e0:93:0e:a0:ad:72:a2:
                    24:4b:81:5a:63:e7:c5:84:e7:4e:d7:c1:d7:15:18:
                    07:2c:dd:38:61:ae:38:04:66:eb:f9:4d:90:d2:49:
                    31:55:d1:52:5b:5e:68:d9:b4:e6:83:03:29:ea:79:
                    d2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:66:92:35:A1:B1:55:31:D5:2C:F9:97:C8:0B:B8:E6:E7:17:36:61
            X509v3 Authority Key Identifier:
                keyid:94:D2:CF:44:A3:69:A4:22:34:4F:76:57:83:BF:01:E9:82:A9:C4:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2A10/F256CC16232C11F193A4D832A3833773/lNLPRKNppCI0T3ZXg78B6YKpxAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNLPRKNppCI0T3ZXg78B6YKpxAE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2A10/F256CC16232C11F193A4D832A3833773/lNLPRKNppCI0T3ZXg78B6YKpxAE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:57:92:eb:47:09:f6:88:db:b5:2d:ee:cb:9e:42:e0:48:4f:
         79:bd:3c:76:9c:d6:80:dd:d3:61:ae:ae:d5:90:d9:d6:ab:26:
         be:60:c6:44:a8:2b:65:9d:ea:a4:fa:de:c3:19:70:7e:f5:5e:
         51:cd:d1:bd:a2:78:0e:d9:e3:88:64:69:cf:d5:94:8b:03:40:
         4d:b6:ec:e2:09:31:ca:ed:29:27:0e:05:55:db:dd:73:92:35:
         6e:42:9a:fd:c6:16:e7:2c:6d:2a:77:39:23:a1:64:e8:54:a6:
         35:b5:58:74:5b:cc:cd:05:3e:1f:e1:e4:07:42:a5:5b:b8:37:
         9a:5a:36:57:8e:91:ec:60:f3:cf:0d:f3:58:c9:80:cc:17:88:
         a5:a0:aa:40:a5:33:49:6f:99:c5:56:8d:f1:f1:17:6b:4c:8b:
         36:e1:b4:80:52:3c:e4:af:b8:e2:82:90:4a:1c:dd:03:33:2f:
         91:7e:b7:e2:52:73:7c:9e:9e:0f:49:71:81:1b:b0:10:b4:b2:
         35:72:f1:53:de:c8:32:62:30:eb:a3:52:62:16:f3:42:31:99:
         42:68:78:56:fa:33:3c:84:06:be:d0:df:54:16:96:75:19:4b:
         e7:d2:4c:80:ee:98:40:eb:f1:b6:ab:a1:c8:a7:fa:f8:f1:1e:
         9e:96:ea:e4
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
MkExMDExMC8GA1UEBRMoOTREMkNGNDRBMzY5QTQyMjM0NEY3NjU3ODNCRjAxRTk4
MkE5QzQwMTAeFw0yNjA1MTkwODQzMzZaFw0yNjA1MjYwODQzMzZaMBgxFjAUBgNV
BAMTDTZhMGMyMmI4LTBjODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDtdf5A9cilxN3OW9cgzQZruluxNHOli3biHHnxhG96QiLTxsrWdmWzpP5zFYgo
KrDlBgMm4SIYptonFc3msEW74DYfH0hE6J6HlKjm99ze/g5jn9RjN+Sx+n7Gr8kk
ko9MrV5s5CKD8McL79zLH6XJXVBs6kvdnYqi7rTdP7Tf4Hm9jeiOGg/EDmTKSPFu
QxPgjEDOqhSo8EZ4XmF/LlgbT2ZOvIghO06zSGCARpbLQmecdwP1NjWBg8kZwk+M
yxqS8Rmk1byb0h5f4JMOoK1yoiRLgVpj58WE507XwdcVGAcs3ThhrjgEZuv5TZDS
STFV0VJbXmjZtOaDAynqedLNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUaGaSNaGx
VTHVLPmXyAu45ucXNmEwHwYDVR0jBBgwFoAUlNLPRKNppCI0T3ZXg78B6YKpxAEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyQTEwL0YyNTZDQzE2MjMy
QzExRjE5M0E0RDgzMkEzODMzNzczL2xOTFBSS05wcENJMFQzWlhnNzhCNllLcHhB
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbE5MUFJLTnBwQ0kwVDNaWGc3OEI2WUtweEFFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy
QTEwL0YyNTZDQzE2MjMyQzExRjE5M0E0RDgzMkEzODMzNzczL2xOTFBSS05wcENJ
MFQzWlhnNzhCNllLcHhBRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA5V5LrRwn2iNu1Le7LnkLgSE95vTx2nNaA3dNhrq7VkNnWqya+YMZEqCtlneqk
+t7DGXB+9V5RzdG9ongO2eOIZGnP1ZSLA0BNtuziCTHK7SknDgVV291zkjVuQpr9
xhbnLG0qdzkjoWToVKY1tVh0W8zNBT4f4eQHQqVbuDeaWjZXjpHsYPPPDfNYyYDM
F4iloKpApTNJb5nFVo3x8RdrTIs24bSAUjzkr7jigpBKHN0DMy+RfrfiUnN8np4P
SXGBG7AQtLI1cvFT3sgyYjDro1JiFvNCMZlCaHhW+jM8hAa+0N9UFpZ1GUvn0kyA
7phA6/G2q6HIp/r48R6elurk
-----END CERTIFICATE-----
Generated at Thu May 21 09:30:45 2026 by rpki-client