Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft
File:                     lrZQExL54S6xmmT2IuF81Ced8M8.mft (raw, json)
Hash identifier:          qH+TrN76z5Vr7ecyjKTrMof1nCGWD04RuwxqjFQzQSI=
Subject key identifier:   E5:1D:F7:A7:D3:D1:1C:52:36:61:9A:03:06:C8:F7:FF:0A:AE:7F:FF
Authority key identifier: 96:B6:50:13:12:F9:E1:2E:B1:9A:64:F6:22:E1:7C:D4:27:9D:F0:CF
Certificate issuer:       /CN=A91FBE5E/serialNumber=96B6501312F9E12EB19A64F622E17CD4279DF0CF
Certificate serial:       0177
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft
Manifest number:          0170
Signing time:             Sun 05 Apr 2026 04:14:11 +0000
Manifest this update:     Sun 05 Apr 2026 04:14:10 +0000
Manifest next update:     Sun 12 Apr 2026 04:14:10 +0000
Files and hashes:         1: lrZQExL54S6xmmT2IuF81Ced8M8.crl (hash: eIWj13c93ixkiJ4Cm77PN8YC2QRTd0KJXNeqydOowoU=)
                          2: 78A6163A03A111EF8B02B62AC4F9AE02.roa (hash: /cyIS7He6/hUkUatIHzzKlcuqjzcEKY9CwicKq3CtKI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.crl
                          rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:14:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 375 (0x177)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBE5E, serialNumber=96B6501312F9E12EB19A64F622E17CD4279DF0CF
        Validity
            Not Before: Apr  5 04:14:10 2026 GMT
            Not After : Apr 12 04:14:10 2026 GMT
        Subject: CN=69d1e193-3932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4f:19:5d:25:a3:53:e8:5b:8f:b5:28:62:b3:
                    98:fd:2c:6f:7e:d7:3b:02:88:0a:60:42:ee:e5:f9:
                    75:83:99:fb:3e:d8:1f:22:c3:48:0b:83:e2:2b:de:
                    6c:39:ee:32:11:44:00:66:ee:16:6e:c6:b8:31:68:
                    0a:54:49:4c:70:9a:e6:4a:3b:c2:e1:ef:b2:dd:c7:
                    5e:e9:e4:89:ec:d7:d5:b4:e5:61:1d:c3:29:b4:19:
                    44:d9:eb:9a:06:a6:3b:c0:ec:90:a9:96:0e:c1:6e:
                    06:c6:2f:2f:80:98:97:21:cd:62:69:c1:ef:76:c5:
                    9b:7b:08:3e:f1:e2:5a:10:31:d4:ea:45:9e:1d:a1:
                    9e:ec:ad:48:10:44:2f:3a:79:32:4a:76:6f:c0:b3:
                    cb:77:10:99:6e:d2:d4:ee:63:1a:00:a4:32:99:7c:
                    8e:2f:04:44:a9:99:e3:ea:f4:48:d8:2d:8d:9a:ab:
                    3b:a2:2f:a9:c0:ae:09:65:68:a9:37:b1:c2:46:e1:
                    86:86:2a:68:22:b4:cf:53:90:86:83:09:dc:56:6b:
                    ac:4e:b2:3c:9f:94:d2:db:0d:72:a6:b8:6b:80:a8:
                    e4:f3:7c:c8:fd:2c:1a:db:c1:0f:d3:32:66:57:ae:
                    ce:72:6c:23:f7:39:94:f3:21:d3:b6:0d:3c:89:26:
                    3d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:1D:F7:A7:D3:D1:1C:52:36:61:9A:03:06:C8:F7:FF:0A:AE:7F:FF
            X509v3 Authority Key Identifier:
                keyid:96:B6:50:13:12:F9:E1:2E:B1:9A:64:F6:22:E1:7C:D4:27:9D:F0:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:66:c9:ae:e6:2d:08:25:9d:50:3e:02:a5:3a:15:80:ad:3d:
         59:be:02:a1:9c:b5:22:aa:bc:1e:9d:db:6d:b3:bc:5d:3a:75:
         dc:c2:60:a2:50:0a:2b:3b:18:ee:d8:04:17:ac:c1:45:30:bb:
         39:17:0e:b3:84:f0:27:02:9c:13:0d:05:79:9b:cf:38:0e:da:
         45:59:08:2a:c6:f8:cc:d4:b8:59:7e:3e:08:74:20:67:ca:46:
         86:ee:5b:03:53:d6:df:87:4e:ca:b7:97:15:db:47:0a:45:9f:
         47:ad:1a:b7:c5:5f:92:21:6f:54:9f:51:25:20:8a:57:22:aa:
         75:72:1e:36:2e:5a:3c:4f:a7:18:ae:3d:49:c2:51:08:ae:f2:
         3e:68:26:c3:3d:b6:71:27:37:7a:21:84:06:44:38:17:2d:94:
         d1:97:1a:0b:8b:28:79:f7:5b:f8:c3:d6:6c:f9:4f:5c:88:9b:
         36:6b:18:93:ad:45:22:ce:bb:a0:4c:78:ae:a2:57:db:64:f7:
         a9:84:3c:7b:df:0b:5a:54:09:42:2e:fe:72:16:97:5f:ba:d6:
         fd:fd:62:5d:2c:f2:3c:60:a1:ff:31:df:92:a7:a0:70:a4:f1:
         a5:c1:7a:93:a1:72:f4:3a:a9:ec:96:fa:6f:55:06:3a:3e:69:
         ae:4f:aa:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:57:59 2026 by rpki-client