Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
File:                     lXRSk8iKJybhClfVj0LMMWm3ySI.mft (raw, json)
Hash identifier:          zCH3VWXFvNWtJ8A33Ws97X23X7nSppfz81dO+p9z13A=
Subject key identifier:   CB:F9:12:0A:44:C2:AE:7F:76:40:D8:54:78:B4:D4:9B:1F:54:14:A1
Authority key identifier: 95:74:52:93:C8:8A:27:26:E1:0A:57:D5:8F:42:CC:31:69:B7:C9:22
Certificate issuer:       /CN=A91144C9/serialNumber=95745293C88A2726E10A57D58F42CC3169B7C922
Certificate serial:       0116
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
Manifest number:          0107
Signing time:             Mon 27 Jul 2026 08:22:02 +0000
Manifest this update:     Mon 27 Jul 2026 08:22:01 +0000
Manifest next update:     Mon 03 Aug 2026 08:22:01 +0000
Files and hashes:         1: lXRSk8iKJybhClfVj0LMMWm3ySI.crl (hash: FYnBmG3g3ZJ/xXNpJbTtlr1dZdBsFysGnkwdlnDapWQ=)
                          2: 98DD71780ECC11F0B8E48170C4F9AE02.roa (hash: IaV3dmr7MH64uEELqjBq/78684gUfePzw+oStPl/t4w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.crl
                          rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:22:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 278 (0x116)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91144C9, serialNumber=95745293C88A2726E10A57D58F42CC3169B7C922
        Validity
            Not Before: Jul 27 08:22:01 2026 GMT
            Not After : Aug  3 08:22:01 2026 GMT
        Subject: CN=6a67152a-d0fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d9:1c:34:62:a9:39:2d:3d:72:16:dc:5c:22:
                    43:75:13:a2:19:5f:e0:c2:03:ea:04:94:6a:77:60:
                    66:1f:a7:4e:81:64:2a:9e:ee:6d:7c:3c:64:d1:47:
                    ac:35:9c:91:0d:ca:51:b5:5d:0e:10:fa:0a:e7:ee:
                    52:8e:00:c9:2e:64:68:f4:c5:e0:7a:8f:6a:f2:91:
                    04:69:7e:c7:16:5f:48:45:09:9e:37:e1:85:8c:29:
                    16:7e:7d:3e:55:04:ad:c1:63:8d:7e:82:6d:e2:05:
                    82:79:d6:e6:67:21:35:35:98:80:22:8c:15:44:1a:
                    17:7b:ff:43:c6:7a:1c:1f:5c:3f:88:c6:3e:2f:3d:
                    62:dd:0f:29:85:a2:98:40:d7:bd:fd:27:25:2b:c3:
                    9b:7a:68:06:59:6d:87:f4:02:c6:94:ab:42:9c:21:
                    b4:f4:b2:c4:e8:b6:73:b2:39:bd:b1:ea:fa:5b:b0:
                    ee:b0:69:ce:28:af:ec:ad:d4:7f:1f:13:7f:a7:80:
                    d6:2d:c5:66:3a:1a:35:c9:14:aa:9e:db:b4:8e:6d:
                    fc:f6:8f:0a:ed:55:b7:eb:a9:ae:49:9e:07:65:61:
                    6d:81:40:28:6e:22:9e:51:96:a6:f4:3a:5e:ab:78:
                    b4:90:f5:ae:14:40:45:f2:f0:0f:48:bd:9b:10:06:
                    02:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F9:12:0A:44:C2:AE:7F:76:40:D8:54:78:B4:D4:9B:1F:54:14:A1
            X509v3 Authority Key Identifier:
                keyid:95:74:52:93:C8:8A:27:26:E1:0A:57:D5:8F:42:CC:31:69:B7:C9:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:3c:27:6f:2c:e7:51:83:cd:4d:2d:23:10:da:cd:e6:4a:67:
         4b:93:ac:7a:d2:94:00:bc:ae:ae:65:73:30:43:09:ef:95:94:
         84:ff:2b:bf:db:4e:ad:b1:2e:58:7c:ab:ab:d3:8f:5c:7a:e2:
         78:48:8c:67:44:1e:de:0a:71:59:ea:39:91:a6:19:14:7b:ca:
         03:fc:42:0f:17:4a:85:0b:cb:19:62:5a:13:34:bc:3a:17:92:
         63:aa:65:1e:6d:4d:6a:fa:e4:ee:2d:1c:55:3c:5a:29:55:7d:
         07:d2:7c:5a:de:b2:4f:25:d0:02:ec:22:9b:e7:95:b6:ef:91:
         43:94:8e:ec:83:5b:67:32:2b:1c:99:19:02:05:31:7f:1a:5c:
         52:d2:67:88:7f:d2:4f:21:b6:10:02:76:9b:f7:0b:44:ae:14:
         74:e7:7e:de:c9:8e:ab:8c:6a:14:fb:a0:59:ab:cd:22:79:7b:
         26:6e:ea:6d:e7:d5:41:fd:4d:29:43:0a:17:4a:54:5a:c3:71:
         67:da:38:0f:1e:76:d6:1e:15:c4:f5:df:06:28:8c:cf:3e:a1:
         64:c5:95:57:d2:fc:dd:60:b1:64:c7:ad:b8:58:3a:e0:9b:41:
         5a:ef:88:0e:17:43:3a:a7:27:80:07:a9:a7:25:f2:4c:78:d3:
         8f:7f:3e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:38:10 2026 by rpki-client