Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F85F/88F02B94491C11F1B9ED37A29D833773/LyzSxxoRGjdJaH9O5xIgN4pA8yU.mft
File:                     LyzSxxoRGjdJaH9O5xIgN4pA8yU.mft (raw, json)
Hash identifier:          EM9kVe48insL8kTJbUChjfWMXc9pjrZR7JSozpmxUwA=
Subject key identifier:   33:99:3F:F4:99:8C:DF:69:17:60:13:D5:E9:DB:39:0B:44:4B:74:DE
Authority key identifier: 2F:2C:D2:C7:1A:11:1A:37:49:68:7F:4E:E7:12:20:37:8A:40:F3:25
Certificate issuer:       /CN=A911F85F/serialNumber=2F2CD2C71A111A3749687F4EE71220378A40F325
Certificate serial:       0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyzSxxoRGjdJaH9O5xIgN4pA8yU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F85F/88F02B94491C11F1B9ED37A29D833773/LyzSxxoRGjdJaH9O5xIgN4pA8yU.mft
Manifest number:          09
Signing time:             Tue 19 May 2026 09:03:40 +0000
Manifest this update:     Tue 19 May 2026 09:03:39 +0000
Manifest next update:     Tue 26 May 2026 09:03:39 +0000
Files and hashes:         1: LyzSxxoRGjdJaH9O5xIgN4pA8yU.crl (hash: M+/9vTrn11qjapngQAGP7ta2IB5IkxShVKbCcStQ+OA=)
                          2: C136E3D4491D11F1954C6C159E833773.roa (hash: dBt147+my2tXexbIdXHCR7XTVGrFV/mewlu8hdTPrGU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F85F/88F02B94491C11F1B9ED37A29D833773/LyzSxxoRGjdJaH9O5xIgN4pA8yU.crl
                          rsync://rpki.apnic.net/member_repository/A911F85F/88F02B94491C11F1B9ED37A29D833773/LyzSxxoRGjdJaH9O5xIgN4pA8yU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyzSxxoRGjdJaH9O5xIgN4pA8yU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 May 2026 09:03:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F85F, serialNumber=2F2CD2C71A111A3749687F4EE71220378A40F325
        Validity
            Not Before: May 19 09:03:39 2026 GMT
            Not After : May 26 09:03:39 2026 GMT
        Subject: CN=6a0c276c-0b09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b7:98:e5:89:84:80:08:70:c9:c1:f9:bc:51:
                    4e:61:c8:3f:3e:f2:21:8a:3e:37:7e:0d:d6:9b:a2:
                    62:31:1a:18:5e:d0:7f:2b:4e:f5:86:d8:dc:b2:8d:
                    01:72:34:f7:b7:27:52:a2:29:62:0c:5e:f8:45:91:
                    ed:c6:54:84:a8:c2:ac:bd:24:60:93:7f:50:8f:fe:
                    8f:0e:cb:f7:e1:55:10:52:5f:32:d4:54:6a:df:84:
                    11:e2:0c:48:d9:d8:a8:28:9a:73:69:a5:4a:0a:d1:
                    39:dd:01:d2:b0:3a:41:f9:3e:d7:83:b7:a5:66:d3:
                    5d:c0:06:a2:dc:50:08:2b:87:9f:bc:9e:03:44:c1:
                    e2:b2:03:a6:64:3e:15:66:c8:a7:3e:04:4a:b3:8c:
                    77:61:b4:67:f0:9e:b6:13:c3:53:d0:45:71:01:28:
                    75:7f:26:cd:ad:9f:e0:36:3b:9f:2e:c2:5f:d0:60:
                    c6:c3:37:ab:35:ba:9a:16:5d:d8:6d:fb:21:2b:97:
                    cf:97:6e:b6:1a:02:45:1a:ce:e3:b0:1f:14:54:eb:
                    c6:6a:0c:3e:3c:2c:3f:61:57:9a:62:fc:6b:ce:68:
                    83:8e:50:cb:d5:b7:87:d1:15:c3:17:db:26:af:00:
                    68:d6:e8:24:f4:39:09:65:0e:c9:2e:c6:2a:ad:d6:
                    8c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:99:3F:F4:99:8C:DF:69:17:60:13:D5:E9:DB:39:0B:44:4B:74:DE
            X509v3 Authority Key Identifier:
                keyid:2F:2C:D2:C7:1A:11:1A:37:49:68:7F:4E:E7:12:20:37:8A:40:F3:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F85F/88F02B94491C11F1B9ED37A29D833773/LyzSxxoRGjdJaH9O5xIgN4pA8yU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyzSxxoRGjdJaH9O5xIgN4pA8yU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F85F/88F02B94491C11F1B9ED37A29D833773/LyzSxxoRGjdJaH9O5xIgN4pA8yU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:34:c8:b5:43:9c:01:33:ba:61:44:f6:2e:b8:a5:85:80:6e:
         2e:c6:bb:b8:21:08:3a:96:b8:b4:04:88:0d:4f:04:c8:ff:ab:
         ff:72:c9:92:8c:c1:45:27:3e:a8:49:cc:dd:96:0d:d1:2a:13:
         df:71:b9:4e:57:c9:ea:4d:00:26:15:78:ab:b5:c5:e8:87:0e:
         96:04:3e:96:55:ed:c2:de:4f:ba:8f:0f:85:6a:3b:0d:20:e5:
         15:af:72:a6:b0:24:6c:95:46:4a:99:87:52:e1:1e:17:27:d6:
         f5:3b:47:18:cb:86:38:68:60:ef:57:92:a4:18:2e:82:05:37:
         80:07:63:c0:78:3d:e1:f8:8d:fe:c2:db:5b:cc:0b:73:2d:31:
         70:7a:34:ef:83:6c:3e:0b:76:f6:37:1f:ed:73:21:4a:82:8b:
         1e:bd:d3:3f:60:c5:a8:63:41:3e:7a:5d:c9:24:0e:b0:12:29:
         e0:58:ee:24:8a:df:5c:61:a6:7a:99:77:81:ca:2b:26:00:40:
         9a:89:fa:78:96:ae:5f:be:93:af:27:3f:07:fe:ff:41:ca:05:
         7f:aa:ec:c3:66:3e:27:01:f8:ac:dd:42:2b:f6:8f:4b:5b:71:
         01:a7:ce:17:3e:a5:5d:97:43:a2:23:84:35:aa:95:78:ba:b9:
         52:fc:26:e6
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
Rjg1RjExMC8GA1UEBRMoMkYyQ0QyQzcxQTExMUEzNzQ5Njg3RjRFRTcxMjIwMzc4
QTQwRjMyNTAeFw0yNjA1MTkwOTAzMzlaFw0yNjA1MjYwOTAzMzlaMBgxFjAUBgNV
BAMTDTZhMGMyNzZjLTBiMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDnt5jliYSACHDJwfm8UU5hyD8+8iGKPjd+DdabomIxGhhe0H8rTvWG2NyyjQFy
NPe3J1KiKWIMXvhFke3GVISowqy9JGCTf1CP/o8Oy/fhVRBSXzLUVGrfhBHiDEjZ
2KgomnNppUoK0TndAdKwOkH5PteDt6Vm013ABqLcUAgrh5+8ngNEweKyA6ZkPhVm
yKc+BEqzjHdhtGfwnrYTw1PQRXEBKHV/Js2tn+A2O58uwl/QYMbDN6s1upoWXdht
+yErl8+XbrYaAkUazuOwHxRU68ZqDD48LD9hV5pi/GvOaIOOUMvVt4fRFcMX2yav
AGjW6CT0OQllDskuxiqt1oynAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUM5k/9JmM
32kXYBPV6ds5C0RLdN4wHwYDVR0jBBgwFoAULyzSxxoRGjdJaH9O5xIgN4pA8yUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGODVGLzg4RjAyQjk0NDkx
QzExRjFCOUVEMzdBMjlEODMzNzczL0x5elN4eG9SR2pkSmFIOU81eElnTjRwQTh5
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTHl6U3h4b1JHamRKYUg5TzV4SWdONHBBOHlVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFG
ODVGLzg4RjAyQjk0NDkxQzExRjFCOUVEMzdBMjlEODMzNzczL0x5elN4eG9SR2pk
SmFIOU81eElnTjRwQTh5VS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCsNMi1Q5wBM7phRPYuuKWFgG4uxru4IQg6lri0BIgNTwTI/6v/csmSjMFFJz6o
Sczdlg3RKhPfcblOV8nqTQAmFXirtcXohw6WBD6WVe3C3k+6jw+FajsNIOUVr3Km
sCRslUZKmYdS4R4XJ9b1O0cYy4Y4aGDvV5KkGC6CBTeAB2PAeD3h+I3+wttbzAtz
LTFwejTvg2w+C3b2Nx/tcyFKgosevdM/YMWoY0E+el3JJA6wEingWO4kit9cYaZ6
mXeByismAECaifp4lq5fvpOvJz8H/v9BygV/quzDZj4nAfis3UIr9o9LW3EBp84X
PqVdl0OiI4Q1qpV4urlS/Cbm
-----END CERTIFICATE-----
Generated at Thu May 21 09:39:30 2026 by rpki-client