Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.mft
File:                     lMnUO1O12FDZjg2i1e88ThwxIEU.mft (raw, json)
Hash identifier:          abbA7Y2QhO7Xl+OLILLQCiunbIvIg1MwPKQ09Ysb7z0=
Subject key identifier:   F7:2C:40:89:D0:5B:F3:2A:1F:84:1A:0D:86:C6:F4:C9:50:16:9B:E5
Authority key identifier: 94:C9:D4:3B:53:B5:D8:50:D9:8E:0D:A2:D5:EF:3C:4E:1C:31:20:45
Certificate issuer:       /CN=A9120E21/serialNumber=94C9D43B53B5D850D98E0DA2D5EF3C4E1C312045
Certificate serial:       110E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMnUO1O12FDZjg2i1e88ThwxIEU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.mft
Manifest number:          110B
Signing time:             Tue 18 Aug 2026 17:28:47 +0000
Manifest this update:     Tue 18 Aug 2026 17:28:46 +0000
Manifest next update:     Tue 25 Aug 2026 17:28:46 +0000
Files and hashes:         1: lMnUO1O12FDZjg2i1e88ThwxIEU.crl (hash: 0TYbab82504wqH/5/TGt0QS4ZHmPpq9d37Wl6NRgl0E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.crl
                          rsync://rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMnUO1O12FDZjg2i1e88ThwxIEU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 17:28:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4366 (0x110e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120E21, serialNumber=94C9D43B53B5D850D98E0DA2D5EF3C4E1C312045
        Validity
            Not Before: Aug 18 17:28:46 2026 GMT
            Not After : Aug 25 17:28:46 2026 GMT
        Subject: CN=6a84964f-d707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:10:6d:7b:0c:dd:7f:4b:52:42:c8:12:15:f3:
                    b3:37:d3:d4:ae:54:15:e5:3e:ae:9f:8b:f6:40:ef:
                    e0:65:b4:ad:4d:e1:cf:92:84:9e:4e:a4:8a:16:a3:
                    1c:c8:da:61:67:ee:3d:92:97:49:b1:7a:b7:50:a2:
                    20:41:ba:a8:9a:9b:28:65:4d:5f:b4:c5:15:bf:cd:
                    90:a8:4e:c5:ee:c4:aa:e8:6d:8a:b8:0c:a2:6e:00:
                    34:a8:e8:ab:ff:d9:3a:9d:a0:15:5b:07:8d:d4:96:
                    40:54:e6:4b:59:f9:73:54:34:e5:30:d4:ab:61:fb:
                    32:9c:95:ff:13:80:31:7b:76:e9:62:8b:88:99:f1:
                    c8:d6:28:b0:39:21:54:61:28:2d:90:06:69:e2:8f:
                    9a:29:9c:f4:c7:56:94:c5:50:8f:01:8e:54:eb:45:
                    28:70:e9:6c:2f:83:24:cf:51:3c:59:e8:47:55:fc:
                    29:19:8d:f6:b4:e8:25:2d:31:7f:3f:fd:ce:63:93:
                    72:9f:c9:bb:e8:22:20:1a:65:a1:50:4f:b9:42:84:
                    20:ea:33:01:c9:92:f4:2b:86:f1:d0:74:d2:8a:55:
                    cd:93:be:54:51:7e:ae:d6:f3:ee:39:68:4a:0f:1d:
                    2a:cb:7e:e6:15:23:55:99:d4:a0:08:fa:6a:a5:06:
                    7a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:2C:40:89:D0:5B:F3:2A:1F:84:1A:0D:86:C6:F4:C9:50:16:9B:E5
            X509v3 Authority Key Identifier:
                keyid:94:C9:D4:3B:53:B5:D8:50:D9:8E:0D:A2:D5:EF:3C:4E:1C:31:20:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMnUO1O12FDZjg2i1e88ThwxIEU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:20:a1:6f:f0:05:ef:9b:71:92:3e:6c:f4:21:72:80:ef:bd:
         e8:8a:88:23:b6:62:5a:04:6f:0a:e0:23:ec:f6:2e:1c:dd:5e:
         53:03:2e:8c:50:b2:ca:02:a1:94:c8:24:e2:36:e0:da:0e:f2:
         05:47:46:c0:3c:c7:f2:97:3a:e0:9f:c9:ed:32:3e:2d:9a:96:
         7b:06:8f:02:30:ef:fa:9b:0c:6d:76:24:94:7a:cd:d3:ca:ea:
         a1:54:88:b7:bd:45:95:a6:de:24:10:15:05:c4:37:6a:80:e1:
         8b:b1:fa:d9:75:e9:bb:17:8d:45:e5:f2:a2:8d:64:64:c9:2c:
         52:15:9f:a3:9c:06:06:06:b1:42:63:4e:dc:dd:83:66:e3:d8:
         6b:a3:ad:b0:fe:2c:c2:39:85:2c:86:b2:a4:2a:79:26:03:13:
         de:04:06:ff:b2:37:e1:d8:8a:8a:53:05:46:c5:c5:85:e3:5d:
         76:63:1e:17:d7:0f:a6:0a:02:3a:dc:11:de:f7:cf:a2:46:e0:
         3d:f5:d3:a3:84:c6:a7:c9:6a:e5:2f:cc:46:19:8b:0f:6c:54:
         6d:e4:ce:c6:1b:b2:dd:8c:88:e0:d4:98:96:84:95:d5:6d:44:
         b4:42:e3:1a:f8:b2:74:e2:14:41:e4:14:18:b0:de:a8:8a:17:
         c6:d9:b5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:41:20 2026 by rpki-client