Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122C9F/D6D43A403E2611F190F6B08EB5833773/lni-5PT__QKHfdc7b6kMv8I363I.mft
File:                     lni-5PT__QKHfdc7b6kMv8I363I.mft (raw, json)
Hash identifier:          C953Y9XM/4bKv3EqZsKWFoLWe6kvMQnodJRfeDDrYiM=
Subject key identifier:   4A:00:E7:26:A8:10:A6:9B:80:D4:B9:2D:7E:92:B2:44:CE:5C:62:D6
Authority key identifier: 96:78:BE:E4:F4:FF:FD:02:87:7D:D7:3B:6F:A9:0C:BF:C2:37:EB:72
Certificate issuer:       /CN=A9122C9F/serialNumber=9678BEE4F4FFFD02877DD73B6FA90CBFC237EB72
Certificate serial:       22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lni-5PT__QKHfdc7b6kMv8I363I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122C9F/D6D43A403E2611F190F6B08EB5833773/lni-5PT__QKHfdc7b6kMv8I363I.mft
Manifest number:          21
Signing time:             Tue 23 Jun 2026 09:06:32 +0000
Manifest this update:     Tue 23 Jun 2026 09:06:31 +0000
Manifest next update:     Tue 30 Jun 2026 09:06:31 +0000
Files and hashes:         1: lni-5PT__QKHfdc7b6kMv8I363I.crl (hash: Dq6EhzQOTqByZaHZJPvcKbt+ns6hKyV4o9/97HDsIT4=)
                          2: 33FC8BC63E2911F1AA842DBCB5833773.roa (hash: EFIN7dwVoLjGhVIH1fElwILWLAM7DNIzqUP1nbDND0w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122C9F/D6D43A403E2611F190F6B08EB5833773/lni-5PT__QKHfdc7b6kMv8I363I.crl
                          rsync://rpki.apnic.net/member_repository/A9122C9F/D6D43A403E2611F190F6B08EB5833773/lni-5PT__QKHfdc7b6kMv8I363I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lni-5PT__QKHfdc7b6kMv8I363I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 09:06:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122C9F, serialNumber=9678BEE4F4FFFD02877DD73B6FA90CBFC237EB72
        Validity
            Not Before: Jun 23 09:06:31 2026 GMT
            Not After : Jun 30 09:06:31 2026 GMT
        Subject: CN=6a3a4c97-45ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:77:f3:9d:44:d4:cb:55:50:cf:1e:e9:0a:28:
                    23:39:4c:f1:49:6b:b7:a2:78:91:e9:f8:f8:72:d2:
                    a2:41:5a:dc:ef:8a:2e:02:18:ee:10:38:bf:55:09:
                    f0:f1:c6:2d:e1:98:1c:e9:87:f4:be:66:f9:ea:69:
                    94:af:7b:77:b7:23:89:17:e6:83:f0:e3:86:d1:15:
                    13:f8:a3:35:7f:56:38:ff:81:20:97:b2:e7:85:39:
                    96:f0:69:1e:53:ea:39:d2:d1:8e:81:fa:ca:69:a1:
                    b9:13:53:3d:2d:2a:13:69:5f:7c:8a:3d:e4:8d:48:
                    1d:35:03:10:96:87:98:43:43:d0:d6:8a:60:77:c9:
                    d6:d1:a7:2c:34:f3:b7:ea:99:6f:13:7f:41:4f:d3:
                    74:53:7e:c2:11:c5:cf:fb:fa:4e:37:fb:bf:e2:37:
                    24:aa:cf:5d:c2:c3:92:e8:79:f8:58:9a:86:47:46:
                    42:68:c3:9d:06:69:ba:c3:91:ec:ce:08:14:5a:14:
                    1a:be:24:88:72:8f:15:47:e2:7f:81:69:e2:4f:75:
                    2b:35:3b:f7:90:ff:56:15:57:5b:6d:12:0e:20:65:
                    75:83:c1:c9:52:ea:8c:70:26:20:82:73:76:70:02:
                    52:0e:ee:be:a8:d0:e4:61:00:56:f4:de:52:08:e4:
                    e7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:00:E7:26:A8:10:A6:9B:80:D4:B9:2D:7E:92:B2:44:CE:5C:62:D6
            X509v3 Authority Key Identifier:
                keyid:96:78:BE:E4:F4:FF:FD:02:87:7D:D7:3B:6F:A9:0C:BF:C2:37:EB:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122C9F/D6D43A403E2611F190F6B08EB5833773/lni-5PT__QKHfdc7b6kMv8I363I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lni-5PT__QKHfdc7b6kMv8I363I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122C9F/D6D43A403E2611F190F6B08EB5833773/lni-5PT__QKHfdc7b6kMv8I363I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:2d:c3:3e:86:06:32:4f:f9:3c:33:26:21:e7:67:52:69:26:
         9e:ac:04:44:1a:6c:85:89:dd:64:f2:8c:1c:fc:9b:fa:aa:1f:
         f8:e9:07:f7:e0:0a:48:c9:d6:6f:d5:e1:03:5b:7a:04:be:a0:
         0b:34:e4:33:8f:17:7a:37:21:61:9b:97:5d:a4:be:2c:5f:12:
         02:7f:a1:08:d8:ca:3c:19:02:80:98:3d:6b:e4:a7:ef:1f:5d:
         79:13:72:22:4d:c6:b3:6e:7b:d9:44:96:de:3b:33:a8:9f:2d:
         2c:25:5a:4e:6f:48:d7:60:33:dc:d1:b4:da:f3:15:47:f7:41:
         87:1c:1c:e1:28:bc:80:8b:07:fc:df:ad:07:50:07:89:d9:97:
         51:a5:6d:f1:00:07:59:10:43:f4:ae:f6:f5:9d:de:36:57:b9:
         60:8c:62:1f:be:7a:3b:81:a4:73:a4:31:dc:69:15:34:7f:f9:
         21:ef:49:de:de:3f:f6:52:31:dc:9c:13:5a:53:42:71:b3:2a:
         a9:8e:f0:1b:fc:ad:22:82:d0:4d:e2:d0:91:09:81:e9:ab:3b:
         36:f0:bc:df:c3:59:98:f2:9f:53:99:60:60:71:10:e1:89:21:
         82:ad:d1:f3:27:fc:f5:12:00:d6:e1:f3:5d:e5:27:d1:7e:ae:
         29:29:d4:1b
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
MkM5RjExMC8GA1UEBRMoOTY3OEJFRTRGNEZGRkQwMjg3N0RENzNCNkZBOTBDQkZD
MjM3RUI3MjAeFw0yNjA2MjMwOTA2MzFaFw0yNjA2MzAwOTA2MzFaMBgxFjAUBgNV
BAMTDTZhM2E0Yzk3LTQ1YWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCyd/OdRNTLVVDPHukKKCM5TPFJa7eieJHp+Phy0qJBWtzvii4CGO4QOL9VCfDx
xi3hmBzph/S+ZvnqaZSve3e3I4kX5oPw44bRFRP4ozV/Vjj/gSCXsueFOZbwaR5T
6jnS0Y6B+sppobkTUz0tKhNpX3yKPeSNSB01AxCWh5hDQ9DWimB3ydbRpyw087fq
mW8Tf0FP03RTfsIRxc/7+k43+7/iNySqz13Cw5LoefhYmoZHRkJow50GabrDkezO
CBRaFBq+JIhyjxVH4n+BaeJPdSs1O/eQ/1YVV1ttEg4gZXWDwclS6oxwJiCCc3Zw
AlIO7r6o0ORhAFb03lII5Oe/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUSgDnJqgQ
ppuA1LktfpKyRM5cYtYwHwYDVR0jBBgwFoAUlni+5PT//QKHfdc7b6kMv8I363Iw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIyQzlGL0Q2RDQzQTQwM0Uy
NjExRjE5MEY2QjA4RUI1ODMzNzczL2xuaS01UFRfX1FLSGZkYzdiNmtNdjhJMzYz
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbG5pLTVQVF9fUUtIZmRjN2I2a012OEkzNjNJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIy
QzlGL0Q2RDQzQTQwM0UyNjExRjE5MEY2QjA4RUI1ODMzNzczL2xuaS01UFRfX1FL
SGZkYzdiNmtNdjhJMzYzSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCfLcM+hgYyT/k8MyYh52dSaSaerAREGmyFid1k8owc/Jv6qh/46Qf34ApIydZv
1eEDW3oEvqALNOQzjxd6NyFhm5ddpL4sXxICf6EI2Mo8GQKAmD1r5KfvH115E3Ii
TcazbnvZRJbeOzOony0sJVpOb0jXYDPc0bTa8xVH90GHHBzhKLyAiwf8360HUAeJ
2ZdRpW3xAAdZEEP0rvb1nd42V7lgjGIfvno7gaRzpDHcaRU0f/kh70ne3j/2UjHc
nBNaU0JxsyqpjvAb/K0igtBN4tCRCYHpqzs28Lzfw1mY8p9TmWBgcRDhiSGCrdHz
J/z1EgDW4fNd5SfRfq4pKdQb
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:10:15 2026 by rpki-client