Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft
File:                     L4vvSDpBiuHAMSMIGG70zXskZuU.mft (raw, json)
Hash identifier:          Bg1qBmf53W7dYl98OpKCJ7ecLmHChe+hZFtV/KfTjYc=
Subject key identifier:   7E:E2:3F:00:9D:F2:5A:03:D4:2D:47:55:77:4E:CE:15:7F:E0:58:3C
Authority key identifier: 2F:8B:EF:48:3A:41:8A:E1:C0:31:23:08:18:6E:F4:CD:7B:24:66:E5
Certificate issuer:       /CN=A9125758/serialNumber=2F8BEF483A418AE1C0312308186EF4CD7B2466E5
Certificate serial:       02E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft
Manifest number:          02E1
Signing time:             Thu 21 May 2026 01:24:35 +0000
Manifest this update:     Thu 21 May 2026 01:24:34 +0000
Manifest next update:     Thu 28 May 2026 01:24:34 +0000
Files and hashes:         1: L4vvSDpBiuHAMSMIGG70zXskZuU.crl (hash: rlMQcB/9oQMlrFCgSjzpN9ZPNcDlgCj/oJxie/AxrDI=)
                          2: 117300B62CDB11EDB2E1DD0DC4F9AE02.roa (hash: 415aT/obMJjSH780K/K390shhJpsFr+sPe3d3m1bO1g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.crl
                          rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 01:24:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 744 (0x2e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125758, serialNumber=2F8BEF483A418AE1C0312308186EF4CD7B2466E5
        Validity
            Not Before: May 21 01:24:34 2026 GMT
            Not After : May 28 01:24:34 2026 GMT
        Subject: CN=6a0e5ed3-d79c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e1:ca:32:b9:aa:cf:66:88:ea:b1:95:0b:4c:
                    1d:07:38:ef:3c:d3:8b:7b:7e:f9:48:51:c6:28:21:
                    38:05:e8:f2:0e:75:f6:a8:4f:2b:8e:27:fe:16:3c:
                    ba:0f:fd:2d:a1:0d:48:96:08:11:4d:c1:1e:54:46:
                    9c:7f:ae:cb:2e:37:db:f8:99:14:f5:57:a7:ec:f3:
                    43:ae:25:a2:82:76:d4:2d:2c:9b:23:c9:51:0f:3b:
                    f0:e2:53:7b:ac:d6:42:cf:d3:9a:39:2c:50:8f:57:
                    90:d0:30:06:f3:d5:ca:79:28:fc:49:8e:8c:33:c9:
                    21:38:a0:7b:59:d3:8c:7d:30:3c:84:f9:24:18:86:
                    c1:2b:67:82:32:3d:75:87:de:09:e8:62:75:95:12:
                    bb:86:1c:3a:0c:90:00:27:44:49:33:7b:a0:c0:76:
                    2f:13:e0:6d:da:14:6b:0c:77:cc:9b:9f:3d:1f:7a:
                    5d:38:80:94:b2:97:1f:81:27:3d:5a:82:36:c3:ea:
                    3b:c1:8a:0d:f6:18:e1:c3:b8:c7:b1:c0:49:52:0c:
                    a9:ec:d7:9b:c3:86:f1:69:2f:36:21:55:b2:ce:22:
                    b4:4b:27:46:58:ef:99:b4:7c:29:c6:58:65:ee:4c:
                    a2:8f:7b:ac:de:39:46:2d:02:e3:2a:f4:62:55:5e:
                    45:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E2:3F:00:9D:F2:5A:03:D4:2D:47:55:77:4E:CE:15:7F:E0:58:3C
            X509v3 Authority Key Identifier:
                keyid:2F:8B:EF:48:3A:41:8A:E1:C0:31:23:08:18:6E:F4:CD:7B:24:66:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:e8:e1:d5:d1:02:a4:8c:c5:f8:f7:71:e3:34:ac:a2:f7:86:
         e9:49:0f:a2:59:7a:71:f0:17:1e:fe:33:b6:56:24:98:5f:4b:
         18:05:98:17:e5:55:79:61:c1:61:f7:a6:6b:48:96:a4:0f:64:
         55:07:a2:89:ea:5d:cb:b0:be:bc:7b:07:ec:47:14:da:05:b2:
         50:d4:50:a6:23:d2:a4:55:cf:3a:96:fb:70:1f:29:40:40:35:
         ba:b6:99:09:31:66:c4:d6:44:7c:59:5b:81:5c:4c:fb:b0:a3:
         7d:fe:8b:03:e4:f0:e6:24:32:b7:a9:d9:d0:71:29:e2:3d:6d:
         49:97:75:54:b1:b5:3d:6c:14:b8:dd:8b:47:3a:a8:21:f5:b0:
         51:d0:cb:9f:97:ff:53:f5:f7:59:8d:f6:a3:d6:df:63:2c:a1:
         c7:a4:a3:b7:6b:b0:b3:a3:43:20:d3:9f:50:a6:ff:b9:0f:12:
         ef:46:63:e4:99:4e:27:ce:48:5a:a2:c7:fa:89:16:00:6a:1a:
         ca:7c:f3:40:c4:78:9f:d5:49:90:fa:b0:ee:8b:dd:81:d6:48:
         63:e2:bf:9f:bf:f2:c6:b7:67:36:06:7a:e1:43:89:56:c0:c1:
         bb:5e:24:67:d7:d6:c0:e8:5c:09:99:86:1f:fa:d3:91:0b:3a:
         f4:8f:0e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:39:16 2026 by rpki-client