Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft
File:                     loNUUNMhwefEjKDF3NK6bB0tSPE.mft (raw, json)
Hash identifier:          ny+zO9UfU3/saUMHAMio6CEMSzJp0HOAHsA8CRH21dA=
Subject key identifier:   F2:B4:57:66:11:27:8E:73:BB:4B:C9:38:6E:10:4F:C0:0A:20:A0:F8
Authority key identifier: 96:83:54:50:D3:21:C1:E7:C4:8C:A0:C5:DC:D2:BA:6C:1D:2D:48:F1
Certificate issuer:       /CN=A912DF25/serialNumber=96835450D321C1E7C48CA0C5DCD2BA6C1D2D48F1
Certificate serial:       0161
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft
Manifest number:          014E
Signing time:             Thu 21 May 2026 05:12:31 +0000
Manifest this update:     Thu 21 May 2026 05:12:31 +0000
Manifest next update:     Thu 28 May 2026 05:12:31 +0000
Files and hashes:         1: loNUUNMhwefEjKDF3NK6bB0tSPE.crl (hash: pANvKowz0kf2weKBpjCTYM1KKeqW/glV1FxCKRDyhg0=)
                          2: 047C04705AC911EF9DF4275AC4F9AE02.roa (hash: rX5GXOpzN7zlqlxxBRKlBapjNOnn5ERzfr6wi0h0HHo=)
                          3: 050079585AC911EF9DF4275AC4F9AE02.roa (hash: cOFr30T5Sd5bA+9nAjs/xIKvrhVxSk/iBKwzS2ubtBQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.crl
                          rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 05:12:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 353 (0x161)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DF25, serialNumber=96835450D321C1E7C48CA0C5DCD2BA6C1D2D48F1
        Validity
            Not Before: May 21 05:12:31 2026 GMT
            Not After : May 28 05:12:31 2026 GMT
        Subject: CN=6a0e943f-4c15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ca:7a:5f:df:d0:48:52:01:bc:28:9b:c7:05:
                    18:56:d8:4d:a0:db:d1:79:2d:22:07:9c:f2:f9:d8:
                    c9:94:a6:e5:44:df:0e:24:81:66:01:a7:b7:0c:96:
                    e9:53:87:f2:54:c1:99:21:08:93:a5:c3:ab:19:5b:
                    59:88:cf:82:8b:0f:a2:cf:d3:30:5a:4b:80:b8:51:
                    35:08:4b:8f:16:3c:c2:5b:fa:59:cd:e5:7b:35:16:
                    72:85:ed:78:62:66:de:0c:5f:07:f4:13:54:f5:9a:
                    14:2e:c0:93:d7:2d:15:e5:1e:c2:49:c5:53:1e:09:
                    42:77:2e:db:df:e0:1f:19:6f:b8:86:bc:3e:90:ec:
                    58:a9:09:f6:98:bf:9e:31:f6:f2:a8:2d:7e:52:32:
                    a4:29:24:cc:0b:12:47:e7:89:16:0f:33:94:87:74:
                    9b:65:e2:d8:66:d3:6a:23:f7:d1:ad:4f:e3:af:87:
                    80:70:8f:f3:2f:3c:36:f2:48:f2:39:a7:ba:15:b9:
                    bb:d1:b4:a6:35:b3:a1:2e:a8:62:bb:9c:14:70:16:
                    0a:f9:89:86:5a:28:5f:a8:f8:8a:28:5e:a1:d0:ec:
                    2f:67:a7:31:1d:4f:20:d8:09:a6:32:3e:8f:f6:f8:
                    45:b4:06:d7:64:f7:8a:02:8e:59:78:d1:1f:8f:bd:
                    62:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B4:57:66:11:27:8E:73:BB:4B:C9:38:6E:10:4F:C0:0A:20:A0:F8
            X509v3 Authority Key Identifier:
                keyid:96:83:54:50:D3:21:C1:E7:C4:8C:A0:C5:DC:D2:BA:6C:1D:2D:48:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:c4:ad:42:af:3d:01:d3:84:45:20:18:60:fd:d5:db:fc:d5:
         a7:6b:64:48:c5:de:00:d8:ae:7d:36:09:e6:95:86:ff:40:d7:
         ad:b7:53:dd:2b:b2:07:0e:6d:37:62:2c:18:a6:f5:e0:91:d0:
         82:07:5f:74:d7:7c:a3:96:79:62:2c:aa:31:6f:fb:aa:3e:ed:
         39:51:af:43:95:28:7c:f9:d7:4f:8a:47:bf:dc:9f:21:01:98:
         4b:c4:fd:59:8d:3b:ab:37:ed:d0:c0:35:45:c8:52:dd:6e:06:
         18:e1:31:8f:7b:dd:6f:02:d3:09:7a:49:9d:8b:9b:83:99:fd:
         73:c9:5f:62:f6:67:67:13:9e:78:5f:d6:ec:c1:9b:68:2f:2c:
         9f:15:24:d2:8f:c3:77:d5:a3:f8:15:dc:65:5e:5a:56:ae:d0:
         31:a7:0f:47:1d:f4:5b:60:b8:35:f2:88:1d:a4:bd:54:3d:8b:
         0d:cf:18:af:55:f4:4a:23:c7:26:7c:0c:ab:77:46:8d:f6:19:
         0c:30:42:d5:00:b0:c8:be:5d:cf:ec:52:fd:16:4c:af:c6:cd:
         5d:bf:f8:a8:79:d8:b8:33:11:13:68:e1:84:da:e1:7f:fd:48:
         bc:1b:7a:79:bb:1f:ce:6c:8e:c4:78:ee:0a:27:0a:7c:61:02:
         6a:2b:35:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:14:40 2026 by rpki-client