Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft
File:                     5LMs8qYR9wLf0JE-PqULT9YexXU.mft (raw, json)
Hash identifier:          f0XcZJwyRd0VHYn6IEAMsqkepH1B+BebIYWsb7+ncbM=
Subject key identifier:   5C:D9:B6:C3:80:78:82:A6:35:27:52:D8:6C:0C:02:F6:9C:A5:07:74
Authority key identifier: E4:B3:2C:F2:A6:11:F7:02:DF:D0:91:3E:3E:A5:0B:4F:D6:1E:C5:75
Certificate issuer:       /CN=A914450B/serialNumber=E4B32CF2A611F702DFD0913E3EA50B4FD61EC575
Certificate serial:       0844
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LMs8qYR9wLf0JE-PqULT9YexXU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft
Manifest number:          083B
Signing time:             Tue 02 Jun 2026 21:00:08 +0000
Manifest this update:     Tue 02 Jun 2026 21:00:08 +0000
Manifest next update:     Tue 09 Jun 2026 21:00:08 +0000
Files and hashes:         1: 5LMs8qYR9wLf0JE-PqULT9YexXU.crl (hash: PYVwYJsHNkfuV1BgQ8kzHXMqStH3MPeo2Hv9CXIMdsA=)
                          2: 5B9B8A1213F311EBA7343351C4F9AE02.roa (hash: XjgKRLBaZq02D/Cp43Aj+NT1Qh0TEvZMzuVtJSm3G00=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.crl
                          rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LMs8qYR9wLf0JE-PqULT9YexXU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 21:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2116 (0x844)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914450B, serialNumber=E4B32CF2A611F702DFD0913E3EA50B4FD61EC575
        Validity
            Not Before: Jun  2 21:00:08 2026 GMT
            Not After : Jun  9 21:00:08 2026 GMT
        Subject: CN=6a1f4458-63cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:44:0b:76:51:f0:f6:ea:22:d7:fe:6a:cd:cc:
                    c0:2c:c5:4c:57:73:2e:4a:e5:80:06:56:c6:78:09:
                    0a:f5:a8:b4:45:72:ec:15:73:9d:ce:a7:a0:61:e5:
                    e5:00:de:b2:db:23:3e:ad:68:4b:e3:4a:33:1d:f4:
                    8a:bc:f5:e7:cd:84:1b:e7:1c:0f:32:a6:3d:02:54:
                    8f:36:18:1b:20:2b:a9:13:fb:6c:23:0e:64:4a:0d:
                    6a:9b:d7:08:04:72:4f:de:76:7a:71:ef:53:20:5d:
                    2a:7d:c7:a7:1a:71:c7:c6:33:ce:5b:14:46:ac:e4:
                    15:5a:d9:5a:4e:b1:a0:52:92:f4:ec:10:26:78:33:
                    58:4c:d7:b3:ab:57:1c:a0:aa:f4:c5:d9:13:30:6d:
                    7a:06:52:88:b6:58:c6:f0:88:13:cc:55:a7:bc:ff:
                    a0:5c:59:74:7d:33:75:c5:d1:b0:20:6c:c9:74:62:
                    6e:2f:ee:08:aa:cc:9d:20:56:c2:43:2f:11:06:64:
                    43:53:c3:98:2b:71:8d:24:cd:c8:4d:e9:53:a0:ba:
                    4b:2a:f9:25:9e:f2:f2:41:d8:17:12:71:b2:db:16:
                    38:c4:e3:35:67:89:25:92:73:3a:a5:12:be:49:a8:
                    a6:60:21:7a:d2:dd:10:2f:8d:49:fc:40:a0:8b:e9:
                    72:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:D9:B6:C3:80:78:82:A6:35:27:52:D8:6C:0C:02:F6:9C:A5:07:74
            X509v3 Authority Key Identifier:
                keyid:E4:B3:2C:F2:A6:11:F7:02:DF:D0:91:3E:3E:A5:0B:4F:D6:1E:C5:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LMs8qYR9wLf0JE-PqULT9YexXU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:8a:98:36:1e:3a:75:32:13:81:21:d2:2f:ab:b5:a3:1a:0c:
         4c:88:1b:4d:ee:c9:0c:5a:9a:a2:db:a1:ee:f7:09:bb:c3:62:
         2e:32:ac:61:6d:bc:74:4f:26:8d:57:86:e8:d4:1c:d8:d3:0c:
         59:3d:69:45:d3:d9:b5:11:c8:f7:cb:b6:2d:8b:c6:4a:19:e4:
         ba:41:58:e5:9e:6c:11:31:e0:22:8f:18:0b:49:67:30:21:e3:
         08:0a:fa:44:c0:40:6f:67:b2:db:b6:fb:e1:69:db:a3:da:c8:
         55:d0:92:ee:11:94:9d:ad:d6:b5:2b:c7:95:0c:81:6a:d5:6e:
         47:aa:c2:ba:d8:0c:ce:ae:06:e3:36:bd:fb:4c:59:34:6a:6d:
         46:09:ec:f3:ff:e1:84:ed:ed:48:87:83:90:31:95:78:69:32:
         28:17:f1:ed:5e:66:d6:89:d0:77:02:b8:61:4b:fc:97:01:ea:
         68:0d:65:65:5c:ed:0a:9d:66:40:28:05:84:59:44:b1:ff:19:
         1c:cb:0a:bd:b6:fd:ad:18:24:e6:0e:84:08:5d:9f:34:db:f5:
         95:5f:8d:c3:4f:3a:cc:2e:37:f4:e8:40:e0:db:08:09:87:bb:
         ae:28:4e:c7:39:33:52:40:fb:a5:6f:b7:2f:4e:66:cb:f6:5d:
         3e:a1:b4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:21:44 2026 by rpki-client