Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.mft
File:                     luWqcIJLjRPdz-YfzJogytZeYME.mft (raw, json)
Hash identifier:          h9WJAei+zF5Dua3a/RcjzQUrbH2WHKQ2zPJRAxnfQXE=
Subject key identifier:   47:63:40:5D:22:A3:AA:15:EB:9E:39:0F:5A:9F:42:96:3B:22:5B:F9
Authority key identifier: 96:E5:AA:70:82:4B:8D:13:DD:CF:E6:1F:CC:9A:20:CA:D6:5E:60:C1
Certificate issuer:       /CN=A9155688/serialNumber=96E5AA70824B8D13DDCFE61FCC9A20CAD65E60C1
Certificate serial:       0712
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/luWqcIJLjRPdz-YfzJogytZeYME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.mft
Manifest number:          0707
Signing time:             Sat 04 Apr 2026 21:47:00 +0000
Manifest this update:     Sat 04 Apr 2026 21:46:59 +0000
Manifest next update:     Sat 11 Apr 2026 21:46:59 +0000
Files and hashes:         1: luWqcIJLjRPdz-YfzJogytZeYME.crl (hash: 1j1S7DjM7Je0tDc7A7I6oa4ez2XN9qHLk5DN6rrZoEk=)
                          2: 69FB4E726DC511F08948D952C4F9AE02.roa (hash: oqAlnaUcx9JNieA6F+CPVnYYPfmCQlgospCXz8hR6LQ=)
                          3: 6656B366814C11EB913AEC78C4F9AE02.roa (hash: hv1K6R23OHguzYK6jFAFYzQEskAA+OZXxw5xTMUnVbY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.crl
                          rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/luWqcIJLjRPdz-YfzJogytZeYME.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 21:46:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1810 (0x712)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155688, serialNumber=96E5AA70824B8D13DDCFE61FCC9A20CAD65E60C1
        Validity
            Not Before: Apr  4 21:46:59 2026 GMT
            Not After : Apr 11 21:46:59 2026 GMT
        Subject: CN=69d186d4-c6b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5f:6a:76:41:97:55:d9:b8:7d:6f:e5:1d:6d:
                    0e:6f:08:57:cf:17:0f:a7:50:77:08:bb:c0:77:00:
                    ab:89:b8:7a:ab:f6:9e:af:41:d9:c3:1f:18:52:63:
                    52:ad:41:b9:24:e3:93:67:ea:01:7f:73:1a:f9:69:
                    c3:e9:5e:6a:d5:d6:b0:ac:bc:b5:cc:dc:c6:cb:35:
                    dc:77:fb:40:7a:69:93:46:61:e5:86:d5:8d:3c:be:
                    e4:44:0c:12:4f:24:66:12:5e:3a:af:5b:eb:b4:57:
                    f0:03:8c:dc:c5:d6:00:c4:43:7e:af:1b:b7:91:9e:
                    ef:35:b2:46:ea:d2:33:42:65:bb:f5:9c:51:69:96:
                    73:58:e0:65:54:b1:cd:da:eb:d6:dd:5e:f4:f0:d8:
                    47:7c:c5:0a:c4:d5:74:a3:6b:61:e7:ce:5c:33:2f:
                    e7:da:0b:9e:cb:7f:b5:2d:b1:36:29:bf:fb:ab:5b:
                    9f:5e:00:fd:af:11:fd:2c:b0:9d:be:a8:74:da:c1:
                    b2:dd:9e:29:5d:a2:3c:11:02:bc:d5:ef:f2:36:fa:
                    d7:aa:98:f5:98:c7:6c:27:64:09:98:6e:a2:28:f6:
                    09:45:35:3c:ab:cd:c6:aa:0a:95:50:a5:ed:39:2a:
                    8f:96:6b:8d:e2:b3:17:7a:f8:48:ad:cf:ea:ab:70:
                    01:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:63:40:5D:22:A3:AA:15:EB:9E:39:0F:5A:9F:42:96:3B:22:5B:F9
            X509v3 Authority Key Identifier:
                keyid:96:E5:AA:70:82:4B:8D:13:DD:CF:E6:1F:CC:9A:20:CA:D6:5E:60:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/luWqcIJLjRPdz-YfzJogytZeYME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:49:6a:05:05:40:09:0c:af:11:f7:48:78:7c:e6:81:70:c1:
         0a:6b:d5:73:6f:b3:30:2a:99:e5:e4:2d:d0:c7:6f:ba:94:65:
         ba:72:a5:b3:4f:25:2c:ae:07:df:b5:d1:85:db:d8:3f:08:4e:
         88:b8:91:01:79:c7:c7:cc:22:66:d1:01:4c:7c:0c:04:3b:2f:
         be:8e:97:a3:e2:87:4f:b4:5e:ce:c3:a6:da:8f:2b:8a:53:0d:
         d6:32:be:d4:b3:ac:e8:51:9c:eb:41:06:f2:cc:07:28:29:7c:
         f0:e1:f1:b1:cd:98:97:34:a4:29:26:b0:0d:13:c9:35:ce:cf:
         15:5e:25:be:80:ec:c0:9b:bb:85:47:c4:c8:df:8e:2b:43:b4:
         2e:32:da:44:f2:ff:5c:c0:b8:e1:4f:60:69:76:24:d4:c7:90:
         d4:62:46:8d:3c:2b:f1:5b:f9:df:4c:b4:08:c4:b5:0f:e5:7d:
         1c:90:9c:c4:8d:30:45:1e:b7:26:03:07:b1:6a:55:96:34:79:
         c4:28:e4:8e:e0:6c:0e:f8:3d:2b:ac:87:f0:f3:d4:53:09:6c:
         dc:6c:be:de:ab:32:3e:c8:97:5a:64:e7:98:5a:b9:c7:5e:12:
         16:70:b3:4b:ef:fb:80:71:93:17:0a:94:07:fe:3a:a4:33:8b:
         cb:85:a1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:11:07 2026 by rpki-client