Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.mft
File:                     LT7zlg0opT_PYOmNAXAy6Sjqezk.mft (raw, json)
Hash identifier:          q6VpLja36Ts2WWE3CqnyWkpjfr/c62ETvokfcKAD/JY=
Subject key identifier:   3D:B4:66:2B:01:E3:62:AB:0A:E4:C6:B4:7F:09:27:36:9D:6D:A2:B4
Authority key identifier: 2D:3E:F3:96:0D:28:A5:3F:CF:60:E9:8D:01:70:32:E9:28:EA:7B:39
Certificate issuer:       /CN=A9167278/serialNumber=2D3EF3960D28A53FCF60E98D017032E928EA7B39
Certificate serial:       07DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT7zlg0opT_PYOmNAXAy6Sjqezk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.mft
Manifest number:          07D3
Signing time:             Wed 20 May 2026 21:24:36 +0000
Manifest this update:     Wed 20 May 2026 21:24:36 +0000
Manifest next update:     Wed 27 May 2026 21:24:36 +0000
Files and hashes:         1: LT7zlg0opT_PYOmNAXAy6Sjqezk.crl (hash: aWfrU3M7qY7UqGeKNKwvgYj46ULwrSOdI168VsifLLM=)
                          2: 1C017B163B3811EBB3FC7A77C4F9AE02.roa (hash: YPebFSMqaNrqN2HNE3zF4t6DH6zSmT3n+GWl59Oat/U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.crl
                          rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT7zlg0opT_PYOmNAXAy6Sjqezk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 21:24:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2012 (0x7dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167278, serialNumber=2D3EF3960D28A53FCF60E98D017032E928EA7B39
        Validity
            Not Before: May 20 21:24:36 2026 GMT
            Not After : May 27 21:24:36 2026 GMT
        Subject: CN=6a0e2694-06d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:03:44:82:0d:1e:27:e7:1b:16:01:4c:6d:ae:
                    bd:ab:c1:cb:2d:47:c4:f4:33:55:d8:cc:2a:8d:41:
                    87:5f:8e:62:1e:f8:a0:8b:a4:b4:bc:7b:1f:48:f1:
                    94:74:84:d1:b8:ed:b3:e6:04:19:88:32:7d:5d:22:
                    93:a6:ef:fd:7c:3b:b3:a8:60:52:7b:cc:92:b7:84:
                    4a:54:65:52:48:91:24:5a:e9:1d:33:a4:99:94:e2:
                    bc:85:56:0d:19:df:53:e7:24:88:49:5d:49:cb:16:
                    e6:1b:95:cc:59:65:b2:41:c9:a2:61:11:4c:56:08:
                    c6:33:46:9a:4a:22:ab:c5:ec:60:4f:02:62:ac:09:
                    99:0b:22:80:e0:89:9b:d0:a7:d8:65:f8:92:41:93:
                    87:59:90:61:fb:38:08:c4:93:39:2d:b9:3e:c3:f8:
                    c9:cf:b8:32:61:26:65:44:32:c9:22:fa:f8:28:62:
                    7e:dd:a3:a3:9a:b2:b4:b3:cc:f1:43:c7:18:f5:08:
                    f6:aa:43:3d:6b:a5:9d:64:80:a5:a3:55:a9:46:33:
                    27:37:e1:fb:1c:11:c4:06:34:85:ed:cd:fe:b7:62:
                    ef:98:d4:9c:4a:66:11:98:4e:d0:bb:fc:a5:5e:32:
                    5f:2b:70:47:bc:2b:9b:a2:90:33:6c:f1:01:d1:ba:
                    39:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B4:66:2B:01:E3:62:AB:0A:E4:C6:B4:7F:09:27:36:9D:6D:A2:B4
            X509v3 Authority Key Identifier:
                keyid:2D:3E:F3:96:0D:28:A5:3F:CF:60:E9:8D:01:70:32:E9:28:EA:7B:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT7zlg0opT_PYOmNAXAy6Sjqezk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:eb:81:70:d9:02:a3:6a:54:5b:2f:c9:5b:b3:ec:6d:38:59:
         df:72:6f:c2:ef:0d:af:05:9d:fb:54:3e:f5:cb:e2:a6:4c:05:
         53:34:49:f4:16:68:fc:87:2d:20:bd:96:19:5a:06:f8:81:4e:
         7a:af:f7:6c:4e:78:a4:46:25:4e:8a:94:ee:20:f7:cb:59:4b:
         b3:f1:44:85:09:0a:18:c2:8a:20:c8:50:ea:ce:87:0c:4f:e3:
         a4:10:06:61:dc:b8:71:0a:32:ce:a3:47:79:22:e9:e1:4b:60:
         6d:4d:44:7d:15:47:81:67:94:21:e2:cf:1d:fb:7b:48:a3:63:
         5c:e4:f9:02:4a:74:03:93:aa:36:24:3d:42:f4:fd:16:16:a0:
         04:22:11:cd:7c:3c:40:46:c4:fb:95:7b:0f:55:a6:c7:5e:d9:
         04:a8:84:68:b3:a9:dc:b9:4b:88:5d:d4:f0:8d:77:ff:3b:9d:
         24:78:35:ee:c2:d4:ad:9c:47:6c:00:7b:7b:4c:5a:bd:3f:b6:
         ce:eb:48:43:2a:8a:2d:2b:a0:54:09:fd:7b:a8:6e:4b:a4:b7:
         19:4e:fb:28:b7:4e:e7:e8:53:2d:25:45:02:4b:eb:31:b4:21:
         7f:43:b6:ae:ac:c8:c7:81:91:e6:c1:0a:49:fa:88:36:42:19:
         52:1d:fa:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:38:59 2026 by rpki-client