Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft
File:                     kLLxK-elhmO_Fdxxfn1AswJBuOo.mft (raw, json)
Hash identifier:          3zX8Qm7aWOPWlPjg/SUVzwpCT6MALeHInRt5htwV91o=
Subject key identifier:   35:A1:7A:7A:75:BE:37:67:89:2B:3F:5A:0F:53:47:13:9B:C2:50:EA
Authority key identifier: 90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA
Certificate issuer:       /CN=A916B974/serialNumber=90B2F12BE7A58663BF15DC717E7D40B30241B8EA
Certificate serial:       E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft
Manifest number:          E3
Signing time:             Fri 15 May 2026 06:40:20 +0000
Manifest this update:     Fri 15 May 2026 06:40:20 +0000
Manifest next update:     Fri 22 May 2026 06:40:20 +0000
Files and hashes:         1: kLLxK-elhmO_Fdxxfn1AswJBuOo.crl (hash: 19cQcNDtusJr/vnOplRv2lc7CSi1UVaXXSj8xL5iobc=)
                          2: 7D1F1FBEFB6611EFB1FB024BC4F9AE02.roa (hash: pFG5/WCaL+yt9ghGi9neBn3ryCri7CWT6hIptpI2Hyk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl
                          rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 May 2026 06:40:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231 (0xe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B974, serialNumber=90B2F12BE7A58663BF15DC717E7D40B30241B8EA
        Validity
            Not Before: May 15 06:40:20 2026 GMT
            Not After : May 22 06:40:20 2026 GMT
        Subject: CN=6a06bfd4-409e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ec:8d:ea:4f:05:27:a7:61:2b:02:c5:4a:65:
                    63:e1:c8:77:8c:df:18:e8:4d:1a:5b:14:cd:9b:f5:
                    ed:a5:88:dc:9b:3f:5f:93:0d:6c:7a:9b:b8:38:ef:
                    7b:10:ee:bd:a1:69:c0:ce:4b:36:29:09:3d:0d:41:
                    f7:74:aa:0d:3c:1e:7b:15:d8:a1:43:81:de:19:c1:
                    6b:1c:10:e5:b1:66:db:7e:68:bb:85:3d:ae:8f:b0:
                    52:94:dc:76:2c:51:f6:49:f7:55:9c:42:60:f1:f1:
                    6f:b8:48:78:7a:37:44:3f:63:d2:87:11:5c:73:8c:
                    48:df:f2:79:df:75:c2:dc:f7:54:16:59:b4:89:8a:
                    06:08:10:e6:2d:b9:00:8a:af:57:ba:af:a3:d7:4d:
                    e3:dd:19:61:ea:fb:1d:12:fd:c3:f3:c1:a7:0a:9e:
                    32:e9:0d:a0:e1:e4:9e:88:f5:29:bd:b6:b7:6f:b6:
                    9b:58:c5:db:eb:19:6c:8d:03:cb:c7:e2:85:9f:13:
                    55:d2:0d:99:b2:7a:3a:cd:d9:27:85:56:c8:bb:06:
                    ec:06:53:3f:69:19:90:f1:d6:dd:49:7e:df:1d:f0:
                    fc:22:5d:b5:ef:22:18:ad:14:d8:a6:be:4a:dd:3c:
                    4f:96:55:16:85:5a:d6:d3:dc:26:f3:25:15:bf:49:
                    fb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A1:7A:7A:75:BE:37:67:89:2B:3F:5A:0F:53:47:13:9B:C2:50:EA
            X509v3 Authority Key Identifier:
                keyid:90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:12:d8:8d:ef:86:41:3b:f9:dd:3b:41:60:09:72:19:8d:48:
         65:c8:d6:c8:59:79:7b:c2:48:24:1e:f7:ad:2e:36:1d:ae:46:
         6a:a3:c2:96:33:07:c2:13:06:1c:93:dc:8a:5a:48:ef:e3:6c:
         f5:a9:0c:87:02:84:c5:56:cd:58:3a:31:7d:44:ad:63:0d:ee:
         1e:28:9e:bf:f3:55:9f:4e:e1:54:97:1b:4d:51:f4:29:91:cd:
         72:0b:fa:0c:1a:10:eb:0a:ed:30:64:8a:73:35:72:f3:d3:79:
         3e:9c:3f:76:9e:b6:98:b3:86:90:8e:d3:85:11:6d:70:28:00:
         a5:87:80:0b:45:87:cf:76:ad:2c:95:31:ff:f8:c3:7e:c3:4a:
         fc:b6:54:23:5c:d0:5c:31:c7:64:f9:7e:c6:ef:4c:4a:e9:c4:
         3b:4e:67:1a:9d:2e:55:1d:4c:fa:df:30:9f:52:44:a8:dd:1e:
         ef:7b:98:3b:4b:52:03:28:c4:2d:c2:3b:fc:a1:02:50:47:1d:
         1d:b5:fe:c2:78:29:13:e8:3e:bd:8d:9e:89:e4:ed:d3:7f:69:
         a0:3d:f6:1d:5e:d1:b3:4d:33:a3:28:7d:3a:ba:ed:c7:57:05:
         d6:76:49:6f:5a:15:e7:9d:ed:f0:b0:8c:58:56:b5:bd:9c:d7:
         41:ce:3b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 16:06:09 2026 by rpki-client