Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft
File:                     LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft (raw, json)
Hash identifier:          AZLfVeMa7ORti9J5K8+6SPT0kIbg6vCdXIYQxp6ZX1Q=
Subject key identifier:   87:DA:9B:09:0B:B8:E3:4D:A2:91:6C:32:10:DE:EC:D8:D2:68:AC:3E
Authority key identifier: 2E:50:79:BE:85:6A:5A:66:37:85:6C:93:71:54:24:5D:98:7F:A7:54
Certificate issuer:       /CN=A916CDDF/serialNumber=2E5079BE856A5A6637856C937154245D987FA754
Certificate serial:       0CBB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlB5voVqWmY3hWyTcVQkXZh_p1Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft
Manifest number:          153C
Signing time:             Wed 20 May 2026 18:28:23 +0000
Manifest this update:     Wed 20 May 2026 18:28:22 +0000
Manifest next update:     Wed 27 May 2026 18:28:22 +0000
Files and hashes:         1: LlB5voVqWmY3hWyTcVQkXZh_p1Q.crl (hash: MBthtKTZgWt1IjieP3OCjHF/6wE/ttBlwntoXv9UVGE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.crl
                          rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlB5voVqWmY3hWyTcVQkXZh_p1Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 18:28:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3259 (0xcbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CDDF, serialNumber=2E5079BE856A5A6637856C937154245D987FA754
        Validity
            Not Before: May 20 18:28:22 2026 GMT
            Not After : May 27 18:28:22 2026 GMT
        Subject: CN=6a0dfd47-3275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7e:a6:96:72:da:71:d2:82:83:fa:6a:64:75:
                    32:b5:42:9e:51:ae:8f:56:67:3c:86:fd:19:10:3f:
                    b5:49:2a:eb:f6:0d:bb:4a:4e:26:01:dc:03:5c:f2:
                    72:56:f7:e6:1a:98:48:0b:66:e9:96:41:0d:bf:80:
                    cd:43:d1:a3:c7:2d:03:62:d8:2c:6e:7e:5b:df:7b:
                    d0:81:ff:c8:90:8e:33:af:f1:d3:39:f9:a4:fa:4a:
                    8d:ed:88:36:95:ae:c8:de:fb:86:a4:af:81:4f:06:
                    62:15:65:68:cf:c5:98:a2:e9:ee:64:8d:2b:9b:42:
                    08:24:d4:ce:01:29:5b:3e:58:b2:92:98:d9:c0:4b:
                    74:0c:ef:6e:6f:a4:5a:51:2b:8f:c7:7b:91:a3:5d:
                    10:2d:8e:7f:98:fd:a6:2c:29:93:d5:b5:ce:f0:2d:
                    2a:11:66:65:89:55:3f:ab:2d:73:01:96:56:f2:a8:
                    56:95:9f:aa:b8:7c:24:c8:cc:c0:d9:f2:c9:67:10:
                    1d:b9:33:c6:cb:49:fb:09:4b:e0:3d:a7:c7:be:63:
                    d6:1f:3f:69:9a:26:e2:66:98:5e:b3:1a:d1:b1:27:
                    07:48:3d:73:07:17:d1:d8:25:63:55:73:6c:53:32:
                    33:ff:87:51:73:47:fa:f5:3c:25:0b:de:23:9b:90:
                    d1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:DA:9B:09:0B:B8:E3:4D:A2:91:6C:32:10:DE:EC:D8:D2:68:AC:3E
            X509v3 Authority Key Identifier:
                keyid:2E:50:79:BE:85:6A:5A:66:37:85:6C:93:71:54:24:5D:98:7F:A7:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlB5voVqWmY3hWyTcVQkXZh_p1Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:44:7b:56:be:74:f6:2e:01:5b:34:04:b0:6f:0c:f5:ee:be:
         ce:f0:d9:da:ea:b6:1e:97:d8:b5:63:10:5c:b6:6e:82:bc:09:
         61:d3:ff:37:28:b8:f8:bd:7d:bc:e7:55:6d:d9:95:76:b6:2a:
         c5:85:27:d2:1f:72:a0:04:ae:12:01:5d:58:da:4f:b7:f8:40:
         96:15:87:e1:c2:de:cd:2c:92:82:4c:98:75:ac:bf:75:1e:1d:
         48:0e:68:14:a0:f5:8a:86:95:9b:60:e4:71:5b:a2:1e:db:3c:
         4c:11:d3:1b:8c:42:88:f8:07:a3:19:bf:a4:c4:88:7a:86:01:
         a4:6c:12:48:02:03:74:a1:b9:f8:8b:1f:6a:ad:ec:bc:8b:66:
         18:52:c5:3f:82:62:86:9d:45:64:ed:2f:59:42:fe:42:c7:5c:
         3a:56:64:1b:18:f5:6f:63:75:4f:df:18:7d:85:ac:1d:01:01:
         bf:f7:0e:a8:0f:fe:80:bd:d2:7c:8e:33:a4:19:a4:f6:ce:2e:
         d9:d6:5a:f1:18:33:d6:c3:8d:f0:df:e5:f5:04:31:79:5a:08:
         66:fa:ef:06:33:ea:9f:e4:90:63:65:e6:2c:b8:63:cd:3b:8a:
         c3:e2:b4:c7:41:f7:cc:21:80:84:fe:44:b2:71:47:89:43:db:
         15:e9:5d:39
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkNEREYxMTAvBgNVBAUTKDJFNTA3OUJFODU2QTVBNjYzNzg1NkM5MzcxNTQyNDVE
OTg3RkE3NTQwHhcNMjYwNTIwMTgyODIyWhcNMjYwNTI3MTgyODIyWjAYMRYwFAYD
VQQDEw02YTBkZmQ0Ny0zMjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvX6mlnLacdKCg/pqZHUytUKeUa6PVmc8hv0ZED+1SSrr9g27Sk4mAdwDXPJy
VvfmGphIC2bplkENv4DNQ9Gjxy0DYtgsbn5b33vQgf/IkI4zr/HTOfmk+kqN7Yg2
la7I3vuGpK+BTwZiFWVoz8WYounuZI0rm0IIJNTOASlbPliykpjZwEt0DO9ub6Ra
USuPx3uRo10QLY5/mP2mLCmT1bXO8C0qEWZliVU/qy1zAZZW8qhWlZ+quHwkyMzA
2fLJZxAduTPGy0n7CUvgPafHvmPWHz9pmibiZphesxrRsScHSD1zBxfR2CVjVXNs
UzIz/4dRc0f69TwlC94jm5DREwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIfamwkL
uONNopFsMhDe7NjSaKw+MB8GA1UdIwQYMBaAFC5Qeb6FalpmN4Vsk3FUJF2Yf6dU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0RERi8yNjYwOEQ0NjEw
NzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9MbEI1dm9WcVdtWTNoV3lUY1ZRa1haaF9w
MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xsQjV2b1ZxV21ZM2hXeVRjVlFrWFpoX3AxUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
Q0RERi8yNjYwOEQ0NjEwNzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9MbEI1dm9WcVdt
WTNoV3lUY1ZRa1haaF9wMVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZER7Vr509i4BWzQEsG8M9e6+zvDZ2uq2HpfYtWMQXLZugrwJYdP/Nyi4+L19
vOdVbdmVdrYqxYUn0h9yoASuEgFdWNpPt/hAlhWH4cLezSySgkyYday/dR4dSA5o
FKD1ioaVm2DkcVuiHts8TBHTG4xCiPgHoxm/pMSIeoYBpGwSSAIDdKG5+Isfaq3s
vItmGFLFP4Jihp1FZO0vWUL+QsdcOlZkGxj1b2N1T98YfYWsHQEBv/cOqA/+gL3S
fI4zpBmk9s4u2dZa8Rgz1sON8N/l9QQxeVoIZvrvBjPqn+SQY2XmLLhjzTuKw+K0
x0H3zCGAhP5EsnFHiUPbFeldOQ==
-----END CERTIFICATE-----
Generated at Thu May 21 11:15:48 2026 by rpki-client