Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft
File:                     lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft (raw, json)
Hash identifier:          00WN9wGSOwSxz3adbsOExxSDzPlAEcZlvQij0NKqzik=
Subject key identifier:   A5:1D:3B:28:5E:F4:7B:CE:F5:79:5C:E4:A2:9E:DF:A6:86:B5:DE:62
Authority key identifier: 94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92
Certificate issuer:       /CN=A916DC92/serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192
Certificate serial:       0CFE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft
Manifest number:          0CE8
Signing time:             Sat 16 May 2026 18:19:05 +0000
Manifest this update:     Sat 16 May 2026 18:19:05 +0000
Manifest next update:     Sat 23 May 2026 18:19:05 +0000
Files and hashes:         1: lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl (hash: PlobgoHsf+dFtyl7hLkBuDvmwKsnk2jxE/sOe+Pw3Xo=)
                          2: CE15A7B409D911EA80E56E21C4F9AE02.roa (hash: 5VCD3u27qrdHl1/jyodbt5Z/BUjwXQ94Xf36xQbvpgs=)
                          3: CCE5BAAA09D911EA80E56E21C4F9AE02.roa (hash: v8VLFEHYfImy14LaG54KuMHpNg3eB1auJxQ0qkii+Dc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl
                          rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 May 2026 14:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3326 (0xcfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DC92, serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192
        Validity
            Not Before: May 16 18:19:05 2026 GMT
            Not After : May 23 18:19:05 2026 GMT
        Subject: CN=6a08b519-4bb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d5:42:13:34:3b:40:91:6d:2e:85:81:b7:66:
                    fd:66:9a:d7:ca:59:7a:67:8a:1d:c9:7a:33:ab:a9:
                    93:a2:75:5d:fd:3f:cb:fb:93:bc:9d:8f:2e:33:4f:
                    19:c4:09:8f:38:97:21:f5:92:d0:dd:cb:9d:bc:57:
                    23:70:22:49:a4:5c:cd:4b:87:85:96:c4:03:3d:38:
                    a6:ba:b0:22:0f:2c:4c:fb:13:65:9c:91:08:54:fa:
                    b2:3a:42:3f:2d:c3:59:92:a8:71:23:4f:39:1b:0e:
                    bb:ba:3d:6e:61:d4:b3:b4:e2:5e:f7:9b:46:f1:e4:
                    98:0c:35:1a:b0:87:66:00:96:fe:c6:cb:6a:d0:7f:
                    68:e4:69:b8:90:32:6b:6c:4c:e9:0a:87:69:eb:c8:
                    d8:72:60:fa:ea:16:64:d5:25:5e:e7:21:81:1e:86:
                    63:7a:ca:da:a0:52:00:bf:61:e4:93:f5:2b:e0:69:
                    c1:ac:cb:8a:d0:0e:e2:21:9d:36:af:17:72:fb:8b:
                    fb:00:c9:a4:98:bf:ec:e1:25:0f:bf:7d:47:9a:95:
                    c0:ce:3c:a9:92:cd:33:67:44:dc:ff:eb:ef:dd:67:
                    a1:22:f1:91:68:8e:e7:33:cf:2e:93:90:e2:64:59:
                    dc:26:b0:52:7b:b1:ac:24:ac:2b:72:93:cb:ac:0e:
                    1a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:1D:3B:28:5E:F4:7B:CE:F5:79:5C:E4:A2:9E:DF:A6:86:B5:DE:62
            X509v3 Authority Key Identifier:
                keyid:94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:3c:e8:53:36:3b:da:0a:01:eb:d3:c8:b4:b0:e6:e6:aa:df:
         4a:0f:e2:23:73:4b:2f:54:1e:90:fd:c9:3e:2a:da:55:da:79:
         bf:4a:6e:f3:4a:be:73:fd:f1:df:e1:8b:44:58:1c:7c:84:09:
         38:dc:d7:e3:34:38:43:40:6b:b6:f3:ca:f1:19:50:11:0f:8f:
         27:6f:93:f1:20:14:2d:30:4b:fa:75:58:47:bc:79:6b:e0:ae:
         04:94:f1:18:21:e3:29:ca:8d:33:be:d5:34:03:3e:33:fa:90:
         b2:b8:c8:19:36:18:7b:e0:8b:e0:0f:24:42:32:5f:80:b0:66:
         1f:1a:39:fd:20:74:96:6e:c6:04:b2:09:87:21:49:d7:2c:04:
         b1:1c:d9:f8:42:c0:d7:e4:33:e5:38:07:77:f5:30:21:94:6b:
         82:29:86:f4:18:b1:5f:d8:f6:bb:d4:71:26:a7:59:ea:0c:84:
         f4:24:e3:cf:8c:15:5f:71:70:1f:56:cd:6b:67:a5:12:20:67:
         2d:14:95:a1:68:0e:dc:58:5f:84:5b:b2:4e:c9:15:08:c0:05:
         f0:ba:3f:7d:ad:43:18:f3:7c:2f:9e:02:9b:1a:c1:b4:ef:71:
         9e:58:d3:00:56:3a:ee:02:e9:a1:6d:8b:42:a3:35:ab:eb:6e:
         74:4a:75:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 01:08:01 2026 by rpki-client