Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.mft
File:                     LlZ8tNZla-4M-dworw3nIVt_Z-g.mft (raw, json)
Hash identifier:          H+hhZ72q+wn74m0goSN35KO8jQ/RdugFkA5k+1CkdWo=
Subject key identifier:   56:EE:2B:B1:E4:11:FF:61:94:64:25:7E:97:60:8A:83:2C:66:19:17
Authority key identifier: 2E:56:7C:B4:D6:65:6B:EE:0C:F9:DC:28:AF:0D:E7:21:5B:7F:67:E8
Certificate issuer:       /CN=A917049A/serialNumber=2E567CB4D6656BEE0CF9DC28AF0DE7215B7F67E8
Certificate serial:       3F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LlZ8tNZla-4M-dworw3nIVt_Z-g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.mft
Manifest number:          3F
Signing time:             Mon 01 Jun 2026 09:19:57 +0000
Manifest this update:     Mon 01 Jun 2026 09:19:57 +0000
Manifest next update:     Mon 08 Jun 2026 09:19:57 +0000
Files and hashes:         1: LlZ8tNZla-4M-dworw3nIVt_Z-g.crl (hash: RAF28fsAe8VtIcLON2pQUHKXcBM9V2tZmchG9NCjMR4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.crl
                          rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LlZ8tNZla-4M-dworw3nIVt_Z-g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 09:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917049A, serialNumber=2E567CB4D6656BEE0CF9DC28AF0DE7215B7F67E8
        Validity
            Not Before: Jun  1 09:19:57 2026 GMT
            Not After : Jun  8 09:19:57 2026 GMT
        Subject: CN=6a1d4ebd-f0a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c1:af:87:b7:3d:e8:78:fd:3e:b3:6b:9e:3a:
                    a7:76:98:b2:61:4a:64:fe:ab:5a:43:b0:b6:4f:89:
                    47:08:7e:26:6f:5c:76:81:a0:81:08:ab:8e:c0:4b:
                    13:74:38:a2:22:64:30:20:3f:13:ce:62:f4:80:c6:
                    db:a6:32:fb:ea:71:9f:b3:ec:2b:eb:4a:19:71:be:
                    f0:e3:1e:cd:92:b1:09:c3:70:c2:ec:f6:3b:4e:b9:
                    8e:d5:c2:7e:97:30:f9:c5:ba:51:b9:af:28:06:f3:
                    40:45:32:b3:7c:94:78:e5:de:56:53:d9:cc:8f:1a:
                    0f:59:35:83:38:29:0b:fb:83:e5:e4:7e:bd:75:f7:
                    89:b9:ca:ec:84:02:2b:6a:06:4a:21:57:f6:be:92:
                    10:69:4f:40:c3:34:d8:74:62:80:12:72:ad:40:05:
                    b3:de:73:a1:f3:a6:72:b8:78:76:78:10:cc:06:04:
                    9a:82:56:ad:87:31:95:c4:20:25:fa:70:e9:23:da:
                    01:24:d3:ff:4f:ac:aa:7d:b5:61:85:1c:a1:e2:e2:
                    b5:ff:bc:76:b8:ee:cc:ff:de:4f:9e:ad:e1:fa:6b:
                    6b:99:47:b0:de:25:5c:32:e3:84:bd:88:62:3a:7e:
                    8d:5e:3c:ff:87:7b:15:ea:22:66:ca:01:c7:31:1d:
                    69:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:EE:2B:B1:E4:11:FF:61:94:64:25:7E:97:60:8A:83:2C:66:19:17
            X509v3 Authority Key Identifier:
                keyid:2E:56:7C:B4:D6:65:6B:EE:0C:F9:DC:28:AF:0D:E7:21:5B:7F:67:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LlZ8tNZla-4M-dworw3nIVt_Z-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:55:1c:47:b6:06:2a:1e:dd:45:5d:8e:8d:9d:19:84:9b:f8:
         bf:09:b2:f5:cf:d6:1e:38:5b:58:c6:19:13:a6:b4:70:54:b6:
         56:22:86:cd:93:2a:6c:8d:b3:31:65:83:38:0a:15:d2:54:82:
         76:5e:d0:5d:ab:e5:ae:e1:98:38:e6:60:73:8d:f9:4d:64:01:
         dc:1c:83:6d:fc:59:3c:75:d1:0a:31:e7:56:1d:72:db:af:fe:
         e6:6b:f1:4d:bf:16:a0:ac:f7:7c:f7:4d:23:30:60:71:e6:eb:
         6d:90:ed:02:ba:e4:4d:d5:ae:f9:40:d4:98:0c:04:0e:65:a2:
         f4:6b:cf:d7:37:00:9d:cf:f4:3b:6f:6d:d8:2a:eb:7c:8c:56:
         5f:d9:3e:7f:61:1a:58:f1:5d:06:e7:34:76:5f:4c:6e:86:e1:
         ba:22:28:16:f3:f4:bb:3f:40:72:e8:c1:29:75:8a:f3:58:bc:
         b7:b9:f5:9d:fa:76:72:c4:a7:ae:16:28:9e:e3:97:2c:ad:18:
         ff:90:cb:ef:4a:cb:1e:04:13:42:23:a8:ea:59:b7:c3:ba:1f:
         03:1b:b0:4d:72:e3:1f:a2:08:49:06:0d:10:99:a5:d8:20:bd:
         4a:47:c4:b4:13:b9:32:62:00:46:b5:32:14:c7:49:29:fd:0a:
         5c:ad:bc:36
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
MDQ5QTExMC8GA1UEBRMoMkU1NjdDQjRENjY1NkJFRTBDRjlEQzI4QUYwREU3MjE1
QjdGNjdFODAeFw0yNjA2MDEwOTE5NTdaFw0yNjA2MDgwOTE5NTdaMBgxFjAUBgNV
BAMTDTZhMWQ0ZWJkLWYwYTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCVwa+Htz3oeP0+s2ueOqd2mLJhSmT+q1pDsLZPiUcIfiZvXHaBoIEIq47ASxN0
OKIiZDAgPxPOYvSAxtumMvvqcZ+z7CvrShlxvvDjHs2SsQnDcMLs9jtOuY7Vwn6X
MPnFulG5rygG80BFMrN8lHjl3lZT2cyPGg9ZNYM4KQv7g+Xkfr1194m5yuyEAitq
BkohV/a+khBpT0DDNNh0YoAScq1ABbPec6HzpnK4eHZ4EMwGBJqCVq2HMZXEICX6
cOkj2gEk0/9PrKp9tWGFHKHi4rX/vHa47sz/3k+ereH6a2uZR7DeJVwy44S9iGI6
fo1ePP+HexXqImbKAccxHWm1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUVu4rseQR
/2GUZCV+l2CKgyxmGRcwHwYDVR0jBBgwFoAULlZ8tNZla+4M+dworw3nIVt/Z+gw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwNDlBLzFBNzU4QzFBMDJD
QTExRjFBRDJEMjc0OTA0M0Q4QzY3L0xsWjh0TlpsYS00TS1kd29ydzNuSVZ0X1ot
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvTGxaOHROWmxhLTRNLWR3b3J3M25JVnRfWi1nLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw
NDlBLzFBNzU4QzFBMDJDQTExRjFBRDJEMjc0OTA0M0Q4QzY3L0xsWjh0TlpsYS00
TS1kd29ydzNuSVZ0X1otZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCdVRxHtgYqHt1FXY6NnRmEm/i/CbL1z9YeOFtYxhkTprRwVLZWIobNkypsjbMx
ZYM4ChXSVIJ2XtBdq+Wu4Zg45mBzjflNZAHcHINt/Fk8ddEKMedWHXLbr/7ma/FN
vxagrPd8900jMGBx5uttkO0CuuRN1a75QNSYDAQOZaL0a8/XNwCdz/Q7b23YKut8
jFZf2T5/YRpY8V0G5zR2X0xuhuG6IigW8/S7P0By6MEpdYrzWLy3ufWd+nZyxKeu
Fiie45csrRj/kMvvSsseBBNCI6jqWbfDuh8DG7BNcuMfoghJBg0QmaXYIL1KR8S0
E7kyYgBGtTIUx0kp/Qpcrbw2
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:41:45 2026 by rpki-client