Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft
File:                     lvYxs3stzK--57Cb_fRxXhocUFs.mft (raw, json)
Hash identifier:          N5MTDk1fVQieihRDQDCFyfAsrCAiIDY0BOi9T2IEwtE=
Subject key identifier:   F1:91:96:46:41:76:46:4D:5B:FF:14:6E:D1:CC:49:23:48:EC:65:C5
Authority key identifier: 96:F6:31:B3:7B:2D:CC:AF:BE:E7:B0:9B:FD:F4:71:5E:1A:1C:50:5B
Certificate issuer:       /CN=A9171DB9/serialNumber=96F631B37B2DCCAFBEE7B09BFDF4715E1A1C505B
Certificate serial:       0542
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvYxs3stzK--57Cb_fRxXhocUFs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft
Manifest number:          053B
Signing time:             Thu 21 May 2026 00:29:29 +0000
Manifest this update:     Thu 21 May 2026 00:29:28 +0000
Manifest next update:     Thu 28 May 2026 00:29:28 +0000
Files and hashes:         1: lvYxs3stzK--57Cb_fRxXhocUFs.crl (hash: 17QIw0HI8xWc4eGt706XVHDEwnWbldcc0KaKLVHqVL8=)
                          2: 6EC5F1A8420611ECB8345E7DC4F9AE02.roa (hash: aQY6lyBjVm4mQQW1rGm7sb2VqwkSINCg4E5teaOblzI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.crl
                          rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvYxs3stzK--57Cb_fRxXhocUFs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 00:29:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1346 (0x542)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171DB9, serialNumber=96F631B37B2DCCAFBEE7B09BFDF4715E1A1C505B
        Validity
            Not Before: May 21 00:29:28 2026 GMT
            Not After : May 28 00:29:28 2026 GMT
        Subject: CN=6a0e51e9-8ae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:13:21:bd:06:65:f9:aa:41:98:aa:f9:b0:91:
                    09:d1:ea:b0:c6:4d:67:ad:6b:61:d7:a7:57:76:13:
                    9a:dd:45:45:b4:06:a2:e7:28:a4:54:62:c5:71:64:
                    ed:22:59:9e:c6:82:d9:3b:fb:f9:84:5a:b5:37:00:
                    ff:82:b6:f1:8e:20:d4:4a:a6:d0:f8:4b:68:d7:8b:
                    b6:47:ff:1d:c8:a6:74:95:d9:61:a4:3c:c6:91:3b:
                    86:29:9a:94:6b:fd:b2:df:98:58:13:35:29:c3:1e:
                    08:d0:99:17:8f:42:aa:4a:c8:44:d7:11:e3:81:ab:
                    18:a3:1a:3c:d5:eb:86:10:ac:64:81:0b:59:c9:c2:
                    d3:ea:43:38:9b:d7:66:96:b6:58:0c:f7:88:b5:87:
                    01:ad:4e:47:1c:6a:52:6e:dd:93:52:dd:38:e6:a5:
                    b1:7b:5e:0d:09:eb:d9:14:54:f2:79:23:67:a5:36:
                    4d:a6:ce:28:22:b1:02:ed:a9:a5:89:59:90:c3:f9:
                    ae:ab:40:ff:7d:e5:c8:c0:6a:f0:09:05:9e:71:cb:
                    2f:16:e2:d1:48:25:0c:30:21:6e:bd:96:34:62:56:
                    34:c0:6f:a6:f1:d4:e2:fb:84:4e:82:5c:2a:6a:52:
                    90:88:bf:f2:6f:23:d4:eb:69:b1:fd:14:fa:eb:bf:
                    1d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:91:96:46:41:76:46:4D:5B:FF:14:6E:D1:CC:49:23:48:EC:65:C5
            X509v3 Authority Key Identifier:
                keyid:96:F6:31:B3:7B:2D:CC:AF:BE:E7:B0:9B:FD:F4:71:5E:1A:1C:50:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvYxs3stzK--57Cb_fRxXhocUFs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:bd:30:27:5e:79:07:38:1c:f3:a2:3c:bd:8a:0b:31:50:be:
         b9:e1:c5:7f:f9:e2:4c:ce:94:a4:2a:7d:30:00:b4:88:e6:46:
         df:e0:de:b6:7e:d1:c7:96:0d:45:5f:af:87:20:e7:f1:e4:3b:
         ab:d1:8b:64:e4:a6:be:d2:ab:32:22:4a:16:14:b5:d4:cb:70:
         8c:ae:56:2d:d6:a5:ff:81:44:a2:9b:66:be:a0:98:b6:47:93:
         61:7b:ff:4c:ff:f9:ff:96:4c:85:46:db:c7:00:08:27:2b:86:
         c5:6b:6d:6f:32:03:f8:4e:fd:17:4f:06:0c:33:f8:bb:87:ff:
         f3:85:4f:25:46:7e:af:fb:7c:01:0c:d6:e1:4d:ff:c2:00:7e:
         1e:b0:b4:a8:45:6f:4c:a3:a7:d6:81:73:ab:86:4a:4a:9d:b2:
         0d:89:cf:7e:5f:3e:95:e3:ce:c9:f2:6d:af:ac:c2:c6:7b:78:
         25:d9:95:c8:7f:8d:6e:69:5d:5f:e5:f7:b0:28:5c:17:a4:6b:
         23:e4:80:91:e5:79:23:e1:d2:a0:98:09:cb:0c:09:1a:15:7d:
         66:03:36:15:6c:3e:c3:9f:f1:a6:af:8b:a9:56:f0:b4:de:33:
         1c:01:1a:88:7e:47:fa:aa:d5:1b:9c:ce:7a:b5:0b:5b:44:f5:
         c7:57:be:9c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzFEQjkxMTAvBgNVBAUTKDk2RjYzMUIzN0IyRENDQUZCRUU3QjA5QkZERjQ3MTVF
MUExQzUwNUIwHhcNMjYwNTIxMDAyOTI4WhcNMjYwNTI4MDAyOTI4WjAYMRYwFAYD
VQQDEw02YTBlNTFlOS04YWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9xMhvQZl+apBmKr5sJEJ0eqwxk1nrWth16dXdhOa3UVFtAai5yikVGLFcWTt
IlmexoLZO/v5hFq1NwD/grbxjiDUSqbQ+Eto14u2R/8dyKZ0ldlhpDzGkTuGKZqU
a/2y35hYEzUpwx4I0JkXj0KqSshE1xHjgasYoxo81euGEKxkgQtZycLT6kM4m9dm
lrZYDPeItYcBrU5HHGpSbt2TUt045qWxe14NCevZFFTyeSNnpTZNps4oIrEC7aml
iVmQw/muq0D/feXIwGrwCQWeccsvFuLRSCUMMCFuvZY0YlY0wG+m8dTi+4ROglwq
alKQiL/ybyPU62mx/RT6678dAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPGRlkZB
dkZNW/8UbtHMSSNI7GXFMB8GA1UdIwQYMBaAFJb2MbN7Lcyvvuewm/30cV4aHFBb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MURCOS9BOUM5MEYxNDQy
MDIxMUVDQkEyNjE5NzZDNEY5QUUwMi9sdll4czNzdHpLLS01N0NiX2ZSeFhob2NV
RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2x2WXhzM3N0ekstLTU3Q2JfZlJ4WGhvY1VGcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MURCOS9BOUM5MEYxNDQyMDIxMUVDQkEyNjE5NzZDNEY5QUUwMi9sdll4czNzdHpL
LS01N0NiX2ZSeFhob2NVRnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAc70wJ155Bzgc86I8vYoLMVC+ueHFf/niTM6UpCp9MAC0iOZG3+Detn7Rx5YN
RV+vhyDn8eQ7q9GLZOSmvtKrMiJKFhS11MtwjK5WLdal/4FEoptmvqCYtkeTYXv/
TP/5/5ZMhUbbxwAIJyuGxWttbzID+E79F08GDDP4u4f/84VPJUZ+r/t8AQzW4U3/
wgB+HrC0qEVvTKOn1oFzq4ZKSp2yDYnPfl8+lePOyfJtr6zCxnt4JdmVyH+Nbmld
X+X3sChcF6RrI+SAkeV5I+HSoJgJywwJGhV9ZgM2FWw+w5/xpq+LqVbwtN4zHAEa
iH5H+qrVG5zOerULW0T1x1e+nA==
-----END CERTIFICATE-----
Generated at Thu May 21 10:23:54 2026 by rpki-client