Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft
File:                     lJtkel-MefbaSuNtngDETgKpp6Q.mft (raw, json)
Hash identifier:          wKodVEH0qNcemLArdY5P+egtlYUSv2fRYjoofhmK5Cg=
Subject key identifier:   E1:38:62:97:67:3A:FD:8D:4E:24:35:F1:E8:58:ED:52:E9:0C:E3:54
Authority key identifier: 94:9B:64:7A:5F:8C:79:F6:DA:4A:E3:6D:9E:00:C4:4E:02:A9:A7:A4
Certificate issuer:       /CN=A9175D84/serialNumber=949B647A5F8C79F6DA4AE36D9E00C44E02A9A7A4
Certificate serial:       01E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJtkel-MefbaSuNtngDETgKpp6Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft
Manifest number:          01DC
Signing time:             Thu 21 May 2026 03:37:13 +0000
Manifest this update:     Thu 21 May 2026 03:37:13 +0000
Manifest next update:     Thu 28 May 2026 03:37:13 +0000
Files and hashes:         1: lJtkel-MefbaSuNtngDETgKpp6Q.crl (hash: uxbALP7sG745tmBvtLNEcyTX4hbx6GvpL34lyzYEIsQ=)
                          2: 1FB96962DA1311EE81216D86C4F9AE02.roa (hash: 3sL7Xm3lCFFmiBXDKobVdIRkWOYUubW0iwN8SBMNhsU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.crl
                          rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJtkel-MefbaSuNtngDETgKpp6Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 03:37:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 486 (0x1e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175D84, serialNumber=949B647A5F8C79F6DA4AE36D9E00C44E02A9A7A4
        Validity
            Not Before: May 21 03:37:13 2026 GMT
            Not After : May 28 03:37:13 2026 GMT
        Subject: CN=6a0e7de9-4689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:88:e3:b1:f8:9d:6f:be:e6:c6:e0:f0:7b:07:
                    35:cf:e7:0b:21:15:7d:0a:cf:f5:7f:6f:6f:41:17:
                    36:b9:7d:72:67:ac:a0:66:cb:5f:f9:21:34:af:9d:
                    d6:35:83:5f:be:bf:07:13:45:9a:41:31:ef:f4:cd:
                    cc:61:63:8c:43:7d:b8:0e:3f:64:5f:fd:7c:7d:b8:
                    fb:6c:8b:2d:56:a5:d9:dd:30:f5:e8:be:8c:dc:7c:
                    23:1d:79:6a:a9:48:d2:98:9a:82:33:77:37:fc:be:
                    33:b8:1b:5f:4b:1c:00:bc:4b:ec:2c:7f:64:ac:3a:
                    b1:19:c8:b2:9b:08:c4:9e:05:e4:29:fe:8b:8b:e0:
                    e5:7e:82:12:db:86:d3:88:a9:6e:ee:b3:b9:19:fe:
                    b7:e0:b0:f5:ca:16:77:bb:b6:48:0f:0d:55:aa:8f:
                    dd:f0:a5:d1:0f:47:b2:d9:ec:27:15:e2:4f:7d:3b:
                    fb:1e:0a:9c:e2:04:ca:60:d6:50:ce:b6:c2:6b:c1:
                    6e:9d:d0:66:e1:b9:bf:ca:02:17:d9:62:11:e8:da:
                    3a:6f:85:39:9a:67:c9:c1:e0:f5:9e:9a:52:d0:65:
                    f7:ee:2d:9a:d9:aa:8e:4a:78:3f:c7:f7:6b:85:04:
                    67:2d:1b:16:16:4f:12:e0:02:9e:ca:62:cf:9a:77:
                    85:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:38:62:97:67:3A:FD:8D:4E:24:35:F1:E8:58:ED:52:E9:0C:E3:54
            X509v3 Authority Key Identifier:
                keyid:94:9B:64:7A:5F:8C:79:F6:DA:4A:E3:6D:9E:00:C4:4E:02:A9:A7:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJtkel-MefbaSuNtngDETgKpp6Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:b8:d3:b4:8e:ce:ea:90:26:ee:a7:a7:af:e2:12:9b:bf:c6:
         43:82:76:5e:1b:83:5c:3b:b1:77:b0:52:91:b8:7a:91:b3:b0:
         e5:8b:0b:67:f6:fb:f6:80:86:60:28:91:e6:cb:16:d1:f4:c0:
         1c:19:7d:fc:b5:e2:c7:b3:76:ed:d8:dd:4b:c6:23:93:7c:53:
         a8:dd:da:0d:b4:4c:28:95:ad:51:af:0a:16:65:86:90:56:6c:
         94:50:f1:3f:91:68:59:9e:39:41:39:f5:71:c7:3c:73:81:4c:
         3a:e0:79:5b:2d:4e:9f:01:98:60:31:4f:ff:99:75:73:65:44:
         74:1c:f1:22:93:97:20:54:1c:8c:76:02:0c:7b:da:29:6a:84:
         9d:c5:4c:b5:2b:e7:5c:d1:07:6a:ff:27:86:5e:a6:dc:2d:3c:
         f9:2d:25:72:2b:2b:fd:df:10:c3:d6:ca:bf:68:92:12:63:1a:
         a4:44:78:98:79:25:39:fa:7d:55:73:71:83:e2:5b:b1:ca:09:
         60:df:d9:d3:4e:0b:f3:25:8e:76:38:56:e3:c7:75:12:d2:b2:
         50:f9:f9:91:83:43:b6:e5:02:2e:75:e9:3c:6b:3c:5e:f0:7d:
         7a:be:26:4b:a8:b8:19:8c:74:b6:e3:eb:cc:3e:d4:99:e9:2a:
         c9:3d:8c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:19:48 2026 by rpki-client