Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft
File:                     LgUrNwETMSqpiD2X7a0jDKFmIWI.mft (raw, json)
Hash identifier:          5+3chJT1MEp3fnul5axuXddaILeMR1rjULPge+Ij3LI=
Subject key identifier:   29:20:0C:8E:F9:C5:8A:48:D7:27:0C:5A:0A:18:7D:CC:07:5C:A7:92
Authority key identifier: 2E:05:2B:37:01:13:31:2A:A9:88:3D:97:ED:AD:23:0C:A1:66:21:62
Certificate issuer:       /CN=A917E968/serialNumber=2E052B370113312AA9883D97EDAD230CA1662162
Certificate serial:       019C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft
Manifest number:          0192
Signing time:             Sun 05 Jul 2026 04:58:33 +0000
Manifest this update:     Sun 05 Jul 2026 04:58:33 +0000
Manifest next update:     Sun 12 Jul 2026 04:58:33 +0000
Files and hashes:         1: LgUrNwETMSqpiD2X7a0jDKFmIWI.crl (hash: 0WTXQ/GnQMbujA6mftA2qpPaqUjfKzkkKid0OAoiPzc=)
                          2: 919148B2169911EF9DA1992BC4F9AE02.roa (hash: cLf+c87E2+WnHqsOyedNZ3lOPcCUbIIP13xWOWAjY2w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.crl
                          rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 04:58:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412 (0x19c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E968, serialNumber=2E052B370113312AA9883D97EDAD230CA1662162
        Validity
            Not Before: Jul  5 04:58:33 2026 GMT
            Not After : Jul 12 04:58:33 2026 GMT
        Subject: CN=6a49e479-bcc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e8:18:12:57:1a:33:86:ba:d1:71:01:eb:f3:
                    f1:ed:c0:6e:6e:f6:f9:a9:92:11:c6:f2:63:9b:60:
                    c0:c8:5c:6d:a7:0e:74:46:e2:b5:af:f0:ff:36:49:
                    d9:33:ab:06:e2:61:1c:2c:50:97:a8:fc:e4:95:ec:
                    07:f4:6b:f9:8a:13:7d:2d:ed:eb:d5:e1:60:1c:10:
                    68:08:7c:fe:ea:26:93:d6:76:33:28:c5:69:78:81:
                    52:9a:cc:8b:7a:7d:ae:32:aa:d7:49:4a:b4:a1:b5:
                    24:bc:49:d6:a5:bf:06:3c:ce:52:6d:20:4c:26:34:
                    3f:d4:22:99:02:8e:b2:4b:f7:09:c7:ee:f9:c4:22:
                    4d:cb:bd:d6:29:d1:86:26:bf:30:5a:db:f8:45:c4:
                    4a:4f:ce:03:d3:74:b5:f9:d6:33:cf:b6:3b:97:c5:
                    f5:6a:1d:de:bc:d0:0d:18:5f:e3:95:9b:c1:e6:13:
                    75:3f:08:8b:ec:89:9c:ea:b1:e6:f5:ad:f9:6a:4d:
                    ae:1c:3b:c4:42:48:09:89:72:52:ca:8c:76:d8:8e:
                    95:c2:81:7c:41:61:57:fb:be:5c:cb:33:12:d4:53:
                    58:e1:31:f3:e6:13:38:3a:10:d9:09:65:c4:dc:92:
                    bf:4c:ac:80:23:08:00:fc:10:09:3c:7f:3f:15:47:
                    58:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:20:0C:8E:F9:C5:8A:48:D7:27:0C:5A:0A:18:7D:CC:07:5C:A7:92
            X509v3 Authority Key Identifier:
                keyid:2E:05:2B:37:01:13:31:2A:A9:88:3D:97:ED:AD:23:0C:A1:66:21:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:f4:70:88:5c:db:82:58:8f:8a:67:08:59:8f:cc:9f:5f:c7:
         25:2e:c1:a0:b2:e7:34:68:54:c6:07:10:91:7b:b4:85:a4:9d:
         b0:11:8d:82:be:ad:6f:34:f3:3c:bc:ae:59:18:5f:b8:c2:ff:
         e5:30:6e:57:49:8c:c6:23:21:93:0a:3e:f9:2b:03:79:34:d6:
         27:46:26:7f:5b:25:b1:12:eb:40:0d:9d:75:1f:93:9c:11:fd:
         54:d6:66:6e:1b:2a:0a:a0:7d:34:a9:58:91:28:86:0e:fa:90:
         78:7d:57:35:4b:d8:d4:3a:46:de:53:38:7e:93:47:e4:16:a1:
         6b:36:c8:d5:9f:09:84:c0:e9:dc:f1:3a:b7:c9:d1:bd:1c:11:
         52:38:e8:6b:99:90:2c:7d:27:63:ad:ab:15:81:f9:00:f1:94:
         d4:e3:9b:a1:84:e5:0f:8d:02:ae:25:8b:71:52:d3:bf:c8:57:
         66:8c:85:b3:b8:67:83:af:b0:ef:cc:ea:24:3a:7e:69:e6:2f:
         26:f4:65:34:4a:3e:8f:4e:95:1c:f0:99:62:46:5f:5d:69:d6:
         03:b8:dd:4f:cc:01:08:de:91:57:57:a0:a0:ce:90:29:a2:57:
         ed:b0:7f:f6:e6:3d:54:07:4c:6e:8b:b7:69:1c:7d:4f:ed:ce:
         70:9c:14:f9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0U5NjgxMTAvBgNVBAUTKDJFMDUyQjM3MDExMzMxMkFBOTg4M0Q5N0VEQUQyMzBD
QTE2NjIxNjIwHhcNMjYwNzA1MDQ1ODMzWhcNMjYwNzEyMDQ1ODMzWjAYMRYwFAYD
VQQDEw02YTQ5ZTQ3OS1iY2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiOgYElcaM4a60XEB6/Px7cBubvb5qZIRxvJjm2DAyFxtpw50RuK1r/D/NknZ
M6sG4mEcLFCXqPzklewH9Gv5ihN9Le3r1eFgHBBoCHz+6iaT1nYzKMVpeIFSmsyL
en2uMqrXSUq0obUkvEnWpb8GPM5SbSBMJjQ/1CKZAo6yS/cJx+75xCJNy73WKdGG
Jr8wWtv4RcRKT84D03S1+dYzz7Y7l8X1ah3evNANGF/jlZvB5hN1PwiL7Imc6rHm
9a35ak2uHDvEQkgJiXJSyox22I6VwoF8QWFX+75cyzMS1FNY4THz5hM4OhDZCWXE
3JK/TKyAIwgA/BAJPH8/FUdYgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCkgDI75
xYpI1ycMWgoYfcwHXKeSMB8GA1UdIwQYMBaAFC4FKzcBEzEqqYg9l+2tIwyhZiFi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTk2OC8yQkEyRUMwRTE2
OTkxMUVGQkE0MEM5MkFDNEY5QUUwMi9MZ1VyTndFVE1TcXBpRDJYN2EwakRLRm1J
V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xnVXJOd0VUTVNxcGlEMlg3YTBqREtGbUlXSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTk2OC8yQkEyRUMwRTE2OTkxMUVGQkE0MEM5MkFDNEY5QUUwMi9MZ1VyTndFVE1T
cXBpRDJYN2EwakRLRm1JV0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYPRwiFzbgliPimcIWY/Mn1/HJS7BoLLnNGhUxgcQkXu0haSdsBGNgr6tbzTz
PLyuWRhfuML/5TBuV0mMxiMhkwo++SsDeTTWJ0Ymf1slsRLrQA2ddR+TnBH9VNZm
bhsqCqB9NKlYkSiGDvqQeH1XNUvY1DpG3lM4fpNH5BahazbI1Z8JhMDp3PE6t8nR
vRwRUjjoa5mQLH0nY62rFYH5APGU1OOboYTlD40CriWLcVLTv8hXZoyFs7hng6+w
78zqJDp+aeYvJvRlNEo+j06VHPCZYkZfXWnWA7jdT8wBCN6RV1egoM6QKaJX7bB/
9uY9VAdMbou3aRx9T+3OcJwU+Q==
-----END CERTIFICATE-----
Generated at Sun Jul 5 07:50:56 2026 by rpki-client