Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft
File:                     -luvRrfLLI40Y4OqgMs5ayuBxkw.mft (raw, json)
Hash identifier:          1PHDt+raHg7Jn/KSDBdheKw6j3JVjkLGrwjO5VABs7c=
Subject key identifier:   16:2E:27:56:88:18:23:EB:E2:60:A5:15:AD:B8:5F:29:43:00:DF:C8
Authority key identifier: FA:5B:AF:46:B7:CB:2C:8E:34:63:83:AA:80:CB:39:6B:2B:81:C6:4C
Certificate issuer:       /CN=A91A29D7/serialNumber=FA5BAF46B7CB2C8E346383AA80CB396B2B81C64C
Certificate serial:       64
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft
Manifest number:          5D
Signing time:             Sun 05 Apr 2026 07:26:52 +0000
Manifest this update:     Sun 05 Apr 2026 07:26:51 +0000
Manifest next update:     Sun 12 Apr 2026 07:26:51 +0000
Files and hashes:         1: -luvRrfLLI40Y4OqgMs5ayuBxkw.crl (hash: Wsgi0Pw0cNq+ypjl2mM0ip+O984/sd+jDZHWouzv5NE=)
                          2: 603EEC5ED0F811F0A0F75447C4F9AE02.roa (hash: G4U39Fy1SJqtjI6+bD1SjtIDsoBsLGQG30f+ReQTcyM=)
                          3: 753E1B20B1B311F0BD0C0785C4F9AE02.roa (hash: ED82Gz6lXOAzlBWFeylwQ9Gjq7iIkbcvN+6T0EoH08c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.crl
                          rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:26:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A29D7, serialNumber=FA5BAF46B7CB2C8E346383AA80CB396B2B81C64C
        Validity
            Not Before: Apr  5 07:26:51 2026 GMT
            Not After : Apr 12 07:26:51 2026 GMT
        Subject: CN=69d20ebc-3b25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c2:bd:65:34:fe:2d:dc:39:8c:f1:7d:86:8d:
                    6a:be:4f:33:dc:b2:c4:aa:06:c9:ec:66:b5:ef:b3:
                    e0:0c:72:2e:31:c0:a1:70:a4:e4:79:84:d2:55:0c:
                    06:2c:8c:6b:b1:db:46:63:be:2a:48:da:7d:f7:39:
                    77:97:cb:23:5d:11:04:da:48:ee:6d:b9:75:05:7a:
                    44:56:72:02:62:e9:bd:53:f6:87:e8:f5:f9:c7:33:
                    a0:6e:01:cc:b3:c6:a0:95:c5:7a:7d:9c:a0:04:32:
                    38:ed:2f:9b:45:79:2e:8b:46:10:56:c1:7c:fe:d5:
                    85:d4:64:e0:51:02:9a:42:fa:ff:16:54:7d:70:b9:
                    22:ec:d8:9e:3b:d5:b5:32:b6:1e:a3:6a:67:d9:3a:
                    4c:f2:47:d9:ff:f0:f0:02:e4:ff:31:7b:9c:3d:20:
                    e1:b3:87:a4:69:ac:2b:e5:83:ea:e0:b5:15:29:33:
                    0a:02:b3:3e:9a:ce:b6:ee:0d:11:bc:c8:6f:f8:41:
                    fc:e6:ec:74:f9:c7:8f:88:0a:05:c7:f0:2e:a9:f3:
                    f8:00:1c:3e:2b:dc:35:ea:52:0c:44:c5:e4:d3:b2:
                    1a:6c:19:dd:ae:04:11:f0:b3:9a:c9:c7:64:24:d8:
                    a7:11:0c:b2:f2:6b:3a:7f:dc:9f:a2:a5:95:3c:15:
                    75:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2E:27:56:88:18:23:EB:E2:60:A5:15:AD:B8:5F:29:43:00:DF:C8
            X509v3 Authority Key Identifier:
                keyid:FA:5B:AF:46:B7:CB:2C:8E:34:63:83:AA:80:CB:39:6B:2B:81:C6:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:41:c5:c5:d6:12:c4:7b:04:cd:2f:4b:a0:1e:c3:02:53:e2:
         e0:d5:5f:7d:54:fb:33:9e:98:d5:28:22:84:89:32:bc:8d:3b:
         26:65:61:f8:d7:bd:41:ba:0b:a4:7c:fb:a5:70:39:21:1e:3d:
         36:ed:7d:f0:5a:5b:88:8a:79:86:e4:9f:ab:63:ec:50:a0:7a:
         bb:9c:0f:f4:18:0c:fc:31:47:1f:db:5a:c8:38:e2:a7:c2:ef:
         96:85:47:e8:55:55:90:ce:de:af:5d:c8:4a:98:60:0b:58:29:
         82:d0:85:a6:fa:bf:71:5c:3b:db:7a:bb:00:a2:2c:cd:b6:11:
         66:73:ca:49:50:67:6f:c8:4b:f3:91:59:d5:5d:01:eb:d2:e9:
         05:4b:26:df:c1:7f:8a:6c:27:61:11:20:af:5e:53:bc:48:1d:
         a2:e8:97:8d:21:10:a3:50:33:31:1f:12:6d:6d:b6:5e:af:16:
         b1:be:77:f6:1a:7f:2d:60:4e:ed:5d:b4:e2:f3:8c:fe:19:30:
         1f:03:c4:5e:04:c9:3d:3d:8e:a8:28:6e:92:5e:ee:9e:6c:46:
         bc:3d:7e:b8:37:cf:c4:96:6e:fe:aa:0d:3a:e9:15:ef:5f:0d:
         28:ba:42:1f:1c:10:a0:ed:ee:b9:14:17:4b:d1:f6:28:1e:ff:
         27:8c:5c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:55:08 2026 by rpki-client