Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft
File:                     l1u5QYJWgUoFLa9U9woa3FNv35s.mft (raw, json)
Hash identifier:          n/QHX0EtZjG453L0M7W/j0Kd5tw1lE7mlWCOl9fYel4=
Subject key identifier:   65:57:CA:D2:DC:3A:93:89:70:CA:F0:C7:45:01:4A:14:84:79:A3:C6
Authority key identifier: 97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B
Certificate issuer:       /CN=A91A7842/serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B
Certificate serial:       0486
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft
Manifest number:          0479
Signing time:             Thu 21 May 2026 00:10:15 +0000
Manifest this update:     Thu 21 May 2026 00:10:14 +0000
Manifest next update:     Thu 28 May 2026 00:10:14 +0000
Files and hashes:         1: l1u5QYJWgUoFLa9U9woa3FNv35s.crl (hash: qEMohgckBv6Og2qlca0Lg9swS4PSS2IPDbq259pOQys=)
                          2: 615BA1B8D91411EF9940471AC4F9AE02.roa (hash: nbdgFqrvKPwj7OTKa8WeiCsPcy8PIB9YyhQhRJZGshM=)
                          3: 622B3AEAD91411EF9940471AC4F9AE02.roa (hash: cr8+DaXhHVaKphmcAd7tV537ArwtZQMiy53lf3sRJ+Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl
                          rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 00:10:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1158 (0x486)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7842, serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B
        Validity
            Not Before: May 21 00:10:14 2026 GMT
            Not After : May 28 00:10:14 2026 GMT
        Subject: CN=6a0e4d67-2cc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2d:c5:ce:71:c3:99:ee:00:ae:fe:aa:e6:ea:
                    fe:9a:7f:c5:62:e9:f3:95:b1:80:0f:89:7f:ab:f1:
                    20:ab:11:a8:c8:3d:2a:d5:14:b3:51:69:76:0d:42:
                    a3:4f:d3:30:2a:d7:ac:ee:bf:f5:37:42:2b:0c:51:
                    6a:c5:31:6d:20:e7:fc:f1:a2:74:6b:69:60:01:68:
                    7a:1d:a6:89:22:4c:de:9a:a4:37:a0:21:3d:c5:97:
                    e6:ce:70:8e:38:70:e7:ed:04:0c:69:e4:fc:14:3e:
                    dd:83:20:eb:bb:77:5d:56:29:8f:14:3a:c0:15:29:
                    a5:ee:15:b3:b0:e6:37:ce:4c:cf:a6:8b:41:57:29:
                    1b:23:b1:cf:43:81:35:26:69:47:99:16:38:c9:9c:
                    f9:ed:2e:66:ea:01:fd:c9:0a:ef:05:5d:e7:58:82:
                    fa:e5:83:b2:d4:6c:2f:ba:ad:9a:6d:b1:b4:ae:e0:
                    f3:0d:a7:cd:91:90:90:e6:c2:41:a8:f9:de:ce:19:
                    79:34:89:c8:7f:3c:69:dd:f5:f9:00:b2:b5:3a:25:
                    03:6c:32:17:e1:16:af:50:27:95:77:ad:ee:cf:cd:
                    6d:41:25:41:8a:55:2c:d6:b9:26:be:a4:5e:e9:6e:
                    f7:ac:6e:d0:c4:d5:6d:cd:c3:12:df:c6:a9:98:76:
                    bd:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:57:CA:D2:DC:3A:93:89:70:CA:F0:C7:45:01:4A:14:84:79:A3:C6
            X509v3 Authority Key Identifier:
                keyid:97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:95:44:34:80:c1:cf:c5:23:14:1a:d5:ff:de:b8:aa:53:f9:
         7e:68:6d:91:7e:1c:a7:c7:44:14:10:92:20:08:a0:67:50:a8:
         31:31:d3:70:10:4b:92:11:d7:44:60:c9:0a:b4:8b:2e:53:50:
         38:58:4a:33:e2:dc:ac:10:99:ac:5e:7b:8a:f8:59:e9:28:f9:
         d3:f0:e3:d8:aa:b6:9f:35:00:bf:ba:74:9b:cb:73:e6:c4:78:
         d0:9f:2f:b7:0f:12:02:15:17:76:b4:0c:2c:5b:40:cd:67:8f:
         7a:24:8c:53:0a:eb:ab:07:65:8b:79:75:78:86:2a:69:27:db:
         f1:60:57:90:b2:49:08:db:0c:ce:2b:13:69:0f:dd:dc:82:99:
         f9:e0:15:aa:10:ce:06:20:a9:6e:2f:e8:80:a7:7a:d5:0a:13:
         55:d9:0b:16:52:24:9c:ec:fd:64:e2:72:5e:e9:87:42:7b:28:
         06:e2:a7:62:ed:9b:24:57:72:c4:04:8b:95:98:cd:80:92:aa:
         cc:e7:53:3c:59:fa:b3:3e:65:3a:2a:88:a3:71:47:26:8b:26:
         bd:55:42:48:13:71:bd:a3:b3:2b:5f:18:24:90:01:06:a8:9a:
         8b:cb:dc:f7:e2:8e:41:fb:25:97:74:38:7d:05:98:0a:08:57:
         7b:e4:1b:00
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTc4NDIxMTAvBgNVBAUTKDk3NUJCOTQxODI1NjgxNEEwNTJEQUY1NEY3MEExQURD
NTM2RkRGOUIwHhcNMjYwNTIxMDAxMDE0WhcNMjYwNTI4MDAxMDE0WjAYMRYwFAYD
VQQDEw02YTBlNGQ2Ny0yY2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxC3FznHDme4Arv6q5ur+mn/FYunzlbGAD4l/q/EgqxGoyD0q1RSzUWl2DUKj
T9MwKtes7r/1N0IrDFFqxTFtIOf88aJ0a2lgAWh6HaaJIkzemqQ3oCE9xZfmznCO
OHDn7QQMaeT8FD7dgyDru3ddVimPFDrAFSml7hWzsOY3zkzPpotBVykbI7HPQ4E1
JmlHmRY4yZz57S5m6gH9yQrvBV3nWIL65YOy1Gwvuq2abbG0ruDzDafNkZCQ5sJB
qPnezhl5NInIfzxp3fX5ALK1OiUDbDIX4RavUCeVd63uz81tQSVBilUs1rkmvqRe
6W73rG7QxNVtzcMS38apmHa9vwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGVXytLc
OpOJcMrwx0UBShSEeaPGMB8GA1UdIwQYMBaAFJdbuUGCVoFKBS2vVPcKGtxTb9+b
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzg0Mi83NkE4QzZCQThF
NjUxMUVDQTZFRUVCNzBDNEY5QUUwMi9sMXU1UVlKV2dVb0ZMYTlVOXdvYTNGTnYz
NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2wxdTVRWUpXZ1VvRkxhOVU5d29hM0ZOdjM1cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
Nzg0Mi83NkE4QzZCQThFNjUxMUVDQTZFRUVCNzBDNEY5QUUwMi9sMXU1UVlKV2dV
b0ZMYTlVOXdvYTNGTnYzNXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKpVENIDBz8UjFBrV/964qlP5fmhtkX4cp8dEFBCSIAigZ1CoMTHTcBBLkhHX
RGDJCrSLLlNQOFhKM+LcrBCZrF57ivhZ6Sj50/Dj2Kq2nzUAv7p0m8tz5sR40J8v
tw8SAhUXdrQMLFtAzWePeiSMUwrrqwdli3l1eIYqaSfb8WBXkLJJCNsMzisTaQ/d
3IKZ+eAVqhDOBiCpbi/ogKd61QoTVdkLFlIknOz9ZOJyXumHQnsoBuKnYu2bJFdy
xASLlZjNgJKqzOdTPFn6sz5lOiqIo3FHJosmvVVCSBNxvaOzK18YJJABBqiai8vc
9+KOQfsll3Q4fQWYCghXe+QbAA==
-----END CERTIFICATE-----
Generated at Thu May 21 11:03:45 2026 by rpki-client