Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.mft
File:                     lX5Qp1--UC844-2_P0qq5mWuFIs.mft (raw, json)
Hash identifier:          Cr9mz1SXqL3rkYKLtoCZ73J5+6aueeg43WWUAqSvR9o=
Subject key identifier:   17:26:49:0C:D8:57:F4:13:16:36:13:A4:5F:23:3D:6F:43:1B:CB:58
Authority key identifier: 95:7E:50:A7:5F:BE:50:2F:38:E3:ED:BF:3F:4A:AA:E6:65:AE:14:8B
Certificate issuer:       /CN=A91D0B0E/serialNumber=957E50A75FBE502F38E3EDBF3F4AAAE665AE148B
Certificate serial:       013E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lX5Qp1--UC844-2_P0qq5mWuFIs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.mft
Manifest number:          0136
Signing time:             Thu 21 May 2026 05:33:45 +0000
Manifest this update:     Thu 21 May 2026 05:33:44 +0000
Manifest next update:     Thu 28 May 2026 05:33:44 +0000
Files and hashes:         1: lX5Qp1--UC844-2_P0qq5mWuFIs.crl (hash: crBb6y2dqQTi67sgAyOOva7IPOmATQtrTa26/1HxrSw=)
                          2: A0A9D60C807511EFAD8C4257C4F9AE02.roa (hash: eHxVtr7CaVRUMmuegbvUTVOQCFKL9zTAYfh/hkVVLRo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.crl
                          rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lX5Qp1--UC844-2_P0qq5mWuFIs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 05:33:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318 (0x13e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0B0E, serialNumber=957E50A75FBE502F38E3EDBF3F4AAAE665AE148B
        Validity
            Not Before: May 21 05:33:44 2026 GMT
            Not After : May 28 05:33:44 2026 GMT
        Subject: CN=6a0e9938-8429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c7:22:b3:22:e6:00:98:03:2c:8e:2b:d2:ed:
                    a7:07:d3:8b:16:f5:aa:8b:dc:a8:74:85:77:fe:e5:
                    b4:67:26:97:6e:34:d8:a9:59:fd:03:fd:66:5b:1d:
                    af:11:e0:22:4c:31:dd:0e:f8:46:0a:a3:81:9f:d0:
                    81:3a:65:d6:7d:93:ba:d4:06:9c:0f:56:68:8d:9a:
                    9e:ef:21:ab:6c:4d:d5:94:a5:0f:d1:b9:bd:62:75:
                    5d:97:03:2f:f1:35:ff:4d:fd:a2:85:03:e2:74:e6:
                    8a:bf:f6:ef:38:12:19:23:ef:1d:be:d3:f6:38:57:
                    d2:a0:bc:05:74:4d:93:63:f0:9c:a5:c9:ed:48:a6:
                    e4:56:06:e5:07:8b:f0:ad:cf:f8:4b:46:54:c6:56:
                    6a:9b:9a:9e:20:04:b2:e9:2d:b1:61:2a:8d:14:bd:
                    3c:04:da:8e:51:68:8c:a0:9a:c0:d1:2d:2b:ba:c1:
                    ea:8d:11:d6:32:8f:26:4c:52:8a:79:7e:4c:89:93:
                    47:da:9b:20:03:e8:31:0c:b3:65:a8:32:77:b8:e3:
                    fa:ae:f4:c9:ac:d3:9f:86:5f:9d:68:49:68:54:db:
                    9e:35:7f:4c:f7:8b:db:60:d0:bd:b7:74:29:17:fa:
                    24:27:bd:bd:75:36:4c:db:82:cd:99:d1:dc:93:62:
                    2c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:26:49:0C:D8:57:F4:13:16:36:13:A4:5F:23:3D:6F:43:1B:CB:58
            X509v3 Authority Key Identifier:
                keyid:95:7E:50:A7:5F:BE:50:2F:38:E3:ED:BF:3F:4A:AA:E6:65:AE:14:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lX5Qp1--UC844-2_P0qq5mWuFIs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:e8:8a:8a:76:05:4a:09:eb:2c:70:a2:5e:94:13:e1:f3:e6:
         36:98:fa:70:94:5e:f6:b4:6c:65:6e:49:b4:72:05:d5:62:ec:
         78:46:ff:f2:9e:f4:d9:2a:ba:5c:d8:b5:e6:90:2e:28:8e:ca:
         8d:ce:4a:7c:de:05:dd:c7:84:86:10:fc:bf:29:1f:49:85:11:
         42:23:68:01:ed:2f:35:3f:4a:73:3c:da:df:0e:89:c1:4d:d0:
         32:ff:18:62:4f:50:77:1a:62:2e:9b:be:02:f8:10:6c:75:31:
         a9:8c:ce:29:d6:bc:97:3d:bb:9b:dd:ce:76:08:d3:1b:66:cf:
         94:40:15:62:cd:ec:98:8c:11:3f:3b:1b:a7:00:ef:69:31:e7:
         b4:7f:14:e4:6f:a9:ec:cd:29:82:04:af:ad:4a:dd:03:8b:f8:
         3d:41:25:e4:a8:3b:16:27:42:73:55:f3:f3:97:3c:bb:5a:00:
         74:7c:12:7c:73:37:67:e2:d4:c4:c9:6e:85:b8:4b:02:64:b9:
         fd:bd:ee:ce:73:9a:d9:2c:f0:78:60:95:91:31:1e:09:3e:6c:
         b3:e9:44:63:f4:0a:7d:cf:ea:99:25:30:bb:bc:4b:93:ae:a7:
         2a:c7:27:7b:d5:3b:0c:fd:40:a5:6f:06:3c:84:ae:41:97:1c:
         79:43:fd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:39:34 2026 by rpki-client