Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/laNNlXWF4FXwNo5HTaPR-bvPqN8.mft
File:                     laNNlXWF4FXwNo5HTaPR-bvPqN8.mft (raw, json)
Hash identifier:          VAI07vtf/z2fFqi4iTE2sTFjLHHeVQqJRAeey7DhOc0=
Subject key identifier:   6A:B5:04:B4:D7:47:F8:06:3F:D4:DA:79:AF:E3:6C:77:59:6B:A4:62
Authority key identifier: 95:A3:4D:95:75:85:E0:55:F0:36:8E:47:4D:A3:D1:F9:BB:CF:A8:DF
Certificate issuer:       /CN=A91D2B56/serialNumber=95A34D957585E055F0368E474DA3D1F9BBCFA8DF
Certificate serial:       11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/laNNlXWF4FXwNo5HTaPR-bvPqN8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/laNNlXWF4FXwNo5HTaPR-bvPqN8.mft
Manifest number:          10
Signing time:             Tue 19 May 2026 08:56:49 +0000
Manifest this update:     Tue 19 May 2026 08:56:48 +0000
Manifest next update:     Tue 26 May 2026 08:56:48 +0000
Files and hashes:         1: laNNlXWF4FXwNo5HTaPR-bvPqN8.crl (hash: 9yDEAtrsp+FO2V7WMtwjPu/j1dgzR8ygoohUpdmOarw=)
                          2: 04EDE6343E2B11F1B4A6C6E4B6833773.roa (hash: iVmvGDCFN84Pkf1vGvrKze2zsX7JLtz20kszTrEJLI0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/laNNlXWF4FXwNo5HTaPR-bvPqN8.crl
                          rsync://rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/laNNlXWF4FXwNo5HTaPR-bvPqN8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/laNNlXWF4FXwNo5HTaPR-bvPqN8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 May 2026 08:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2B56, serialNumber=95A34D957585E055F0368E474DA3D1F9BBCFA8DF
        Validity
            Not Before: May 19 08:56:48 2026 GMT
            Not After : May 26 08:56:48 2026 GMT
        Subject: CN=6a0c25d1-4a8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ea:b0:1c:95:43:29:b3:94:a9:48:df:7e:2b:
                    28:59:19:c6:c1:5f:f7:83:65:6b:11:6f:30:34:fe:
                    db:30:0e:26:82:de:d6:1e:5b:7d:9e:68:87:86:bd:
                    28:b7:b5:91:15:e1:d9:64:52:c9:1b:95:ea:93:c4:
                    cd:fe:0d:39:fa:80:d5:b4:01:9a:ae:1e:c6:51:aa:
                    f9:a6:de:c6:4b:ee:1a:95:98:48:c4:34:a7:13:c2:
                    f7:3a:38:58:03:29:06:25:44:96:f2:39:60:a0:ec:
                    9c:3b:a6:bd:3b:e4:9e:cf:b0:ca:32:38:1f:ef:91:
                    d1:27:d4:c0:db:d8:86:63:07:b4:94:2e:dd:a8:4e:
                    66:ca:87:35:44:35:d5:06:bf:62:4b:10:b1:69:ce:
                    c5:e2:42:d7:49:58:4d:71:1d:04:b2:35:f5:d7:44:
                    c5:01:d9:7e:10:f1:da:76:04:74:16:9a:4b:2c:75:
                    b1:d2:8b:5e:ae:81:7b:47:0c:0d:f9:ca:33:9f:73:
                    78:b0:15:e7:9b:a1:26:07:5b:57:f7:7d:19:f9:14:
                    ec:d6:86:69:34:bc:f2:a5:0f:93:e9:db:ec:6e:da:
                    fa:43:ad:14:33:4e:7f:71:aa:bb:87:10:c5:37:02:
                    40:01:a2:7a:87:7b:e3:1c:00:0c:a1:29:b2:1f:e4:
                    d8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B5:04:B4:D7:47:F8:06:3F:D4:DA:79:AF:E3:6C:77:59:6B:A4:62
            X509v3 Authority Key Identifier:
                keyid:95:A3:4D:95:75:85:E0:55:F0:36:8E:47:4D:A3:D1:F9:BB:CF:A8:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/laNNlXWF4FXwNo5HTaPR-bvPqN8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/laNNlXWF4FXwNo5HTaPR-bvPqN8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/laNNlXWF4FXwNo5HTaPR-bvPqN8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:1d:7d:6d:71:32:c5:61:f2:f1:c6:f0:a0:d8:13:5b:c4:58:
         e9:95:0b:81:7e:5a:9b:8e:34:98:25:c4:32:c8:b2:e1:0c:dd:
         fb:7a:67:e3:17:39:62:a3:43:de:10:41:a2:63:e3:12:23:52:
         d5:06:28:2a:43:08:32:3b:6a:42:c0:9f:05:ca:80:60:85:11:
         b2:41:76:0c:e8:16:ca:8a:7a:c5:c5:54:68:18:88:9d:9d:3b:
         95:dc:ee:8d:d8:6a:ab:49:ee:ad:f7:b7:54:cc:39:73:92:6a:
         b2:ee:88:17:fd:85:39:3f:eb:bd:28:6f:f6:95:10:34:68:d2:
         f6:ea:fa:9c:f1:86:b2:f8:6c:fd:e5:a3:f8:79:4f:c4:c0:03:
         7f:48:48:c3:f6:fa:2e:2f:34:30:ae:47:0c:fe:bd:64:6c:b3:
         6a:35:cf:ad:1a:2d:1d:b7:ea:a8:b8:14:22:e2:07:33:14:f7:
         a4:d7:fe:6c:a1:f8:f4:3c:de:92:17:b4:59:e8:e2:94:da:80:
         89:4a:68:c9:49:79:f3:2c:86:1c:fc:65:fa:30:2e:0f:7d:16:
         dd:b2:ea:73:e2:ac:6f:e0:0c:58:79:bc:14:5b:e8:06:73:2b:
         d7:9d:24:c3:5f:5c:82:e5:3a:97:e8:7d:6b:c4:18:bc:21:81:
         c7:68:5c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:34:26 2026 by rpki-client