Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft
File:                     ltMlORFGzztdo_4Uaf7BKLS2jEk.mft (raw, json)
Hash identifier:          0GTWShSp9slYwuLyhnlcIH3hFz1b3fcATuWo9F6caYg=
Subject key identifier:   AA:5C:C8:C2:0C:4A:D0:C1:98:FB:69:CA:57:37:26:77:7C:1E:79:2E
Authority key identifier: 96:D3:25:39:11:46:CF:3B:5D:A3:FE:14:69:FE:C1:28:B4:B6:8C:49
Certificate issuer:       /CN=A91E63E7/serialNumber=96D325391146CF3B5DA3FE1469FEC128B4B68C49
Certificate serial:       013D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltMlORFGzztdo_4Uaf7BKLS2jEk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft
Manifest number:          013D
Signing time:             Tue 23 Jun 2026 05:35:30 +0000
Manifest this update:     Tue 23 Jun 2026 05:35:29 +0000
Manifest next update:     Tue 30 Jun 2026 05:35:29 +0000
Files and hashes:         1: ltMlORFGzztdo_4Uaf7BKLS2jEk.crl (hash: X6bbViJilYe244XQSuV7iHQomQklvQd3L+DXk3VluCU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.crl
                          rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltMlORFGzztdo_4Uaf7BKLS2jEk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 05:35:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 317 (0x13d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E63E7, serialNumber=96D325391146CF3B5DA3FE1469FEC128B4B68C49
        Validity
            Not Before: Jun 23 05:35:29 2026 GMT
            Not After : Jun 30 05:35:29 2026 GMT
        Subject: CN=6a3a1b22-4661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:dd:93:7f:08:a5:fc:c2:f1:d5:32:9d:04:60:
                    b9:84:75:5e:72:69:57:c8:e1:6a:6b:01:ba:14:5b:
                    39:6b:aa:da:8b:38:09:13:15:0f:0a:0e:91:be:07:
                    0a:5f:11:79:79:e8:aa:3d:07:fd:1e:d7:79:c7:2b:
                    63:a2:8c:f1:10:00:6b:b3:a6:b9:a3:74:43:d2:f6:
                    c7:71:89:5a:f6:11:4a:71:cb:b9:50:c4:6c:0d:cc:
                    1c:e3:63:61:11:22:86:92:18:72:6b:30:be:6d:c0:
                    77:01:15:d0:4c:a1:4e:25:2c:2d:68:62:0a:5f:24:
                    36:44:15:1b:9f:9b:57:5c:e1:5f:e5:df:51:b7:b4:
                    e7:f1:1a:d4:eb:6d:78:50:08:a6:6c:dd:1d:6c:c8:
                    01:83:c3:ce:2c:d3:f7:97:27:f1:ad:e3:12:58:b3:
                    9b:39:7c:c1:30:6e:cc:af:28:a4:64:12:ef:bf:54:
                    50:f2:1c:26:1c:bb:d2:46:93:b2:f9:7d:6c:ff:b5:
                    22:65:be:02:df:58:41:b2:94:6f:f1:09:68:a3:a9:
                    b3:a1:58:af:b4:e5:1e:0d:53:88:ad:d1:ca:a8:33:
                    8a:3f:54:a8:17:ac:f4:9a:cd:97:bf:78:4a:f3:3d:
                    5a:6e:0f:c2:af:9c:4f:49:8f:e4:07:29:13:bd:10:
                    91:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:5C:C8:C2:0C:4A:D0:C1:98:FB:69:CA:57:37:26:77:7C:1E:79:2E
            X509v3 Authority Key Identifier:
                keyid:96:D3:25:39:11:46:CF:3B:5D:A3:FE:14:69:FE:C1:28:B4:B6:8C:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltMlORFGzztdo_4Uaf7BKLS2jEk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:6b:43:31:f7:3b:06:e3:c2:7d:6f:eb:66:71:9c:9f:88:9f:
         d4:e9:c8:c9:e1:07:6f:fb:ea:cf:2a:94:cb:64:cc:db:bd:e0:
         b4:37:88:79:5d:8e:bf:b5:59:28:d0:3c:39:35:8f:53:3c:c2:
         12:05:63:27:81:fb:0a:e3:06:6f:35:80:31:09:1c:38:bb:c7:
         58:b2:eb:a3:73:83:3c:f5:1f:b8:ef:70:18:45:f3:03:c4:77:
         70:75:66:43:2f:75:0e:2f:5e:c0:fd:0a:b0:c5:80:2c:78:c1:
         d6:e2:ce:a5:f2:a8:ee:46:1c:70:ad:ef:44:d3:e0:d5:48:94:
         ad:99:96:af:bd:56:44:6c:af:87:31:e8:c8:6b:43:b5:cb:85:
         ed:52:0f:f7:fc:f0:2f:b7:50:3b:79:39:2a:a8:14:29:77:ca:
         55:14:8c:3f:bd:8e:4a:21:60:58:fd:3f:a4:e2:5d:d5:88:ae:
         2c:e2:12:64:bb:a0:45:b8:85:e0:76:bc:3e:e0:36:be:fd:e3:
         1b:bf:96:10:3b:42:cd:08:9d:a1:6c:fb:58:ea:5b:52:6e:ee:
         cf:b9:a1:f1:4f:69:54:eb:c8:9d:8f:ed:df:ef:69:2c:2e:bb:
         20:63:e6:d3:f8:90:9a:47:fe:f3:41:21:61:c5:a3:1d:13:e6:
         39:c0:c3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:15:29 2026 by rpki-client