Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.mft
File:                     L77sEYtTYT4VQvM__DYRjlYtRy4.mft (raw, json)
Hash identifier:          k5fSNSw1qxDVu9RXqGWg5e1KEtG0eBZdh00sCdXxJMc=
Subject key identifier:   3F:64:36:75:6B:06:6D:DF:2F:6B:55:56:48:AA:4A:F3:70:1D:C8:31
Authority key identifier: 2F:BE:EC:11:8B:53:61:3E:15:42:F3:3F:FC:36:11:8E:56:2D:47:2E
Certificate issuer:       /CN=A91E8556/serialNumber=2FBEEC118B53613E1542F33FFC36118E562D472E
Certificate serial:       47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L77sEYtTYT4VQvM__DYRjlYtRy4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.mft
Manifest number:          3F
Signing time:             Tue 19 May 2026 08:31:41 +0000
Manifest this update:     Tue 19 May 2026 08:31:41 +0000
Manifest next update:     Tue 26 May 2026 08:31:41 +0000
Files and hashes:         1: L77sEYtTYT4VQvM__DYRjlYtRy4.crl (hash: 1rkweJ7aDe5UAvLlybRvBG2ezkB/2V+/2R+rPo8xgeA=)
                          2: C4618A34188D11F1A1D836EC3D3D8C67.roa (hash: zGs/9ZPuQmBMjGcesFDtJEy650HEEHK6+s759wT6WOM=)
                          3: 63C8FE7A276D11F1856D09ECC3833773.roa (hash: R14w9cl533WbyeT8xCKzVPtv1wFWXETsfR643wwbAq4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.crl
                          rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L77sEYtTYT4VQvM__DYRjlYtRy4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 May 2026 08:31:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8556, serialNumber=2FBEEC118B53613E1542F33FFC36118E562D472E
        Validity
            Not Before: May 19 08:31:41 2026 GMT
            Not After : May 26 08:31:41 2026 GMT
        Subject: CN=6a0c1fed-b785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ce:07:28:79:b3:7a:3a:9a:4f:96:d1:78:fc:
                    d5:3d:c0:bc:f2:22:43:b2:0a:0c:c3:11:97:a4:70:
                    91:1d:ca:24:07:5e:20:97:c0:47:ea:a4:6f:73:ee:
                    b3:6a:ac:f1:be:7f:d3:d8:de:a1:6d:72:73:1c:8c:
                    68:cf:a3:49:7f:ef:9a:47:99:bd:00:0c:9f:e9:46:
                    46:cc:05:83:6a:46:a3:e0:a5:0b:f1:84:26:0c:00:
                    81:1f:8d:cd:f2:2d:39:08:95:03:a2:44:8f:d7:5c:
                    f9:e8:98:44:2c:90:7d:0d:1e:e6:4a:65:4e:f1:a2:
                    08:93:18:36:3c:b5:65:3d:cc:f0:6c:f2:48:83:0e:
                    14:29:af:7a:11:a9:d3:1a:f9:92:ea:f0:98:67:1d:
                    e9:c3:ac:05:8b:e0:3b:91:f7:e9:21:1e:aa:04:b9:
                    84:25:c6:d4:9e:5f:0c:b9:8e:21:38:67:88:b5:38:
                    7a:25:15:91:d6:4d:8e:e5:8b:56:51:f8:a2:32:c1:
                    63:f7:ef:a0:c5:69:0e:e3:a9:87:f7:2b:17:57:84:
                    7f:2d:a3:f8:2b:7c:05:e1:38:c5:bb:66:ab:51:b2:
                    34:58:ad:45:62:51:a3:20:ca:4d:13:64:2b:58:0a:
                    a1:68:2e:11:79:6a:82:59:b8:ab:3b:cf:2f:b8:d9:
                    0d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:64:36:75:6B:06:6D:DF:2F:6B:55:56:48:AA:4A:F3:70:1D:C8:31
            X509v3 Authority Key Identifier:
                keyid:2F:BE:EC:11:8B:53:61:3E:15:42:F3:3F:FC:36:11:8E:56:2D:47:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L77sEYtTYT4VQvM__DYRjlYtRy4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:b0:0f:2e:ab:5e:ff:6a:1b:b7:c1:7a:ac:5b:64:44:11:cd:
         64:b6:0d:23:a5:86:56:37:ac:1e:13:a9:46:38:cb:d3:9e:1f:
         37:f9:66:dc:b3:bf:41:4d:66:74:17:dc:da:4b:94:de:c6:33:
         f1:8b:bf:41:b8:e6:1d:f2:5e:8f:93:13:e4:73:af:f6:3f:be:
         1b:e8:f2:41:27:82:f2:19:2e:ef:f0:1e:8b:b0:68:c4:db:49:
         d5:77:ff:5b:60:00:df:48:da:b9:5a:53:0c:0a:00:60:5a:58:
         b5:b9:fa:04:df:c0:ce:d8:63:53:23:ce:4d:90:38:fc:f0:2d:
         8f:71:a2:90:60:69:9a:c0:07:3b:9b:d3:41:28:47:92:bb:af:
         5b:28:b1:fb:a9:d5:62:75:4a:8d:8d:41:23:e4:f9:9e:a4:46:
         6a:2a:28:8d:72:08:d0:61:9e:94:36:ac:bd:17:e8:e5:dc:b4:
         be:57:a9:89:b6:56:05:3b:29:2b:dd:82:ab:70:09:9d:55:f9:
         d6:f9:2c:fd:a8:cb:8f:ba:13:73:92:d3:2d:63:db:2e:d7:55:
         58:d3:ab:08:00:0b:ca:38:13:60:d2:4c:76:b4:96:3c:2c:47:
         61:9a:31:6c:72:bc:3b:c9:78:be:88:df:87:31:99:7f:b2:da:
         a9:fd:26:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:19:47 2026 by rpki-client