Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
File:                     liwsnV7f2s79sTh-ML7D_776XNA.mft (raw, json)
Hash identifier:          54skxDaAcHH+KgC7j4Rl4trWB38bzR3amhRh/ptUveA=
Subject key identifier:   43:5F:A2:0F:25:44:8D:25:E3:21:6C:F2:2E:E1:83:6D:C3:45:DD:9F
Authority key identifier: 96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0
Certificate issuer:       /CN=A91EDA20/serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0
Certificate serial:       0280
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
Manifest number:          0267
Signing time:             Fri 15 May 2026 02:15:30 +0000
Manifest this update:     Fri 15 May 2026 02:15:29 +0000
Manifest next update:     Fri 22 May 2026 02:15:29 +0000
Files and hashes:         1: liwsnV7f2s79sTh-ML7D_776XNA.crl (hash: ZzpMDZ51vDYPNH3BLUnI/b7sf2hAt9u72D92DWDoiC8=)
                          2: 5CA025DE300C11EE903A6211C4F9AE02.roa (hash: nLmRRkvPmyWIllTJe9Zouh2k0tm12CDZu9M1JMdFVeo=)
                          3: 81BA905AB5E811EDA7091163C4F9AE02.roa (hash: XCU9CEh5JfWyfgXD9tBMgbhcrtxpGC1QtyGffV0ujNk=)
                          4: 94E348AE300C11EE8D3CE611C4F9AE02.roa (hash: olArFcM1PUtHpMUsUbFSqGqQtjy1wHpvrbRn0NFqaZs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl
                          rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 May 2026 02:15:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 640 (0x280)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDA20, serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0
        Validity
            Not Before: May 15 02:15:29 2026 GMT
            Not After : May 22 02:15:29 2026 GMT
        Subject: CN=6a0681c2-fd50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:90:4d:06:1b:15:9b:77:36:02:60:78:cd:d7:
                    b1:2d:29:48:62:e9:ce:e4:64:25:93:08:fd:5f:5c:
                    0f:e0:77:40:7a:8d:73:d6:85:19:aa:cd:08:4b:d1:
                    06:8b:1c:21:84:a9:4b:37:c4:77:15:7e:2e:c8:0e:
                    c6:26:13:66:5b:c0:5e:bc:f4:60:83:03:4f:3b:a5:
                    5f:79:b4:36:71:84:14:f0:48:fc:7b:b5:ae:4d:5d:
                    12:ef:25:54:aa:e1:f2:1f:53:63:a7:63:8a:ff:92:
                    4b:30:aa:40:e6:1c:c3:8e:dd:8c:e8:d4:27:07:f8:
                    44:83:50:5e:3f:43:20:cc:46:1c:1d:12:5b:ff:e4:
                    6d:c2:d0:4c:aa:24:50:d1:aa:50:3b:b1:25:70:e4:
                    3a:76:3a:d8:1d:39:75:d3:30:41:a8:dd:e4:82:a6:
                    02:40:1e:e7:7d:17:55:a3:28:f0:85:12:2f:65:08:
                    64:59:89:00:46:31:a6:b5:64:00:3a:b6:09:e5:76:
                    3c:2c:ce:ba:64:83:a7:7b:81:b0:0c:41:71:af:21:
                    f1:d8:fe:28:77:3e:42:51:ac:c7:b4:d4:01:b0:67:
                    ec:c2:cf:bd:55:fc:49:1e:dc:28:e8:59:71:6f:32:
                    9b:11:5c:47:24:44:38:17:6f:88:00:2f:4d:35:19:
                    19:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:5F:A2:0F:25:44:8D:25:E3:21:6C:F2:2E:E1:83:6D:C3:45:DD:9F
            X509v3 Authority Key Identifier:
                keyid:96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:7d:44:f5:a0:4f:47:26:43:1e:15:a7:41:45:2a:9d:31:69:
         30:1d:36:f1:9b:09:35:46:65:ef:e8:8e:ad:6d:f4:18:fd:05:
         1c:47:e9:18:e2:28:1b:f2:82:c7:35:a8:b5:4e:9a:61:5e:72:
         4a:27:00:63:75:1e:99:85:f0:1b:4d:0d:ab:d5:04:08:73:97:
         d1:60:8e:7e:8b:0e:bf:1b:f2:7d:68:5b:a7:59:52:3d:0f:41:
         11:f9:53:ed:0a:76:77:91:25:a6:3a:66:71:98:18:59:a2:2f:
         70:eb:08:1b:ca:2b:11:6c:67:20:43:08:a1:a0:e8:86:2c:39:
         00:2a:f3:4a:a9:8c:92:37:24:ec:5f:23:95:3d:5d:e3:30:10:
         db:9f:dc:14:27:cf:cd:a0:12:09:47:e6:4f:20:45:f2:e4:dc:
         0e:90:ca:11:89:1f:38:73:c7:2f:63:13:3c:eb:c8:63:e5:3e:
         9b:3e:e0:1f:b3:09:7f:1a:94:93:3e:74:3f:d6:1d:96:62:79:
         00:ff:e0:a7:10:bf:d6:db:35:68:a8:ec:64:ff:3b:ba:53:d6:
         46:d4:73:50:71:0c:8f:ac:cf:ab:11:a1:0c:8a:9d:33:7e:e6:
         47:5d:ce:bc:f4:9c:ee:2a:b9:fd:48:18:18:4c:7b:db:21:92:
         b0:36:ae:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 17:53:57 2026 by rpki-client