Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft
File:                     lQfxHRNjrFs5Lzb17zgixc_NaPk.mft (raw, json)
Hash identifier:          cPKEakDxluipl2l8dxJBC2eXBdbCDSIyWMIolgOsKqQ=
Subject key identifier:   28:01:78:5A:A5:1A:D6:0D:15:66:60:D1:58:97:E6:F4:8D:2E:D0:45
Authority key identifier: 95:07:F1:1D:13:63:AC:5B:39:2F:36:F5:EF:38:22:C5:CF:CD:68:F9
Certificate issuer:       /CN=A91EE8AC/serialNumber=9507F11D1363AC5B392F36F5EF3822C5CFCD68F9
Certificate serial:       0299
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQfxHRNjrFs5Lzb17zgixc_NaPk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft
Manifest number:          043D
Signing time:             Tue 23 Jun 2026 01:51:18 +0000
Manifest this update:     Tue 23 Jun 2026 01:51:17 +0000
Manifest next update:     Tue 30 Jun 2026 01:51:17 +0000
Files and hashes:         1: lQfxHRNjrFs5Lzb17zgixc_NaPk.crl (hash: GGZuGIRVWt5OtGQo1FnL3Zx3vAhhD1oa6/E2RT/6yCk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.crl
                          rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQfxHRNjrFs5Lzb17zgixc_NaPk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 01:51:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 665 (0x299)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE8AC, serialNumber=9507F11D1363AC5B392F36F5EF3822C5CFCD68F9
        Validity
            Not Before: Jun 23 01:51:17 2026 GMT
            Not After : Jun 30 01:51:17 2026 GMT
        Subject: CN=6a39e695-a4c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a1:c7:f4:c2:a4:de:f4:cc:4b:de:f5:17:95:
                    90:76:be:7c:17:b7:7b:e9:2f:ca:c8:78:40:64:7c:
                    af:25:9d:f6:a4:0e:0a:ab:15:1a:89:c8:bb:82:33:
                    18:b9:f7:40:1c:06:c1:7a:7f:07:6b:47:bd:a8:42:
                    fd:da:23:9d:64:d5:40:f1:60:12:4b:ec:75:b8:40:
                    d3:31:66:ec:40:24:73:e7:bb:46:3c:53:d8:d2:09:
                    90:32:e9:87:46:03:fa:fd:b4:8e:c7:6f:41:5d:3d:
                    b6:4e:ba:f2:95:6f:29:bd:2c:65:d0:4f:d8:d0:27:
                    1a:75:a1:88:c0:88:35:a9:e5:04:ee:4d:8a:ea:6a:
                    72:ee:f3:1d:36:be:d9:2f:71:df:b3:8a:83:a1:e2:
                    dc:48:a8:77:ce:af:fe:60:70:1f:f7:c8:b4:e2:4b:
                    fc:fa:4b:a5:4c:ba:d2:c4:4f:84:f2:c2:07:af:fc:
                    49:93:7f:2e:13:fe:72:0d:9a:51:4f:20:68:b5:36:
                    0b:1e:e4:49:48:0a:04:bf:90:ad:9e:20:4b:c8:51:
                    52:0d:ab:7f:16:86:3c:28:f7:ab:59:89:11:18:58:
                    5f:bf:55:97:a2:1e:a6:24:78:35:1a:71:43:b0:a2:
                    26:24:d5:0f:84:46:cf:42:cd:98:f8:1e:cf:31:b3:
                    50:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:01:78:5A:A5:1A:D6:0D:15:66:60:D1:58:97:E6:F4:8D:2E:D0:45
            X509v3 Authority Key Identifier:
                keyid:95:07:F1:1D:13:63:AC:5B:39:2F:36:F5:EF:38:22:C5:CF:CD:68:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQfxHRNjrFs5Lzb17zgixc_NaPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:7a:09:5c:20:bf:5a:ec:56:27:d5:4e:8e:dd:e9:75:0a:f6:
         62:ce:41:ec:e6:df:44:36:4f:8a:ca:fe:19:28:0e:76:c6:7e:
         06:bf:32:49:b0:01:f9:52:61:1c:d7:2b:d3:58:e2:91:89:68:
         b0:46:57:b1:e1:8c:53:d0:9c:42:12:5b:5e:98:7c:6e:71:ec:
         18:60:58:a3:59:27:0b:26:42:58:f4:3b:41:99:18:8e:06:cd:
         57:23:81:04:14:7e:f9:73:98:27:98:55:ea:a7:83:be:01:d2:
         4f:72:95:77:cc:65:61:29:1d:62:cc:6e:dc:f0:c9:1e:05:f5:
         f4:e9:86:10:5f:49:ea:37:1c:e8:5c:b6:a9:40:cf:7d:77:b6:
         69:65:56:e3:b2:16:65:0e:7e:19:80:44:ce:93:c1:b3:30:83:
         97:10:c3:b2:92:8b:65:dc:cd:b8:4e:08:14:01:a5:8b:fd:06:
         c9:36:ee:91:83:52:0b:25:f7:02:e2:c6:6e:5b:9e:9c:f9:0a:
         80:ca:a8:72:90:cc:c9:30:bd:44:cf:06:a6:02:94:44:41:0a:
         74:a2:83:9d:17:e2:c8:eb:3a:d6:98:71:7e:d6:bf:6c:80:8e:
         9f:f8:d8:99:7d:7d:10:1c:37:1b:f2:11:c0:79:89:93:f6:7e:
         64:65:b1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:26:18 2026 by rpki-client