Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
File:                     lMjvPyqSLuFEqm8LZkNspGbMSwo.mft (raw, json)
Hash identifier:          gaSHlhl2Z6IYvS0uAQa4CwxutJGD+lyMsQzgAUuD9wM=
Subject key identifier:   F8:C0:5D:42:98:72:BB:63:40:9B:4F:62:40:9C:85:3B:C1:95:51:55
Authority key identifier: 94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A
Certificate issuer:       /CN=A91F37AB/serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A
Certificate serial:       DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
Manifest number:          CD
Signing time:             Sat 23 May 2026 06:52:57 +0000
Manifest this update:     Sat 23 May 2026 06:52:56 +0000
Manifest next update:     Sat 30 May 2026 06:52:56 +0000
Files and hashes:         1: lMjvPyqSLuFEqm8LZkNspGbMSwo.crl (hash: WmAnWlk3Bsh8E/AzTY3Cj3EZo7mmh0mHmHZioEsM9pg=)
                          2: 3C2E004221F411F0848CDE7EC4F9AE02.roa (hash: e1py/Dvzt5ULhjodeT2xOCGPBlZKvYaIHOb5jKyG0BQ=)
                          3: 3B5A1BBA21F411F0848CDE7EC4F9AE02.roa (hash: xXN9mX48NmFk2vcx7rwVXSG4y30L3OeYK6lw11JbwLA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl
                          rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 06:52:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F37AB, serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A
        Validity
            Not Before: May 23 06:52:56 2026 GMT
            Not After : May 30 06:52:56 2026 GMT
        Subject: CN=6a114ec9-4953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6a:9b:8c:95:e0:e3:db:35:e2:c8:7a:0f:e1:
                    98:94:9a:06:bd:2b:57:38:d5:99:98:70:81:26:f3:
                    05:bf:56:89:63:89:94:61:db:38:b3:99:3e:32:7d:
                    cf:04:ce:07:23:0f:88:ad:40:1c:e1:60:43:4c:5c:
                    03:d9:fa:bd:5f:0a:a0:59:59:b1:ef:3d:50:56:86:
                    10:c7:9d:6f:27:1f:55:8a:01:d9:54:c8:b5:cb:ca:
                    fe:51:d7:e1:ec:6e:33:61:63:1a:e1:3e:60:ce:38:
                    e2:29:78:98:f4:5f:df:23:b5:23:08:87:df:0f:42:
                    d8:b1:88:67:7b:72:52:c3:bf:91:27:97:ea:a4:94:
                    c3:ec:c7:a2:04:d7:0c:56:7e:0c:51:22:d8:f5:1c:
                    5b:ac:aa:46:e9:53:eb:ba:3e:bb:65:15:3e:cc:5e:
                    09:8c:df:7b:f1:69:94:32:c3:01:58:19:f8:0d:57:
                    ad:bb:49:35:bf:9a:50:6c:74:bc:80:3e:e9:16:50:
                    a6:68:f6:96:3f:a0:20:1d:b6:c2:55:d2:2d:c4:84:
                    e6:5c:90:d9:fa:86:aa:82:f7:2a:ac:3d:f8:67:0c:
                    72:6f:8a:07:a6:f3:dd:5a:dc:41:e3:f3:41:c6:44:
                    1f:c6:c9:52:6b:c5:28:60:aa:1e:76:48:de:28:f9:
                    bf:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:C0:5D:42:98:72:BB:63:40:9B:4F:62:40:9C:85:3B:C1:95:51:55
            X509v3 Authority Key Identifier:
                keyid:94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:57:e2:6c:f2:21:c5:10:b8:d1:3d:6a:8c:1c:7a:6f:ec:9f:
         cd:d5:18:f7:e1:7e:8f:4e:41:c7:11:3c:c5:59:8c:15:d7:b9:
         be:69:93:eb:4b:80:a2:b1:09:6f:29:c6:8b:bd:d4:22:79:3b:
         b6:66:d8:cc:c6:4f:cf:6b:a5:18:3b:18:df:5b:b8:14:90:6b:
         2b:b3:d2:45:b8:8e:bd:c4:8e:c0:3f:50:21:c7:85:84:8d:03:
         72:40:61:e1:de:52:1f:de:d2:16:98:61:6f:5a:99:f7:0d:98:
         7c:33:b5:56:27:f8:4b:86:6b:7f:21:db:18:76:be:14:1f:3b:
         f4:27:e3:c2:d5:40:13:a4:f8:de:a0:2d:44:ff:01:fd:54:05:
         5e:47:cd:35:14:88:4d:17:4e:58:94:ca:53:b6:03:30:68:06:
         ed:fd:48:32:a8:74:33:47:1d:1b:37:12:bd:6f:bc:9f:24:5a:
         67:5e:47:d0:97:15:c6:29:60:d4:18:42:00:97:d4:88:b3:32:
         4e:f5:80:43:c8:8f:54:65:43:b2:84:39:19:04:4d:8e:98:26:
         7f:b6:74:ff:47:c0:93:0b:bd:4f:f6:2e:4a:c6:8d:cd:fa:06:
         46:dd:9b:f4:6f:dd:96:3d:93:f8:12:bc:23:f4:72:7c:5c:51:
         cd:80:65:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 04:37:22 2026 by rpki-client