Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft
File:                     lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft (raw, json)
Hash identifier:          2ws4h40wZ0R15B7YK1W1NnhCMNP+sjWwvEygZyMXMoQ=
Subject key identifier:   29:A6:5A:7B:F9:57:C4:88:C6:8E:DC:53:B6:60:22:41:54:5A:1F:B2
Authority key identifier: 96:8D:2A:AA:61:68:CB:49:69:44:A7:27:01:8A:FB:42:A2:6E:31:E1
Certificate issuer:       /CN=A91211D4/serialNumber=968D2AAA6168CB496944A727018AFB42A26E31E1
Certificate serial:       076C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft
Manifest number:          0743
Signing time:             Fri 12 Jun 2026 21:59:09 +0000
Manifest this update:     Fri 12 Jun 2026 21:59:08 +0000
Manifest next update:     Fri 19 Jun 2026 21:59:08 +0000
Files and hashes:         1: lo0qqmFoy0lpRKcnAYr7QqJuMeE.crl (hash: W7ZFbFXJONXruRWSxRryq2rTNGRyYgfzR9GGGAvplI4=)
                          2: 1C9DA52E9BD011F0AE2D7868C4F9AE02.roa (hash: FJD5HahYGYldSP/+Nxp4VyhD4H6bs1q2QrljjpyN2Z4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.crl
                          rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 21:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1900 (0x76c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91211D4, serialNumber=968D2AAA6168CB496944A727018AFB42A26E31E1
        Validity
            Not Before: Jun 12 21:59:08 2026 GMT
            Not After : Jun 19 21:59:08 2026 GMT
        Subject: CN=6a2c812d-2a4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5b:1b:64:5f:81:e3:51:18:5b:88:22:86:eb:
                    1c:24:ce:15:43:f6:21:b5:4a:93:08:7e:f6:e7:34:
                    bd:1f:f8:b5:aa:a6:7c:87:cb:42:ab:b3:55:97:60:
                    c0:4d:2a:3d:9c:6d:b3:2a:e3:16:ab:88:3a:19:74:
                    c4:82:bd:35:1f:f7:0a:01:04:06:cf:2c:14:85:69:
                    f1:06:fe:63:90:d9:d7:eb:ea:91:93:50:83:e8:d3:
                    85:7e:4b:e5:27:c1:df:9e:58:dc:2d:f2:3f:7f:24:
                    d4:1d:3b:90:6a:14:0b:e8:7c:ed:f9:a6:07:cf:9d:
                    ed:0e:a7:7d:05:cf:70:a7:bf:3e:87:59:c4:3b:09:
                    82:47:60:39:da:60:e5:88:ac:35:60:9b:3b:f4:67:
                    cd:2f:73:40:11:7a:dd:b7:e0:9a:8c:be:a5:11:11:
                    cf:94:15:75:1d:b5:c0:fc:bf:a8:43:44:e6:f7:29:
                    df:e1:98:e8:ee:7a:1f:c4:4a:3a:16:43:62:a9:92:
                    3f:69:ab:6f:cf:63:57:58:f4:d6:03:d0:5b:eb:cf:
                    fc:24:15:f9:8d:49:80:f9:af:c3:59:b0:b3:dd:f3:
                    73:22:c3:3c:e6:f8:df:73:cb:cc:60:6c:bd:cf:9e:
                    61:c6:f2:6b:df:2a:8a:db:4b:75:54:d1:95:a5:46:
                    5f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A6:5A:7B:F9:57:C4:88:C6:8E:DC:53:B6:60:22:41:54:5A:1F:B2
            X509v3 Authority Key Identifier:
                keyid:96:8D:2A:AA:61:68:CB:49:69:44:A7:27:01:8A:FB:42:A2:6E:31:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:c4:b9:6a:a8:c4:9e:59:1f:7f:42:3c:8c:bc:43:ad:12:22:
         e1:58:6d:af:2d:bf:fe:35:db:1c:d7:3d:7f:73:67:8c:2e:9e:
         d9:7b:9e:f7:62:14:f4:2f:aa:44:b4:11:27:d3:0c:5b:d9:9e:
         e5:63:9e:c2:93:ba:bf:ed:7e:b5:26:9c:6b:c8:c7:14:c8:57:
         9d:45:58:ca:b7:3e:7a:c2:e2:b9:79:9b:6a:ea:01:57:7b:d8:
         ca:39:f1:fa:3d:6c:89:cc:d8:0d:f5:16:a8:b1:25:80:3c:ac:
         f1:26:d8:9f:a4:c1:19:e7:34:1d:ac:a0:c5:fc:d9:13:38:5e:
         af:a1:ab:ea:53:6c:f4:bd:af:2e:53:b9:69:bb:3f:c6:a2:63:
         22:64:53:fd:69:b4:e6:9d:f1:73:52:fd:08:c2:fc:bf:cd:d7:
         fd:4b:f8:af:f4:f8:f6:88:e6:10:0c:26:17:47:e7:ae:b4:70:
         a5:88:87:9c:aa:73:2d:da:f9:74:cc:e1:ff:73:42:5c:b8:5c:
         ce:c6:48:36:d9:1d:a3:b7:43:7c:e9:c8:ad:3b:43:cb:64:89:
         5f:6a:1c:aa:4f:51:81:75:d1:de:09:0a:af:cc:d3:19:b1:6f:
         89:53:81:83:52:a4:cd:f8:27:09:fc:3f:0d:db:0b:a8:e0:05:
         7e:79:6e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:19:20 2026 by rpki-client