Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft
File:                     mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft (raw, json)
Hash identifier:          6BCTqsINTn9Q2YkXLa8iKrpEZ5YUHbSWRYt0UKDjnv4=
Subject key identifier:   5B:9E:30:97:97:18:48:41:6E:F6:0A:1E:B8:86:24:A8:BB:92:BE:2C
Authority key identifier: 98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70
Certificate issuer:       /CN=A91228BC/serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770
Certificate serial:       0654
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft
Manifest number:          0637
Signing time:             Thu 16 Apr 2026 22:44:31 +0000
Manifest this update:     Thu 16 Apr 2026 22:44:30 +0000
Manifest next update:     Thu 23 Apr 2026 22:44:30 +0000
Files and hashes:         1: mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl (hash: Qb0jvGTSfe71XtwuOgGzFNrWjvmn/W48n57gDSxBqf4=)
                          2: B2C8CBDE5EDA11EFBFA8A226C4F9AE02.roa (hash: 145MNVXkN1NCb/lHfvK7TOxcT8rHdAXVTu1hEwZJ0U4=)
                          3: E9C2CC6C29CC11F086897744C4F9AE02.roa (hash: 78ADOvf19erzq2Lml4tYjNVaZ8mjFM61d51drgntiM4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl
                          rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:44:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1620 (0x654)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91228BC, serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770
        Validity
            Not Before: Apr 16 22:44:30 2026 GMT
            Not After : Apr 23 22:44:30 2026 GMT
        Subject: CN=69e1664e-34ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:09:5c:2c:0a:20:1f:aa:32:18:91:94:74:08:
                    93:3c:6f:05:1b:19:85:de:32:fc:26:ae:31:39:f8:
                    07:f0:0d:19:d1:6f:96:06:1d:aa:c1:1c:62:13:2f:
                    e8:9d:14:03:ce:87:19:db:45:6b:7b:32:54:db:1e:
                    d6:04:59:4e:9b:62:a8:92:3b:df:2b:d4:a6:71:2a:
                    36:0a:39:cf:db:98:4e:47:10:89:fd:26:9f:d4:08:
                    6a:69:54:0a:eb:ee:db:37:e2:11:b4:4a:12:70:17:
                    26:4a:6c:36:e8:eb:84:da:63:c7:d4:7b:53:d9:1f:
                    d6:a3:a1:09:1a:47:33:3e:9c:9c:6c:dc:ab:a0:04:
                    59:f5:56:cc:d9:6c:a1:55:ae:db:27:e7:32:d8:d3:
                    d1:66:81:93:74:a2:2d:c1:da:28:51:c8:eb:bb:e1:
                    06:ec:c0:b7:65:d8:8d:c1:8c:bc:97:d9:7a:8a:db:
                    3c:ea:71:a4:85:ff:70:9f:b5:bc:58:bd:d1:53:da:
                    37:f6:33:1a:c5:10:f6:d4:ff:5a:2e:94:1a:75:25:
                    08:7d:7d:6c:db:b0:b0:b4:13:9d:02:1e:58:f3:9f:
                    f3:40:f5:3c:cb:fe:50:af:1f:b9:27:aa:e4:18:31:
                    3b:da:b0:ff:59:4a:64:f3:aa:74:d3:71:d3:92:fe:
                    05:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:9E:30:97:97:18:48:41:6E:F6:0A:1E:B8:86:24:A8:BB:92:BE:2C
            X509v3 Authority Key Identifier:
                keyid:98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:f9:8c:12:9f:f8:c7:d5:68:b2:e2:e9:ca:94:32:46:0a:df:
         46:e5:55:da:71:49:f6:d1:58:16:c2:86:f6:e0:8e:8a:44:08:
         56:01:08:02:01:20:63:a0:30:a6:56:82:bf:78:6d:8a:03:7d:
         05:93:a0:33:4e:a5:f9:56:11:b5:ca:ca:77:5c:d3:db:ca:db:
         95:35:0b:09:b4:88:83:59:6c:2d:7d:1a:ce:bd:8f:d8:21:65:
         10:88:37:c7:e1:b8:17:22:46:03:a4:b6:9e:dd:a6:a1:07:1c:
         bf:32:1f:fd:89:fb:53:81:f8:80:8f:c6:cb:7d:00:85:d2:85:
         58:eb:1e:2d:dc:39:97:d9:94:d2:91:56:1c:2c:96:8c:92:63:
         d9:7d:e1:ce:83:ac:0f:2b:22:21:65:63:80:0f:7b:fa:14:0d:
         7a:fc:af:c4:d4:93:4b:36:e5:a2:aa:7c:bb:41:e1:27:d3:7f:
         75:36:0e:13:e2:0a:be:8f:49:b5:be:1d:d1:b6:88:2e:49:04:
         6e:a4:e6:ce:4a:d2:50:3f:53:ab:91:d6:13:6d:ac:61:7c:51:
         1e:3d:c7:94:6f:91:57:da:31:94:6e:60:8d:18:6d:06:6a:6d:
         d3:b3:0e:c9:e8:26:60:40:49:02:c2:e8:14:3c:3e:b6:af:c4:
         d6:05:17:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:27:13 2026 by rpki-client