Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
File:                     lWVe5y4XegIJbAy2BnaqHmaa5-A.mft (raw, json)
Hash identifier:          y9slPgw6PCDpEaZef0XJWgwXW20+7ePH/PWF4Ae4+cE=
Subject key identifier:   EE:38:56:61:74:E9:B0:8A:2A:B0:9F:6B:0A:DB:F1:B2:F3:FB:39:CD
Authority key identifier: 95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0
Certificate issuer:       /CN=A9127898/serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
Certificate serial:       0210
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
Manifest number:          07CF
Signing time:             Thu 16 Apr 2026 22:56:15 +0000
Manifest this update:     Thu 16 Apr 2026 22:56:15 +0000
Manifest next update:     Thu 23 Apr 2026 22:56:15 +0000
Files and hashes:         1: lWVe5y4XegIJbAy2BnaqHmaa5-A.crl (hash: RPFdr6fNXl4OLYoUgzq5T5Z+dvedPlabftnH4epAc3I=)
                          2: BFD5DDF0D95311EF9B045445C4F9AE02.roa (hash: n7OEkS+f68NF4N/p9/uhdtvyYSY3OrDptN85GWEeXDg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl
                          rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:56:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 528 (0x210)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127898, serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
        Validity
            Not Before: Apr 16 22:56:15 2026 GMT
            Not After : Apr 23 22:56:15 2026 GMT
        Subject: CN=69e1690f-21e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e8:60:ed:1a:21:44:d2:9b:9e:f7:ed:e2:0c:
                    c7:3a:26:f5:9e:dc:c3:79:91:fb:11:9e:da:34:c3:
                    12:23:1f:30:78:c0:51:de:3b:ae:ed:f6:de:4b:08:
                    38:ce:86:cb:85:43:85:c6:e6:1d:40:fe:2b:19:23:
                    cd:b6:3d:9e:2d:83:42:b9:2b:e2:b4:72:a7:7c:c0:
                    1c:b2:c8:37:0b:d3:6f:07:2f:64:bb:bc:86:cd:f1:
                    fa:d3:b0:1e:e1:b1:97:86:17:64:d2:a3:a5:a2:d2:
                    a5:64:fd:c2:33:fa:6f:41:66:74:6a:32:54:24:4b:
                    d9:b4:54:23:36:74:74:a4:f9:42:77:62:17:02:98:
                    97:3c:ad:bf:82:4f:c7:69:af:75:70:54:4a:43:73:
                    8d:7d:3f:02:89:7d:08:ba:14:98:c1:5c:55:5a:b5:
                    e4:56:d1:db:05:3c:06:fb:15:00:e9:f7:2a:63:bd:
                    8a:c0:75:4a:7f:75:5d:be:aa:dc:0d:9c:e1:9e:ac:
                    09:be:0f:e1:2d:f0:0d:28:44:e6:1d:4a:3e:5c:df:
                    b6:ea:43:b1:8c:ee:0f:87:88:69:13:c8:17:a6:cc:
                    09:60:74:43:18:25:32:b6:ec:55:b0:8d:e2:d5:91:
                    97:68:62:61:38:72:a3:9e:5b:31:0f:45:36:e3:20:
                    0d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:38:56:61:74:E9:B0:8A:2A:B0:9F:6B:0A:DB:F1:B2:F3:FB:39:CD
            X509v3 Authority Key Identifier:
                keyid:95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:87:d5:37:92:2d:e9:02:e2:30:a0:2a:94:e3:14:2e:b4:fc:
         63:c3:93:64:43:72:00:b5:2f:d5:8a:a2:d2:e2:13:67:d9:87:
         9e:d8:20:49:46:f7:94:ff:1c:6a:e2:a6:a4:8e:a6:ec:71:e5:
         7d:a5:2a:6c:d1:3a:8a:be:42:df:74:57:81:bd:a3:dc:1d:36:
         48:cb:9d:66:28:74:b2:4f:f6:14:90:21:9b:4f:c4:68:db:ef:
         b3:dd:e4:01:a2:d8:f3:37:ce:93:51:ce:2c:8d:b8:36:51:24:
         d0:d1:d0:a0:60:96:1f:0f:18:38:53:d7:66:aa:39:04:b7:f0:
         8c:51:be:9b:54:cb:55:fe:55:6c:cb:4d:1d:dd:47:d0:56:4a:
         56:c0:51:ae:8f:2b:8d:7a:51:87:d8:d9:4d:a9:bd:52:08:21:
         4a:8b:f5:0e:8b:9b:71:e0:5e:ad:e1:6f:46:3a:77:f8:c6:c7:
         6d:a1:5a:40:5f:1c:5f:b1:4e:a4:43:1b:f1:6d:d1:d8:6a:38:
         4a:e4:58:bc:f5:f1:cc:67:ea:f9:de:52:5d:84:bb:ed:f3:c5:
         b2:e2:cc:54:88:c4:32:27:33:39:90:18:09:ab:29:e9:1e:6a:
         e5:69:9c:f7:c8:b8:9e:e9:26:c1:87:e4:03:32:18:ab:c8:d3:
         73:6b:b0:40
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc4OTgxMTAvBgNVBAUTKDk1NjU1RUU3MkUxNzdBMDIwOTZDMENCNjA2NzZBQTFF
NjY5QUU3RTAwHhcNMjYwNDE2MjI1NjE1WhcNMjYwNDIzMjI1NjE1WjAYMRYwFAYD
VQQDEw02OWUxNjkwZi0yMWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0uhg7RohRNKbnvft4gzHOib1ntzDeZH7EZ7aNMMSIx8weMBR3juu7fbeSwg4
zobLhUOFxuYdQP4rGSPNtj2eLYNCuSvitHKnfMAcssg3C9NvBy9ku7yGzfH607Ae
4bGXhhdk0qOlotKlZP3CM/pvQWZ0ajJUJEvZtFQjNnR0pPlCd2IXApiXPK2/gk/H
aa91cFRKQ3ONfT8CiX0IuhSYwVxVWrXkVtHbBTwG+xUA6fcqY72KwHVKf3Vdvqrc
DZzhnqwJvg/hLfANKETmHUo+XN+26kOxjO4Ph4hpE8gXpswJYHRDGCUytuxVsI3i
1ZGXaGJhOHKjnlsxD0U24yANVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO44VmF0
6bCKKrCfawrb8bLz+znNMB8GA1UdIwQYMBaAFJVlXucuF3oCCWwMtgZ2qh5mmufg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzg5OC8yMDY5RjVGQ0ZD
MEQxMUVCQUU5NTE0N0JDNEY5QUUwMi9sV1ZlNXk0WGVnSUpiQXkyQm5hcUhtYWE1
LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xXVmU1eTRYZWdJSmJBeTJCbmFxSG1hYTUtQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
Nzg5OC8yMDY5RjVGQ0ZDMEQxMUVCQUU5NTE0N0JDNEY5QUUwMi9sV1ZlNXk0WGVn
SUpiQXkyQm5hcUhtYWE1LUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhYfVN5It6QLiMKAqlOMULrT8Y8OTZENyALUv1Yqi0uITZ9mHntggSUb3lP8c
auKmpI6m7HHlfaUqbNE6ir5C33RXgb2j3B02SMudZih0sk/2FJAhm0/EaNvvs93k
AaLY8zfOk1HOLI24NlEk0NHQoGCWHw8YOFPXZqo5BLfwjFG+m1TLVf5VbMtNHd1H
0FZKVsBRro8rjXpRh9jZTam9UgghSov1DoubceBereFvRjp3+MbHbaFaQF8cX7FO
pEMb8W3R2Go4SuRYvPXxzGfq+d5SXYS77fPFsuLMVIjEMiczOZAYCasp6R5q5Wmc
98i4nukmwYfkAzIYq8jTc2uwQA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:26:00 2026 by rpki-client