Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.mft
File:                     LXezMdgykSthvgpQpthjS44qp5w.mft (raw, json)
Hash identifier:          kw3dVfAliO3qGmi+wslEsqPU2leaY1Yhfojza9PVu6g=
Subject key identifier:   9D:7B:15:66:C9:BB:5B:AE:BF:AE:8F:56:AB:5C:2F:B8:8A:C0:70:C3
Authority key identifier: 2D:77:B3:31:D8:32:91:2B:61:BE:0A:50:A6:D8:63:4B:8E:2A:A7:9C
Certificate issuer:       /CN=A9141B4C/serialNumber=2D77B331D832912B61BE0A50A6D8634B8E2AA79C
Certificate serial:       5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXezMdgykSthvgpQpthjS44qp5w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.mft
Manifest number:          5A
Signing time:             Mon 27 Jul 2026 10:31:27 +0000
Manifest this update:     Mon 27 Jul 2026 10:31:27 +0000
Manifest next update:     Mon 03 Aug 2026 10:31:27 +0000
Files and hashes:         1: LXezMdgykSthvgpQpthjS44qp5w.crl (hash: mmIq2DTWrLXKb7gcYc87MvQ5QrN31hCl1LXfipJj9to=)
                          2: 783957EA31BF11F1BC4C9C57C1833773.roa (hash: DoB27+5uTyjT+GpZ+8s5WP7HzASd3cgOpWixwpFDv7M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.crl
                          rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXezMdgykSthvgpQpthjS44qp5w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:31:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141B4C, serialNumber=2D77B331D832912B61BE0A50A6D8634B8E2AA79C
        Validity
            Not Before: Jul 27 10:31:27 2026 GMT
            Not After : Aug  3 10:31:27 2026 GMT
        Subject: CN=6a67337f-5d3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:67:67:fa:31:c4:6e:52:fd:47:74:4e:cc:33:
                    47:e0:5c:ac:07:1b:66:46:8e:8e:c1:42:3f:10:8b:
                    2b:83:84:34:84:fb:63:8e:e6:d1:ea:40:98:2b:f8:
                    f7:83:57:33:86:26:88:a1:3f:43:52:cb:da:0e:fb:
                    d8:a9:65:66:45:ac:a4:c5:21:16:f6:f6:f9:84:f6:
                    a8:4e:90:eb:81:29:b7:dc:fe:fd:d5:80:4b:1c:40:
                    ef:9a:18:5e:10:9f:09:c0:41:74:64:3e:5e:39:98:
                    b3:c9:35:36:0d:f9:95:65:e3:c1:b6:54:83:79:b7:
                    02:a9:da:99:5b:9b:58:57:72:4b:17:08:a7:d2:43:
                    52:3f:05:3b:b8:43:c9:a9:22:00:61:26:cd:c3:aa:
                    ad:f6:f8:a4:5c:af:4c:28:d8:57:ba:5b:42:15:bf:
                    1f:9d:6e:8f:23:5f:35:46:91:eb:c1:81:d6:9b:8f:
                    a4:ff:f1:b2:ab:f6:76:38:a1:6c:50:02:08:ce:98:
                    64:4f:8f:a7:9f:6d:dc:b5:6a:32:f8:75:b7:d0:59:
                    f5:23:9f:65:42:14:9a:d7:ca:42:28:fc:3f:f2:8c:
                    ec:8d:84:54:86:b3:f4:64:19:14:27:56:ec:27:98:
                    c7:4e:d5:ef:bf:85:e5:7f:50:57:44:56:11:33:d2:
                    18:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:7B:15:66:C9:BB:5B:AE:BF:AE:8F:56:AB:5C:2F:B8:8A:C0:70:C3
            X509v3 Authority Key Identifier:
                keyid:2D:77:B3:31:D8:32:91:2B:61:BE:0A:50:A6:D8:63:4B:8E:2A:A7:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXezMdgykSthvgpQpthjS44qp5w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:bf:14:03:df:6f:99:f5:c4:f4:68:10:d7:71:6b:37:e9:ab:
         9b:09:8c:09:f3:47:83:d6:9e:78:55:3c:06:95:84:b1:5a:84:
         42:c6:cd:05:6d:15:c3:7c:46:60:12:3f:f3:34:8e:10:c2:1c:
         81:e7:bf:37:85:b2:32:5c:4d:43:3b:82:75:01:cf:a2:ae:81:
         d7:03:de:7c:71:be:0b:11:ac:d5:52:43:4e:24:1f:39:f9:07:
         85:e4:5b:50:9b:eb:15:cc:7e:32:f5:45:ed:90:c0:bd:69:af:
         73:6f:20:89:ce:b8:76:a5:7b:f5:15:a1:a0:67:f3:14:a3:a6:
         1e:3c:b3:13:cc:b3:15:fd:0c:de:b2:f7:52:72:48:96:07:30:
         31:4c:29:55:7c:28:7b:13:39:73:41:9a:17:f4:f7:6d:9c:d5:
         0d:6a:d0:b4:72:51:be:f3:13:02:f1:53:23:19:f2:34:df:10:
         ac:aa:6b:04:c2:08:1c:e8:7e:fa:81:a0:fd:5c:8e:83:e1:9b:
         6f:96:5b:88:40:06:85:0c:02:cd:c5:2f:58:f0:49:17:e3:71:
         e8:4f:39:f1:c1:b5:b3:e6:9b:40:19:1e:c9:b7:8f:49:e9:e3:
         a9:55:16:e0:50:90:47:dd:8f:b9:cd:75:59:bd:85:2b:4a:de:
         e1:20:0c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:32:32 2026 by rpki-client