Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
File:                     LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft (raw, json)
Hash identifier:          yFB7R3R0FhUrWHXTAsBGK1zSyx0Wj/zTvGMoBc23K2E=
Subject key identifier:   AA:DC:8C:0F:66:D7:3F:C9:BD:22:69:5F:84:C3:A3:BA:4A:24:D2:A3
Authority key identifier: 2D:7D:5C:5F:76:CA:3A:68:F6:49:80:2C:9D:8B:66:A7:F2:6F:65:25
Certificate issuer:       /CN=A914B462/serialNumber=2D7D5C5F76CA3A68F649802C9D8B66A7F26F6525
Certificate serial:       CF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
Manifest number:          CC
Signing time:             Wed 17 Jun 2026 06:58:02 +0000
Manifest this update:     Wed 17 Jun 2026 06:58:02 +0000
Manifest next update:     Wed 24 Jun 2026 06:58:02 +0000
Files and hashes:         1: LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl (hash: 8rpXsBFQojSOhSe0bnaib6jCYoS2doWXXmAWmbkAgxg=)
                          2: 5176F30C330911F0B6109345C4F9AE02.roa (hash: u3inMiIK4DpIEunyB1TcEeJ9La/HJuiKvKXJQu7jAtw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl
                          rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207 (0xcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B462, serialNumber=2D7D5C5F76CA3A68F649802C9D8B66A7F26F6525
        Validity
            Not Before: Jun 17 06:58:02 2026 GMT
            Not After : Jun 24 06:58:02 2026 GMT
        Subject: CN=6a32457a-8fcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6d:14:01:de:4f:ee:38:3b:f5:7a:79:39:1b:
                    84:98:d6:27:41:0c:e0:4a:06:31:18:1d:ed:5b:07:
                    49:12:0c:3a:a7:d5:6b:b0:c5:15:e0:c9:14:83:f1:
                    a5:46:57:b1:27:45:78:6b:8c:c1:3e:d0:be:68:52:
                    d7:bc:2c:25:07:a4:a6:83:6d:5a:d5:e0:5c:53:fd:
                    82:2a:ff:5a:52:20:49:23:d1:1b:01:62:94:c7:ba:
                    f5:fe:60:7e:64:af:ae:b7:63:57:86:e5:45:df:c0:
                    de:4b:af:5b:f8:a3:16:4f:0f:99:9f:60:51:b2:54:
                    36:df:bf:8c:5f:36:79:6a:21:77:3f:9f:f3:99:f9:
                    ca:52:85:57:36:8a:ca:3e:38:ed:52:0f:66:07:ee:
                    90:bf:dd:4f:af:fc:f5:1b:9e:6c:82:94:21:2d:ae:
                    e2:fa:cd:d3:97:98:90:ad:35:0a:9a:64:96:5f:e4:
                    79:5d:18:6f:3b:bf:a8:0e:d8:32:7c:d0:76:bc:40:
                    ea:c4:ce:cb:21:de:52:9d:80:eb:39:37:da:f0:70:
                    30:be:f6:4a:83:1d:76:fc:58:cf:74:b0:ae:6d:c6:
                    8b:c0:30:2d:0e:eb:59:b2:1f:76:cd:23:fa:1d:9e:
                    55:35:52:d1:11:ae:0f:3e:00:91:e0:46:cd:d3:d4:
                    f8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:DC:8C:0F:66:D7:3F:C9:BD:22:69:5F:84:C3:A3:BA:4A:24:D2:A3
            X509v3 Authority Key Identifier:
                keyid:2D:7D:5C:5F:76:CA:3A:68:F6:49:80:2C:9D:8B:66:A7:F2:6F:65:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:13:5a:83:ff:9a:34:8b:30:e6:ac:8f:a6:b0:92:2e:cf:dc:
         5b:91:63:ff:23:af:03:c4:23:be:ce:d1:c8:d9:fa:c8:cd:45:
         f3:5b:09:73:af:ce:da:cf:4e:f4:bc:eb:fa:00:f2:e4:76:b7:
         5f:12:1e:94:6e:46:de:db:1e:d4:bc:48:bd:30:ed:96:42:cd:
         9b:fc:83:4f:d3:fb:1f:f3:a9:0d:29:5c:3f:46:7f:3f:65:a9:
         6a:0b:31:3f:83:f5:7d:4f:82:23:b5:91:fe:29:01:c2:9a:9c:
         ac:30:13:2b:03:cc:96:1c:9c:50:ad:6b:e9:ff:dd:25:6a:e9:
         e7:ba:ec:a5:48:b1:21:71:c2:2c:c5:2c:37:e5:2a:d7:d7:e4:
         23:66:f8:5a:d5:3b:37:df:b9:6b:26:85:ca:a2:a7:f5:4b:17:
         74:70:6c:e8:32:19:dd:c4:f6:0f:04:20:19:a3:80:cb:eb:fa:
         4d:15:fc:d3:62:42:71:15:22:6b:0b:be:3f:ab:73:97:dc:e4:
         4c:26:5b:e0:f2:4d:a1:e4:c1:99:a4:94:f1:05:55:0a:a3:e6:
         71:ed:f4:c3:b7:f6:d0:13:e0:0c:4d:74:c1:38:70:d9:e8:2f:
         5b:c8:41:ab:65:86:b3:17:e4:e8:b4:e0:28:6f:41:02:52:94:
         07:53:1e:9d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEI0NjIxMTAvBgNVBAUTKDJEN0Q1QzVGNzZDQTNBNjhGNjQ5ODAyQzlEOEI2NkE3
RjI2RjY1MjUwHhcNMjYwNjE3MDY1ODAyWhcNMjYwNjI0MDY1ODAyWjAYMRYwFAYD
VQQDEw02YTMyNDU3YS04ZmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuG0UAd5P7jg79Xp5ORuEmNYnQQzgSgYxGB3tWwdJEgw6p9VrsMUV4MkUg/Gl
RlexJ0V4a4zBPtC+aFLXvCwlB6Smg21a1eBcU/2CKv9aUiBJI9EbAWKUx7r1/mB+
ZK+ut2NXhuVF38DeS69b+KMWTw+Zn2BRslQ237+MXzZ5aiF3P5/zmfnKUoVXNorK
PjjtUg9mB+6Qv91Pr/z1G55sgpQhLa7i+s3Tl5iQrTUKmmSWX+R5XRhvO7+oDtgy
fNB2vEDqxM7LId5SnYDrOTfa8HAwvvZKgx12/FjPdLCubcaLwDAtDutZsh92zSP6
HZ5VNVLREa4PPgCR4EbN09T4EQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKrcjA9m
1z/JvSJpX4TDo7pKJNKjMB8GA1UdIwQYMBaAFC19XF92yjpo9kmALJ2LZqfyb2Ul
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjQ2Mi9BMjdDQzNFNDMy
RkYxMUYwODU5QjVBMkRDNEY5QUUwMi9MWDFjWDNiS09tajJTWUFzbll0bXBfSnZa
U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0xYMWNYM2JLT21qMlNZQXNuWXRtcF9KdlpTVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QjQ2Mi9BMjdDQzNFNDMyRkYxMUYwODU5QjVBMkRDNEY5QUUwMi9MWDFjWDNiS09t
ajJTWUFzbll0bXBfSnZaU1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApxNag/+aNIsw5qyPprCSLs/cW5Fj/yOvA8Qjvs7RyNn6yM1F81sJc6/O2s9O
9Lzr+gDy5Ha3XxIelG5G3tse1LxIvTDtlkLNm/yDT9P7H/OpDSlcP0Z/P2Wpagsx
P4P1fU+CI7WR/ikBwpqcrDATKwPMlhycUK1r6f/dJWrp57rspUixIXHCLMUsN+Uq
19fkI2b4WtU7N9+5ayaFyqKn9UsXdHBs6DIZ3cT2DwQgGaOAy+v6TRX802JCcRUi
awu+P6tzl9zkTCZb4PJNoeTBmaSU8QVVCqPmce30w7f20BPgDE10wThw2egvW8hB
q2WGsxfk6LTgKG9BAlKUB1MenQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:22:39 2026 by rpki-client