Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft
File:                     CBKglmLws-NPK1pRwz6OknA-Q2k.mft (raw, json)
Hash identifier:          3fhi9rLqJ+AY5drGQqbuQw27usW+ElaM3XD/EGzf7vQ=
Subject key identifier:   E6:E6:53:F2:04:74:A6:7F:96:6C:9C:C8:DE:1C:10:9C:AC:15:9B:70
Authority key identifier: 08:12:A0:96:62:F0:B3:E3:4F:2B:5A:51:C3:3E:8E:92:70:3E:43:69
Certificate issuer:       /CN=A91547EC/serialNumber=0812A09662F0B3E34F2B5A51C33E8E92703E4369
Certificate serial:       79
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft
Manifest number:          76
Signing time:             Wed 15 Apr 2026 07:21:05 +0000
Manifest this update:     Wed 15 Apr 2026 07:21:05 +0000
Manifest next update:     Wed 22 Apr 2026 07:21:05 +0000
Files and hashes:         1: CBKglmLws-NPK1pRwz6OknA-Q2k.crl (hash: V1Wu+8pBOsjIQq1JBnJUHPbhIeXZjZ9yhqsqHdn0JzM=)
                          2: 7CB1102487DD11F0A89FB377C4F9AE02.roa (hash: LJuHTr9dIvZYkAmMksiQJJP2qElg6VwwLMqlMwzQK3A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.crl
                          rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 07:21:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91547EC, serialNumber=0812A09662F0B3E34F2B5A51C33E8E92703E4369
        Validity
            Not Before: Apr 15 07:21:05 2026 GMT
            Not After : Apr 22 07:21:05 2026 GMT
        Subject: CN=69df3c61-b96b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d0:cd:cb:be:ef:7c:8e:13:88:fe:dd:c6:2a:
                    2f:a8:e8:4e:ae:f8:7e:90:05:68:cf:15:50:33:6b:
                    e4:66:97:19:53:86:d4:e4:ed:41:43:a6:94:1b:02:
                    f4:2b:d3:10:ed:23:a7:d5:f2:7e:3f:41:ec:08:be:
                    5d:8c:5c:c2:4e:ef:d8:e1:9a:4d:70:6d:e8:7c:0c:
                    f4:d0:d3:ff:ad:c9:e2:44:49:d8:79:31:ad:b6:c4:
                    ed:dc:98:2d:c7:c9:0a:c5:b6:55:df:17:e4:da:69:
                    5c:49:aa:49:d0:71:31:b2:c2:ce:ca:7f:28:dc:9b:
                    95:f3:07:37:97:55:c4:f8:6e:c1:d3:19:4a:c0:31:
                    78:45:f2:46:86:ba:ea:cd:cc:38:d0:8a:62:c3:6d:
                    d1:8a:c5:66:d9:57:3a:77:ae:6b:c1:22:75:a0:8b:
                    28:1e:3b:b2:c4:b6:a2:13:ce:a2:32:bf:09:74:a3:
                    a9:34:64:3e:2a:c1:90:e4:cf:e4:62:15:85:92:81:
                    1b:9b:cc:ab:91:69:72:aa:48:fb:ec:28:a5:97:83:
                    d2:b0:bb:a6:a7:ab:b2:95:4c:0b:b1:8e:1f:d8:18:
                    8f:2f:38:f5:7c:10:d1:e1:2a:3c:12:1c:c9:27:0f:
                    8f:8c:a8:e5:06:a8:d9:f1:e1:73:a3:a3:fb:f7:37:
                    cc:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E6:53:F2:04:74:A6:7F:96:6C:9C:C8:DE:1C:10:9C:AC:15:9B:70
            X509v3 Authority Key Identifier:
                keyid:08:12:A0:96:62:F0:B3:E3:4F:2B:5A:51:C3:3E:8E:92:70:3E:43:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:3d:41:6d:3a:38:80:85:8a:de:59:bc:57:4c:99:18:0a:32:
         e8:8e:cb:87:b8:e3:55:4b:b9:a2:b6:97:a3:62:ff:b3:33:11:
         36:23:af:14:21:a7:6c:45:0c:b2:da:a2:9d:6a:7b:af:d1:9a:
         a9:e4:30:7f:42:c6:a5:7e:ae:92:6f:38:d7:1e:84:db:77:5b:
         f3:4e:d0:84:b0:5d:19:a7:0b:26:71:d2:46:7e:a1:b8:4f:d7:
         51:78:fd:56:00:f7:80:ec:d9:6d:43:4d:d4:3c:6b:11:0f:30:
         18:d8:d9:22:46:b7:86:c5:5f:3b:f5:34:16:6c:49:77:2d:99:
         57:8e:34:e4:0f:de:18:71:ac:b6:b3:96:21:5a:06:11:f1:88:
         67:46:2b:c3:db:0c:88:3a:c6:83:be:f0:a2:4a:f5:4d:8e:7c:
         75:20:e7:88:9d:77:d5:40:36:4c:c9:f8:e7:a7:b7:e5:8b:df:
         dc:00:9f:3f:e4:22:72:d7:d9:84:f7:08:94:fa:a2:a0:05:11:
         73:3e:0e:ca:1a:92:0f:23:6a:a9:2f:70:cc:96:00:d3:9c:a8:
         15:b7:6d:a4:5e:f5:a3:ca:ad:fc:16:60:69:6d:de:fc:59:6a:
         34:61:81:e6:56:53:84:74:3e:19:01:e7:a9:67:3b:7b:b2:a8:
         67:2e:06:5b
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
NDdFQzExMC8GA1UEBRMoMDgxMkEwOTY2MkYwQjNFMzRGMkI1QTUxQzMzRThFOTI3
MDNFNDM2OTAeFw0yNjA0MTUwNzIxMDVaFw0yNjA0MjIwNzIxMDVaMBgxFjAUBgNV
BAMTDTY5ZGYzYzYxLWI5NmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDo0M3Lvu98jhOI/t3GKi+o6E6u+H6QBWjPFVAza+RmlxlThtTk7UFDppQbAvQr
0xDtI6fV8n4/QewIvl2MXMJO79jhmk1wbeh8DPTQ0/+tyeJESdh5Ma22xO3cmC3H
yQrFtlXfF+TaaVxJqknQcTGyws7Kfyjcm5XzBzeXVcT4bsHTGUrAMXhF8kaGuurN
zDjQimLDbdGKxWbZVzp3rmvBInWgiygeO7LEtqITzqIyvwl0o6k0ZD4qwZDkz+Ri
FYWSgRubzKuRaXKqSPvsKKWXg9Kwu6anq7KVTAuxjh/YGI8vOPV8ENHhKjwSHMkn
D4+MqOUGqNnx4XOjo/v3N8xvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU5uZT8gR0
pn+WbJzI3hwQnKwVm3AwHwYDVR0jBBgwFoAUCBKglmLws+NPK1pRwz6OknA+Q2kw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0N0VDLzI1NjM1N0M4ODdE
RDExRjBCNzRDRkU3NkM0RjlBRTAyL0NCS2dsbUx3cy1OUEsxcFJ3ejZPa25BLVEy
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvQ0JLZ2xtTHdzLU5QSzFwUnd6Nk9rbkEtUTJrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0
N0VDLzI1NjM1N0M4ODdERDExRjBCNzRDRkU3NkM0RjlBRTAyL0NCS2dsbUx3cy1O
UEsxcFJ3ejZPa25BLVEyay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCVPUFtOjiAhYreWbxXTJkYCjLojsuHuONVS7mitpejYv+zMxE2I68UIadsRQyy
2qKdanuv0Zqp5DB/Qsalfq6SbzjXHoTbd1vzTtCEsF0ZpwsmcdJGfqG4T9dReP1W
APeA7NltQ03UPGsRDzAY2NkiRreGxV879TQWbEl3LZlXjjTkD94Ycay2s5YhWgYR
8YhnRivD2wyIOsaDvvCiSvVNjnx1IOeInXfVQDZMyfjnp7fli9/cAJ8/5CJy19mE
9wiU+qKgBRFzPg7KGpIPI2qpL3DMlgDTnKgVt22kXvWjyq38FmBpbd78WWo0YYHm
VlOEdD4ZAeepZzt7sqhnLgZb
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:31:44 2026 by rpki-client