Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft
File:                     LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft (raw, json)
Hash identifier:          5gk/m7rrDk5eUTuhCRNx3GyjhPBxi+SSFH2r5hb1Xvk=
Subject key identifier:   7E:2F:0C:96:82:6B:AA:9E:08:BD:80:33:7A:E9:AB:D6:5A:63:BC:66
Authority key identifier: 2E:50:79:BE:85:6A:5A:66:37:85:6C:93:71:54:24:5D:98:7F:A7:54
Certificate issuer:       /CN=A916CDDF/serialNumber=2E5079BE856A5A6637856C937154245D987FA754
Certificate serial:       0CAA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlB5voVqWmY3hWyTcVQkXZh_p1Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft
Manifest number:          151A
Signing time:             Thu 16 Apr 2026 18:23:55 +0000
Manifest this update:     Thu 16 Apr 2026 18:23:54 +0000
Manifest next update:     Thu 23 Apr 2026 18:23:54 +0000
Files and hashes:         1: LlB5voVqWmY3hWyTcVQkXZh_p1Q.crl (hash: AVBbLd1jn9+g1/SnC8MeJ8UcHiY4Onp6J4DINB9epKQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.crl
                          rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlB5voVqWmY3hWyTcVQkXZh_p1Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:23:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3242 (0xcaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CDDF, serialNumber=2E5079BE856A5A6637856C937154245D987FA754
        Validity
            Not Before: Apr 16 18:23:54 2026 GMT
            Not After : Apr 23 18:23:54 2026 GMT
        Subject: CN=69e1293a-58af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:34:60:64:bf:34:48:f1:60:88:64:90:0e:e3:
                    00:ea:f5:ad:6d:4e:a2:6f:a2:ff:5c:72:8e:60:af:
                    ba:c7:fb:5c:db:30:42:02:e3:ae:fd:6f:0a:ce:92:
                    0f:55:64:5d:d1:19:5b:01:81:8f:39:d3:61:05:fd:
                    4f:d0:48:88:4b:9e:b0:0a:53:8c:2a:4b:09:3f:d5:
                    eb:a4:36:a1:4b:53:a6:b5:8d:eb:b2:e2:77:85:33:
                    eb:bd:fc:b2:79:d7:db:57:78:2e:b3:83:c0:85:61:
                    79:41:bb:02:f3:57:ad:7b:b8:0e:94:ca:41:40:59:
                    01:12:1e:b9:13:d0:f4:04:f6:8b:49:52:24:3b:7d:
                    62:22:8d:7f:8d:00:1b:0b:51:4d:6d:e5:04:f8:e8:
                    bc:21:f0:7f:09:e9:77:13:ce:90:41:43:e4:fa:75:
                    2a:af:b8:53:cf:cd:fa:f1:7f:2f:07:cb:71:d1:53:
                    c0:d4:ef:7a:fb:d2:8c:ce:de:e4:a8:f5:f2:3b:ed:
                    92:54:44:6d:e5:7b:ba:93:70:b9:56:94:07:d7:ea:
                    72:12:0c:76:99:28:a3:fd:2d:ac:f2:00:af:12:e5:
                    9e:00:af:79:7e:1d:e8:13:70:fe:73:e9:21:09:0b:
                    85:64:b8:32:08:23:bf:47:9c:a2:6e:6c:ec:6f:7f:
                    fd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:2F:0C:96:82:6B:AA:9E:08:BD:80:33:7A:E9:AB:D6:5A:63:BC:66
            X509v3 Authority Key Identifier:
                keyid:2E:50:79:BE:85:6A:5A:66:37:85:6C:93:71:54:24:5D:98:7F:A7:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlB5voVqWmY3hWyTcVQkXZh_p1Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:c3:aa:1b:16:97:4e:19:00:36:79:e1:12:54:78:6b:06:38:
         0d:be:89:f7:cb:aa:ef:5d:98:53:bf:26:af:70:c8:3c:97:20:
         bb:85:ed:b3:b8:99:39:9c:7e:a5:72:01:86:81:bb:0d:ea:76:
         2a:97:61:cf:e7:34:18:a7:fb:b8:4a:51:73:df:cd:98:da:de:
         d4:3c:0a:8f:79:b5:54:f5:13:cb:37:74:7d:ed:4c:9c:40:16:
         59:db:07:07:b3:cd:19:7a:a0:49:2e:2d:46:c3:65:80:24:f3:
         be:f9:43:e1:90:7a:89:13:2b:88:0c:a1:8b:fa:92:eb:b7:e4:
         a4:3b:71:c0:0a:9e:8d:85:52:20:5f:2a:55:6d:d0:4a:cb:0a:
         84:e0:6d:0d:55:00:51:75:44:2e:7a:c4:79:aa:25:97:2c:d0:
         ac:72:e4:ec:4d:e1:97:0b:9c:1f:b3:70:77:13:a5:41:f3:9f:
         b4:11:a3:89:ad:77:bf:36:f6:3f:28:92:18:e7:f6:b1:65:2d:
         fc:39:8d:36:f1:17:c4:28:ed:31:01:b7:8f:83:e7:4f:d3:2f:
         22:cd:d2:e4:89:df:d3:81:67:45:41:a7:c9:9d:c7:26:68:b8:
         3f:b5:a1:f9:01:0b:e9:3f:ca:e5:b5:8f:e3:1f:fa:d2:8e:be:
         c6:db:e2:06
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkNEREYxMTAvBgNVBAUTKDJFNTA3OUJFODU2QTVBNjYzNzg1NkM5MzcxNTQyNDVE
OTg3RkE3NTQwHhcNMjYwNDE2MTgyMzU0WhcNMjYwNDIzMTgyMzU0WjAYMRYwFAYD
VQQDEw02OWUxMjkzYS01OGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqzRgZL80SPFgiGSQDuMA6vWtbU6ib6L/XHKOYK+6x/tc2zBCAuOu/W8KzpIP
VWRd0RlbAYGPOdNhBf1P0EiIS56wClOMKksJP9XrpDahS1OmtY3rsuJ3hTPrvfyy
edfbV3gus4PAhWF5QbsC81ete7gOlMpBQFkBEh65E9D0BPaLSVIkO31iIo1/jQAb
C1FNbeUE+Oi8IfB/Cel3E86QQUPk+nUqr7hTz8368X8vB8tx0VPA1O96+9KMzt7k
qPXyO+2SVERt5Xu6k3C5VpQH1+pyEgx2mSij/S2s8gCvEuWeAK95fh3oE3D+c+kh
CQuFZLgyCCO/R5yibmzsb3/9XQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH4vDJaC
a6qeCL2AM3rpq9ZaY7xmMB8GA1UdIwQYMBaAFC5Qeb6FalpmN4Vsk3FUJF2Yf6dU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0RERi8yNjYwOEQ0NjEw
NzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9MbEI1dm9WcVdtWTNoV3lUY1ZRa1haaF9w
MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xsQjV2b1ZxV21ZM2hXeVRjVlFrWFpoX3AxUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
Q0RERi8yNjYwOEQ0NjEwNzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9MbEI1dm9WcVdt
WTNoV3lUY1ZRa1haaF9wMVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAC8OqGxaXThkANnnhElR4awY4Db6J98uq712YU78mr3DIPJcgu4Xts7iZOZx+
pXIBhoG7Dep2Kpdhz+c0GKf7uEpRc9/NmNre1DwKj3m1VPUTyzd0fe1MnEAWWdsH
B7PNGXqgSS4tRsNlgCTzvvlD4ZB6iRMriAyhi/qS67fkpDtxwAqejYVSIF8qVW3Q
SssKhOBtDVUAUXVELnrEeaollyzQrHLk7E3hlwucH7NwdxOlQfOftBGjia13vzb2
PyiSGOf2sWUt/DmNNvEXxCjtMQG3j4PnT9MvIs3S5Inf04FnRUGnyZ3HJmi4P7Wh
+QEL6T/K5bWP4x/60o6+xtviBg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:32:21 2026 by rpki-client