Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.mft
File:                     lUb_2jDoTm_o815o7CVUGDnprQ8.mft (raw, json)
Hash identifier:          iQ5LV4Gwemp9he/AVjnF81Lb0WAFRKwHY84ZL7wcKMU=
Subject key identifier:   27:34:55:9F:5E:11:C5:E2:C7:21:29:7E:32:67:0E:95:1F:97:34:5F
Authority key identifier: 95:46:FF:DA:30:E8:4E:6F:E8:F3:5E:68:EC:25:54:18:39:E9:AD:0F
Certificate issuer:       /CN=A91795C3/serialNumber=9546FFDA30E84E6FE8F35E68EC25541839E9AD0F
Certificate serial:       3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUb_2jDoTm_o815o7CVUGDnprQ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.mft
Manifest number:          32
Signing time:             Sat 13 Jun 2026 08:52:08 +0000
Manifest this update:     Sat 13 Jun 2026 08:52:07 +0000
Manifest next update:     Sat 20 Jun 2026 08:52:07 +0000
Files and hashes:         1: lUb_2jDoTm_o815o7CVUGDnprQ8.crl (hash: KzSFdbBUsuehYIP9v3WUvG9yVzeAlKq6tKjMPdZRjuc=)
                          2: 49589EFA2D9F11F1920FEBD19F833773.roa (hash: rB6mncEodXlTCyNlNE9b7egaGZ8DkJX6TOSzNBIB7dQ=)
                          3: F594A6063FA511F1B714D040BE833773.roa (hash: vpQZtX1yMfD38qzmAFhlXuV41BUehxqTr9ZL+NUr+4c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.crl
                          rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUb_2jDoTm_o815o7CVUGDnprQ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:52:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91795C3, serialNumber=9546FFDA30E84E6FE8F35E68EC25541839E9AD0F
        Validity
            Not Before: Jun 13 08:52:07 2026 GMT
            Not After : Jun 20 08:52:07 2026 GMT
        Subject: CN=6a2d1a37-244f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2e:cf:6f:46:d6:9b:74:ff:0c:be:26:a5:55:
                    82:eb:83:e7:4e:c5:35:60:53:98:42:8f:e6:42:27:
                    40:15:7a:52:72:f1:ac:73:4f:f8:d5:2b:cc:77:6c:
                    38:e3:fa:9c:18:27:08:a7:46:55:b3:31:8a:5f:db:
                    f6:af:25:89:f2:d1:09:0b:27:dd:69:8a:dc:53:d8:
                    4f:df:96:60:41:80:d4:ba:e4:fa:e8:c4:dd:20:54:
                    18:e3:3c:d9:cf:4b:02:0b:48:d9:ae:e0:3a:a2:5f:
                    5e:cf:09:a6:77:b0:b4:62:d1:b1:6a:4c:fb:96:14:
                    04:ff:3d:cc:24:dd:de:33:cf:35:b9:03:84:58:77:
                    9f:e4:94:b6:48:b6:8f:f9:ca:80:55:9f:dc:5e:1b:
                    7b:32:e7:e5:58:87:64:03:8a:1d:d3:14:7c:94:96:
                    e9:99:75:ab:0e:c6:6d:a3:ca:1f:a9:97:db:5c:36:
                    05:45:12:a6:00:32:aa:86:c3:34:61:68:45:e2:cc:
                    d5:35:ae:db:5d:98:d9:52:77:79:a2:a6:1d:06:c5:
                    47:3b:a4:c3:9e:3c:24:72:17:da:d6:f2:99:87:79:
                    ab:12:66:f7:a5:1f:d1:a6:cd:53:3b:c2:0e:11:fc:
                    11:00:85:60:30:59:ba:91:72:3a:ad:f5:35:dc:bb:
                    3b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:34:55:9F:5E:11:C5:E2:C7:21:29:7E:32:67:0E:95:1F:97:34:5F
            X509v3 Authority Key Identifier:
                keyid:95:46:FF:DA:30:E8:4E:6F:E8:F3:5E:68:EC:25:54:18:39:E9:AD:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUb_2jDoTm_o815o7CVUGDnprQ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:78:20:bb:0c:6b:ce:93:c6:8e:db:ce:64:ba:8d:d7:12:bb:
         a3:e0:53:7b:2a:ff:0d:ac:dc:07:54:ba:cd:c7:68:60:87:9e:
         b3:0c:f6:08:2d:00:6f:0d:31:bc:71:ee:ad:fd:01:87:22:54:
         23:53:9c:f4:05:9e:02:4e:25:89:24:e2:62:e7:3f:f4:5b:8d:
         a0:6b:3a:71:cd:0b:c7:34:9f:02:2f:51:44:f1:4b:a8:78:d0:
         85:da:c3:0d:48:c2:67:b6:34:99:e3:14:c2:d0:1f:7e:29:d8:
         61:1d:86:94:c6:34:c1:3b:00:8a:0e:e5:f4:38:dc:8b:84:bc:
         d7:2e:23:b7:ca:ba:c3:c8:96:87:51:e1:8c:04:fb:a8:0d:d7:
         75:2d:23:9d:e3:4c:db:ad:b0:51:c9:7e:91:2e:bf:ec:33:dd:
         13:11:81:98:a2:88:f7:c8:a3:0e:4a:08:73:75:76:a0:f0:28:
         2d:76:5d:f8:b6:68:75:dd:cd:a9:64:2a:09:df:c0:eb:a1:68:
         da:59:a8:79:53:6d:e6:09:80:08:32:8c:56:e3:a8:6f:77:7b:
         83:81:23:22:07:8a:6e:81:33:94:1c:85:46:e2:e7:98:be:b9:
         80:ad:56:af:b8:73:28:2f:2d:32:8b:5c:a2:a8:01:a1:fe:c8:
         4c:3d:61:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:43:30 2026 by rpki-client