Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft
File:                     LgUrNwETMSqpiD2X7a0jDKFmIWI.mft (raw, json)
Hash identifier:          tx7eccIgYGu/CxBbW/2hhW/VBeqrg3BUW8AEpM8s+2Q=
Subject key identifier:   F7:21:63:AD:4B:C2:E1:5C:25:FB:3A:7E:C6:C6:0F:88:28:EC:A2:9B
Authority key identifier: 2E:05:2B:37:01:13:31:2A:A9:88:3D:97:ED:AD:23:0C:A1:66:21:62
Certificate issuer:       /CN=A917E968/serialNumber=2E052B370113312AA9883D97EDAD230CA1662162
Certificate serial:       0191
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft
Manifest number:          0187
Signing time:             Sat 13 Jun 2026 04:29:20 +0000
Manifest this update:     Sat 13 Jun 2026 04:29:19 +0000
Manifest next update:     Sat 20 Jun 2026 04:29:19 +0000
Files and hashes:         1: LgUrNwETMSqpiD2X7a0jDKFmIWI.crl (hash: 0vU9H8rybYxlKLa/lO1oIrcM4APqXMB9B1ARV9Obz5g=)
                          2: 919148B2169911EF9DA1992BC4F9AE02.roa (hash: cLf+c87E2+WnHqsOyedNZ3lOPcCUbIIP13xWOWAjY2w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.crl
                          rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401 (0x191)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E968, serialNumber=2E052B370113312AA9883D97EDAD230CA1662162
        Validity
            Not Before: Jun 13 04:29:19 2026 GMT
            Not After : Jun 20 04:29:19 2026 GMT
        Subject: CN=6a2cdc9f-d584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:af:b3:33:3e:b9:e7:d7:0e:5b:4d:17:83:a6:
                    d6:37:31:ec:de:55:9c:33:b8:c2:9d:b1:8e:f9:3a:
                    ad:c8:49:4c:7c:7d:e8:c3:da:70:9d:78:88:d2:76:
                    a8:41:b8:7e:53:c4:ad:c7:dc:92:7b:29:78:a1:58:
                    30:81:e5:37:36:94:68:fd:dd:7c:aa:34:6b:02:d7:
                    0d:0e:b7:f8:6d:f7:58:ca:5b:d3:04:fe:c9:ae:d6:
                    49:f4:54:ec:3d:58:6c:3b:86:21:fb:54:51:64:d9:
                    d9:17:41:d0:9c:ca:53:6c:80:06:ef:73:ce:51:95:
                    df:fe:41:e4:b1:1c:0c:9c:89:44:72:66:68:40:10:
                    1e:1a:16:7f:6a:39:80:d5:4d:49:6d:70:d0:c4:88:
                    73:12:da:ac:97:5b:4b:fd:e0:3d:cf:7b:61:a8:7d:
                    a6:53:4a:cb:6a:7f:45:6a:37:f3:32:9f:e9:7f:9a:
                    67:a9:ed:38:85:83:2c:89:66:f7:86:93:50:9c:3f:
                    a3:12:d7:43:9d:a0:bd:dc:34:e3:91:d9:4c:30:90:
                    26:f8:4f:91:8c:60:0c:85:60:15:d4:b0:1f:d8:5f:
                    f3:96:be:5b:82:d5:b4:bd:4b:23:9b:36:66:81:c7:
                    d2:0b:6b:d1:e4:cc:51:04:b3:c9:38:4c:18:49:c8:
                    40:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:21:63:AD:4B:C2:E1:5C:25:FB:3A:7E:C6:C6:0F:88:28:EC:A2:9B
            X509v3 Authority Key Identifier:
                keyid:2E:05:2B:37:01:13:31:2A:A9:88:3D:97:ED:AD:23:0C:A1:66:21:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:30:e7:8c:20:d2:98:b8:9c:00:3a:2c:4b:c9:d9:17:87:e1:
         20:74:28:b7:9e:8c:02:04:cf:45:05:96:1a:8e:49:9e:ab:45:
         a4:82:fd:88:3c:08:09:78:76:ad:9c:13:9a:71:c9:8e:9d:5e:
         aa:9f:fb:10:57:db:ea:a8:d0:40:a9:31:76:da:92:6a:ff:65:
         c2:b0:d6:09:b1:33:74:e1:cd:f2:0e:e8:ab:60:e3:7e:6c:04:
         7d:6b:21:00:33:d5:4a:5a:e7:ca:3d:51:ac:2f:27:01:65:e5:
         21:fa:cd:54:e3:d6:3e:d0:f3:e8:cc:ef:b5:d0:46:9a:cc:d7:
         c2:1b:c9:24:0f:75:97:56:3b:07:7e:b1:9f:0a:b3:03:e1:78:
         9b:1f:de:0e:35:bf:ad:99:31:2e:73:65:ec:5a:aa:4f:57:11:
         d3:1d:df:22:de:15:83:4e:df:3c:49:c7:94:e1:88:3a:15:d3:
         f4:c6:2c:83:55:2d:b2:1d:ce:be:ae:a7:c4:ba:f6:54:cc:e3:
         f1:bb:fd:c9:34:f0:7e:d8:25:ab:e3:d9:26:a5:70:3f:4b:96:
         de:16:91:41:3e:c9:34:59:16:2e:16:3b:52:e8:0f:fe:ce:c7:
         d1:af:11:d5:dc:a5:a7:ab:28:f8:d1:5a:f3:e2:54:7b:9e:bb:
         32:89:2f:8c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0U5NjgxMTAvBgNVBAUTKDJFMDUyQjM3MDExMzMxMkFBOTg4M0Q5N0VEQUQyMzBD
QTE2NjIxNjIwHhcNMjYwNjEzMDQyOTE5WhcNMjYwNjIwMDQyOTE5WjAYMRYwFAYD
VQQDEw02YTJjZGM5Zi1kNTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAta+zMz6559cOW00Xg6bWNzHs3lWcM7jCnbGO+TqtyElMfH3ow9pwnXiI0nao
Qbh+U8Stx9ySeyl4oVgwgeU3NpRo/d18qjRrAtcNDrf4bfdYylvTBP7JrtZJ9FTs
PVhsO4Yh+1RRZNnZF0HQnMpTbIAG73POUZXf/kHksRwMnIlEcmZoQBAeGhZ/ajmA
1U1JbXDQxIhzEtqsl1tL/eA9z3thqH2mU0rLan9FajfzMp/pf5pnqe04hYMsiWb3
hpNQnD+jEtdDnaC93DTjkdlMMJAm+E+RjGAMhWAV1LAf2F/zlr5bgtW0vUsjmzZm
gcfSC2vR5MxRBLPJOEwYSchAHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPchY61L
wuFcJfs6fsbGD4go7KKbMB8GA1UdIwQYMBaAFC4FKzcBEzEqqYg9l+2tIwyhZiFi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTk2OC8yQkEyRUMwRTE2
OTkxMUVGQkE0MEM5MkFDNEY5QUUwMi9MZ1VyTndFVE1TcXBpRDJYN2EwakRLRm1J
V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xnVXJOd0VUTVNxcGlEMlg3YTBqREtGbUlXSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTk2OC8yQkEyRUMwRTE2OTkxMUVGQkE0MEM5MkFDNEY5QUUwMi9MZ1VyTndFVE1T
cXBpRDJYN2EwakRLRm1JV0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApjDnjCDSmLicADosS8nZF4fhIHQot56MAgTPRQWWGo5JnqtFpIL9iDwICXh2
rZwTmnHJjp1eqp/7EFfb6qjQQKkxdtqSav9lwrDWCbEzdOHN8g7oq2DjfmwEfWsh
ADPVSlrnyj1RrC8nAWXlIfrNVOPWPtDz6MzvtdBGmszXwhvJJA91l1Y7B36xnwqz
A+F4mx/eDjW/rZkxLnNl7FqqT1cR0x3fIt4Vg07fPEnHlOGIOhXT9MYsg1Utsh3O
vq6nxLr2VMzj8bv9yTTwftglq+PZJqVwP0uW3haRQT7JNFkWLhY7UugP/s7H0a8R
1dylp6so+NFa8+JUe567MokvjA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:54:43 2026 by rpki-client