Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft
File:                     lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft (raw, json)
Hash identifier:          3QKekG5YPoWyQsoKBhBrkeLv3Ftj0RWfbgc3oWiQPNQ=
Subject key identifier:   02:BB:62:C9:F1:9E:DD:06:8F:95:EE:CF:6D:93:10:08:0B:DC:C0:6F
Authority key identifier: 95:95:1E:CF:C9:1D:0F:55:AD:8E:D8:AF:BF:E6:3C:B4:16:19:FC:47
Certificate issuer:       /CN=A919546B/serialNumber=95951ECFC91D0F55AD8ED8AFBFE63CB41619FC47
Certificate serial:       0759
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft
Manifest number:          074E
Signing time:             Sun 20 Sep 2026 21:44:28 +0000
Manifest this update:     Sun 20 Sep 2026 21:44:28 +0000
Manifest next update:     Sun 27 Sep 2026 21:44:28 +0000
Files and hashes:         1: lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.crl (hash: 4O+zZrseiiC05y+aL9guiA7H5KS2Zc5HfxwcV3m95dY=)
                          2: 652993B4884F11EBB2A8337FC4F9AE02.roa (hash: q6FpngzTpVUG349K+VnWCtDnMIjCL0biZT7epEsAQbg=)
                          3: 270CD9841A7111F09FFEDF3BC4F9AE02.roa (hash: KEULQah9Xfu3EB1R3f4DU30ed7pQNDHzdN7FXf8Cs5k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.crl
                          rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 21:44:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1881 (0x759)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919546B, serialNumber=95951ECFC91D0F55AD8ED8AFBFE63CB41619FC47
        Validity
            Not Before: Sep 20 21:44:28 2026 GMT
            Not After : Sep 27 21:44:28 2026 GMT
        Subject: CN=6ab053bc-540a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:be:93:f4:3d:9f:64:84:33:4e:58:53:97:0b:
                    3a:05:a8:0f:c3:5d:7a:8a:ce:cf:96:f6:fa:6a:93:
                    84:f0:ba:96:9f:3b:c9:a6:50:64:90:4b:59:8d:ec:
                    b1:fc:98:5b:5e:6c:d1:ec:69:87:e3:3c:0e:af:b7:
                    22:bf:8a:df:58:34:eb:84:4c:ba:a6:d1:3f:94:41:
                    d7:12:a9:11:57:9b:90:cc:28:76:09:d4:0f:ad:3b:
                    cb:3d:90:5c:b0:80:76:19:26:2b:12:5f:32:23:41:
                    f3:89:98:3e:a3:10:70:95:52:b4:d9:a3:82:de:32:
                    78:0f:78:9c:bc:74:4f:53:ad:af:e2:b3:b6:7c:66:
                    e3:7d:2e:2d:82:32:fc:ce:3c:6d:73:b6:25:31:ab:
                    d5:8d:86:0e:a8:dd:a6:5c:6c:3c:79:0c:e3:95:a0:
                    69:1d:13:19:40:41:7f:e9:6d:3c:14:17:fa:d0:59:
                    31:81:d4:ea:77:c6:fb:d5:3e:2a:03:e7:68:44:65:
                    2c:48:40:f4:e7:4f:f0:c5:2e:d3:58:d3:fd:a6:97:
                    24:47:86:2a:a9:b3:1a:25:ce:e6:11:8d:3b:c0:b3:
                    69:ef:b8:51:65:8d:3f:a7:55:de:b6:c4:0a:d3:ef:
                    9d:0e:72:a6:b1:8e:ad:bd:d3:0d:e7:4a:c6:b2:6e:
                    3e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:BB:62:C9:F1:9E:DD:06:8F:95:EE:CF:6D:93:10:08:0B:DC:C0:6F
            X509v3 Authority Key Identifier:
                keyid:95:95:1E:CF:C9:1D:0F:55:AD:8E:D8:AF:BF:E6:3C:B4:16:19:FC:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:46:c8:24:e5:14:eb:27:04:0a:a5:a3:09:0d:2f:af:ed:7c:
         90:e2:b6:bc:02:06:6a:b9:a6:6d:c9:2e:0b:36:e3:f1:2b:a6:
         10:a3:9b:84:55:f6:e0:4b:65:34:5c:80:b2:0f:f3:ac:93:89:
         67:82:b0:f3:94:4f:7f:85:ee:e5:fd:dc:ff:b5:f0:c0:2b:c8:
         c7:84:ad:2d:64:45:de:1a:55:5c:ba:b6:88:af:11:32:e5:24:
         c9:a1:3f:3c:d6:9c:b8:81:31:43:63:d9:5b:b7:3f:2c:a6:ab:
         74:33:38:e2:68:77:44:52:f1:53:30:40:48:b2:e3:54:a9:29:
         44:74:c7:d3:cb:ae:8f:f2:d6:15:a6:e4:43:6c:04:6b:97:ec:
         78:ba:60:1e:01:b0:f8:7a:f3:59:19:04:64:9d:4c:64:d5:69:
         0c:46:ac:19:0f:8f:e2:cc:18:23:e2:49:09:5c:43:d2:49:cc:
         db:a5:95:50:d1:1b:89:a5:67:59:be:e1:55:47:24:4a:01:4d:
         b4:e7:7a:92:38:8e:05:8a:48:08:0c:20:4b:29:5b:f5:97:e8:
         c1:c2:19:97:69:3a:35:17:19:12:72:f9:9a:ad:96:00:cd:1f:
         74:ee:bd:09:d0:8e:34:03:5d:a1:cc:59:79:d9:b6:33:24:b9:
         9a:91:79:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:36:07 2026 by rpki-client