Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft
File:                     lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft (raw, json)
Hash identifier:          vgemttL98ZbqetC2HObZ0OeN58m44RRfAsgJ9OrhWPU=
Subject key identifier:   62:CB:9A:33:55:28:6E:52:AC:A6:48:04:46:61:C4:28:57:BD:68:A7
Authority key identifier: 95:95:1E:CF:C9:1D:0F:55:AD:8E:D8:AF:BF:E6:3C:B4:16:19:FC:47
Certificate issuer:       /CN=A919546B/serialNumber=95951ECFC91D0F55AD8ED8AFBFE63CB41619FC47
Certificate serial:       0709
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft
Manifest number:          06FE
Signing time:             Thu 16 Apr 2026 21:58:53 +0000
Manifest this update:     Thu 16 Apr 2026 21:58:52 +0000
Manifest next update:     Thu 23 Apr 2026 21:58:52 +0000
Files and hashes:         1: lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.crl (hash: hFV7xG3VdFibFRQVWE/kRGHSO5QyX3ODoJb1j8YPUZQ=)
                          2: 270CD9841A7111F09FFEDF3BC4F9AE02.roa (hash: KEULQah9Xfu3EB1R3f4DU30ed7pQNDHzdN7FXf8Cs5k=)
                          3: 652993B4884F11EBB2A8337FC4F9AE02.roa (hash: q6FpngzTpVUG349K+VnWCtDnMIjCL0biZT7epEsAQbg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.crl
                          rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:58:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1801 (0x709)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919546B, serialNumber=95951ECFC91D0F55AD8ED8AFBFE63CB41619FC47
        Validity
            Not Before: Apr 16 21:58:52 2026 GMT
            Not After : Apr 23 21:58:52 2026 GMT
        Subject: CN=69e15b9c-29cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:be:7e:60:9a:fd:b1:ac:da:f1:cc:96:e5:5d:
                    77:b4:48:e0:e8:b6:aa:7e:cf:6c:b4:c9:2c:0a:45:
                    51:b8:a9:7a:eb:24:fe:dd:13:58:58:e5:3f:82:01:
                    71:0b:27:15:6e:50:66:48:b0:27:9b:61:e3:a3:40:
                    21:da:ee:2c:fa:e7:93:d8:88:0f:84:c2:02:09:89:
                    27:1c:d4:f9:61:c7:4d:84:f1:fc:56:3a:bd:ae:02:
                    cd:43:aa:71:68:6c:60:be:85:e9:df:a9:01:46:35:
                    6b:48:7a:19:e7:7c:bd:3a:10:ca:8f:f9:9a:d6:13:
                    6f:25:da:01:00:50:b4:c3:7f:bf:b1:bf:d6:44:5c:
                    24:f4:ae:fd:59:f2:6b:db:9a:e2:9e:d5:d1:dd:b0:
                    6d:1d:26:f7:e3:93:f0:17:d0:cb:3c:fe:09:b2:72:
                    d7:52:cd:5a:62:51:fb:46:b3:b9:50:91:52:0c:6b:
                    a1:c1:6e:75:0c:f6:e0:dd:32:07:7e:eb:43:84:9d:
                    f0:13:8e:18:f9:93:98:a2:7f:9a:ca:6b:76:66:da:
                    04:b0:ca:c5:d9:21:22:0e:eb:67:1a:00:96:cb:1a:
                    66:75:d1:88:a1:cf:b2:4b:39:69:4e:2f:50:66:22:
                    47:16:40:03:0f:5d:1b:74:c8:62:d6:18:c7:99:d5:
                    a3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:CB:9A:33:55:28:6E:52:AC:A6:48:04:46:61:C4:28:57:BD:68:A7
            X509v3 Authority Key Identifier:
                keyid:95:95:1E:CF:C9:1D:0F:55:AD:8E:D8:AF:BF:E6:3C:B4:16:19:FC:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:43:b8:c4:ef:bf:82:fd:46:56:a5:b2:02:9c:a0:7d:7c:54:
         70:f3:6b:86:8a:12:af:0f:10:c8:86:49:e5:92:47:c9:3b:46:
         bb:d5:e9:7e:56:b7:d8:84:df:b5:2f:73:75:8e:ba:a1:d9:ee:
         7d:79:12:85:a1:c1:8c:ec:5a:53:67:8f:4a:d4:46:4b:fc:74:
         db:54:67:d2:9e:b3:38:d2:e0:04:58:53:99:fa:b7:cc:08:10:
         34:c0:24:19:8d:75:a7:05:72:f1:80:f8:54:7b:89:90:f1:a7:
         1f:fc:f0:44:a9:35:97:19:5d:fc:6c:49:93:e8:31:18:f4:fa:
         48:07:93:02:c9:f2:4e:73:f9:a5:5b:7e:c8:4b:76:12:cb:2d:
         47:85:cb:15:e8:b6:af:7c:e2:89:bb:ef:0a:20:3f:21:83:f3:
         0a:ba:0b:77:e8:cb:30:ea:f5:5d:58:f0:1b:c4:dc:31:24:b8:
         d1:03:0e:10:de:6d:a9:a6:19:3f:ac:1f:15:cc:ba:48:e5:57:
         48:b2:be:c3:cb:d9:0d:6c:08:26:5c:d3:af:d6:52:a3:4f:2c:
         e3:6b:12:29:8a:67:e0:97:64:58:97:9d:11:0f:66:5b:52:45:
         d5:33:e7:36:04:25:7f:c9:63:05:77:99:c9:1f:fa:ae:94:64:
         e7:3b:82:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:43:35 2026 by rpki-client