Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft
File:                     lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft (raw, json)
Hash identifier:          tHK1ysyeCrc9KRSADOIuAiTpzZcq583xoqEx8v02Ba8=
Subject key identifier:   A7:EE:0B:83:EB:1A:38:3D:14:89:3D:BD:B3:E1:62:FD:DB:C8:FE:62
Authority key identifier: 96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2
Certificate issuer:       /CN=A919EFDE/serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2
Certificate serial:       362D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft
Manifest number:          35B5
Signing time:             Fri 02 Oct 2026 14:25:40 +0000
Manifest this update:     Fri 02 Oct 2026 14:25:39 +0000
Manifest next update:     Fri 09 Oct 2026 14:25:39 +0000
Files and hashes:         1: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl (hash: yzZ3sAc1HogggcWkibLlNnuY79EYP6zALYa8Hkk06KM=)
                          2: F6D63E40054A11EAA00FB024C4F9AE02.roa (hash: 7jOIbaiPNEQ5tv45ewj5Fz6f7M91EZnlJBs6MK56S3w=)
                          3: B2690D6CCA5511EE9683413FC4F9AE02.roa (hash: A+a3H+TI3Fy7ECqMtSSHf3q0bX9LrpXD0sKYqQLyRzM=)
                          4: 1B513B10FA3011E9BF5A291EC4F9AE02.roa (hash: P3ZRq1xA8QtDqTnLHnRb3kjohttdnDktPk8gMx+p6lU=)
                          5: 5113BF7CFE6011EA9D63505CC4F9AE02.roa (hash: M4WBswg1YJ4TezL6E7iYouHn8KwdFBvWXJuWc2T2coA=)
                          6: A9D92784B0CA11E59BE6876FC4F9AE02.roa (hash: khATrdo5z+GWLARkNlA8hcKpjIC1yChn98ttcidrqFs=)
                          7: 19DE7DB0FA3011E9BF5A291EC4F9AE02.roa (hash: IrGm+0rrhe6nwg8fMZphy3bLySRgbqK4gCqvkr1SaPY=)
                          8: 1A7891D4FA3011E9BF5A291EC4F9AE02.roa (hash: KeE1mpgZhkEhqP2LCs6EXDMfZu6Zxoag+TQ3ftbgOYk=)
                          9: A769D0DEB0CA11E59BE6876FC4F9AE02.roa (hash: g0qbK+AgDky7jS+tfKk3FPH4lZwss0lhqd032VOFuPI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl
                          rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 14:25:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13869 (0x362d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EFDE, serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2
        Validity
            Not Before: Oct  2 14:25:39 2026 GMT
            Not After : Oct  9 14:25:39 2026 GMT
        Subject: CN=6abfbee3-d23c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cc:de:1a:2f:e9:11:74:08:1e:59:84:5e:96:
                    0c:1a:c4:75:14:98:e1:31:59:4a:af:ca:cb:88:65:
                    9b:f6:4f:a7:ad:7f:60:98:dc:24:b4:ad:c6:3e:3e:
                    57:98:e2:6e:06:b9:b3:06:be:70:7c:56:e5:62:74:
                    00:78:fb:65:95:31:43:8d:54:11:60:84:4d:2b:29:
                    8a:06:25:38:27:4e:f3:33:69:85:c0:50:e7:8a:32:
                    61:cb:33:c0:35:94:02:f5:1b:8e:f5:e4:bb:28:bf:
                    aa:b6:05:86:bd:a3:11:74:93:18:cf:52:1c:55:ad:
                    ba:76:a6:be:be:90:5c:94:75:4f:8f:41:95:8a:69:
                    ca:e1:25:74:f4:85:80:ec:25:14:ea:4b:43:f6:f6:
                    fb:cf:f7:59:3d:b3:a0:01:e8:5b:b6:0e:5d:e3:08:
                    27:67:e7:c4:45:d9:d4:91:c1:d8:ee:b9:55:51:0f:
                    97:da:cb:c0:2f:9b:58:df:b8:9c:56:bf:db:46:da:
                    83:c1:71:56:d6:fd:21:8e:1b:0f:69:0d:1c:d7:c3:
                    e0:ac:1c:2d:c5:49:92:08:d8:ac:26:b3:17:01:01:
                    44:79:a0:0d:ca:c5:0b:e6:ac:2c:28:fd:05:e2:93:
                    ab:51:ff:3b:90:de:73:44:07:8e:a7:62:93:c6:ed:
                    93:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:EE:0B:83:EB:1A:38:3D:14:89:3D:BD:B3:E1:62:FD:DB:C8:FE:62
            X509v3 Authority Key Identifier:
                keyid:96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:e7:df:bd:9b:b8:a2:02:80:76:f7:f2:29:64:f3:a6:f1:7b:
         f0:96:71:70:b6:22:50:fb:50:66:af:43:57:8f:b9:cb:ff:7b:
         05:dc:d1:4b:b2:d7:f0:37:6d:d3:69:93:ec:da:79:88:86:19:
         de:46:83:1c:15:69:08:5f:e7:ee:f0:59:f5:f9:ed:30:7c:f1:
         ff:c1:b5:6a:af:22:37:0a:9d:07:88:e3:c4:e2:c8:2f:8b:be:
         e0:cd:b7:5a:9e:5c:37:ad:1f:c3:b0:8c:db:13:48:b7:38:4e:
         f8:65:4e:6f:8a:cd:d7:67:a3:6c:f5:06:e8:d5:9a:ef:e9:b2:
         e4:7f:18:4d:be:16:da:3a:ba:8b:1f:1d:e4:d2:0a:02:13:b5:
         f9:38:72:df:a5:0c:ad:21:ae:9c:d6:a0:fd:fc:69:f0:3a:89:
         9c:66:1d:f8:a9:bf:a5:3f:29:93:ed:8a:9d:03:08:b5:64:af:
         f2:4f:56:2f:bd:42:76:0e:28:6a:35:f1:b6:67:29:97:ed:ec:
         02:be:41:83:93:01:15:b9:dc:dd:1c:6d:c7:aa:76:bb:a3:63:
         32:85:df:9a:3e:2d:dc:17:c6:d8:ed:18:e8:10:15:03:96:a5:
         6f:48:a9:da:a3:32:e8:7f:84:ef:49:87:7e:71:81:cb:7c:d4:
         d6:3e:9f:89
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVGREUxMTAvBgNVBAUTKDk2NjlDRDVCM0Q4NzM1ODE1QTY1RDY1OUYyNzQxQjQz
RTY0NzMyQjIwHhcNMjYxMDAyMTQyNTM5WhcNMjYxMDA5MTQyNTM5WjAYMRYwFAYD
VQQDEw02YWJmYmVlMy1kMjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuMzeGi/pEXQIHlmEXpYMGsR1FJjhMVlKr8rLiGWb9k+nrX9gmNwktK3GPj5X
mOJuBrmzBr5wfFblYnQAePtllTFDjVQRYIRNKymKBiU4J07zM2mFwFDnijJhyzPA
NZQC9RuO9eS7KL+qtgWGvaMRdJMYz1IcVa26dqa+vpBclHVPj0GVimnK4SV09IWA
7CUU6ktD9vb7z/dZPbOgAehbtg5d4wgnZ+fERdnUkcHY7rlVUQ+X2svAL5tY37ic
Vr/bRtqDwXFW1v0hjhsPaQ0c18PgrBwtxUmSCNisJrMXAQFEeaANysUL5qwsKP0F
4pOrUf87kN5zRAeOp2KTxu2T1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKfuC4Pr
Gjg9FIk9vbPhYv3byP5iMB8GA1UdIwQYMBaAFJZpzVs9hzWBWmXWWfJ0G0PmRzKy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUZERS9DQzQ1RUNBODFE
ODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5ZRmFaZFpaOG5RYlEtWkhN
ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xtbk5XejJITllGYVpkWlo4blFiUS1aSE1ySS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RUZERS9DQzQ1RUNBODFEODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5Z
RmFaZFpaOG5RYlEtWkhNckkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArOffvZu4ogKAdvfyKWTzpvF78JZxcLYiUPtQZq9DV4+5y/97BdzRS7LX8Ddt
02mT7Np5iIYZ3kaDHBVpCF/n7vBZ9fntMHzx/8G1aq8iNwqdB4jjxOLIL4u+4M23
Wp5cN60fw7CM2xNItzhO+GVOb4rN12ejbPUG6NWa7+my5H8YTb4W2jq6ix8d5NIK
AhO1+Thy36UMrSGunNag/fxp8DqJnGYd+Km/pT8pk+2KnQMItWSv8k9WL71Cdg4o
ajXxtmcpl+3sAr5Bg5MBFbnc3Rxtx6p2u6NjMoXfmj4t3BfG2O0Y6BAVA5alb0ip
2qMy6H+E70mHfnGBy3zU1j6fiQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 08:03:21 2026 by rpki-client