Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft
File:                     ltGlmUmhu3ombXKg8S_81fUFnxc.mft (raw, json)
Hash identifier:          WUPe2RCJo5HSNkmtBB8FN+8jpHrTc+27vvUuChfC7cY=
Subject key identifier:   14:B0:49:05:D2:32:3E:C4:1A:21:7C:1B:69:6F:DC:0B:97:20:62:0C
Authority key identifier: 96:D1:A5:99:49:A1:BB:7A:26:6D:72:A0:F1:2F:FC:D5:F5:05:9F:17
Certificate issuer:       /CN=A91AB001/serialNumber=96D1A59949A1BB7A266D72A0F12FFCD5F5059F17
Certificate serial:       04E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft
Manifest number:          04DC
Signing time:             Mon 02 Mar 2026 00:58:55 +0000
Manifest this update:     Mon 02 Mar 2026 00:58:53 +0000
Manifest next update:     Mon 09 Mar 2026 00:58:53 +0000
Files and hashes:         1: ltGlmUmhu3ombXKg8S_81fUFnxc.crl (hash: Z33MLEHGoYODj0WuRTNKfVuer00cke8H0qCI+vnF9gk=)
                          2: 5BD4372457DE11EC88BC6713C4F9AE02.roa (hash: HfIHCgE3FqwzFZeum4TKPXX/IhXg0j6Cd01v1i5w0B0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.crl
                          rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:58:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1252 (0x4e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB001, serialNumber=96D1A59949A1BB7A266D72A0F12FFCD5F5059F17
        Validity
            Not Before: Mar  2 00:58:53 2026 GMT
            Not After : Mar  9 00:58:53 2026 GMT
        Subject: CN=69a4e0cf-f15d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e6:e4:b0:57:bb:fe:23:7b:92:bb:63:71:08:
                    a6:28:2d:71:16:ed:62:89:44:0b:c5:f8:6d:23:4a:
                    6a:8c:20:d5:70:dd:bb:95:18:c4:8c:2b:33:6e:39:
                    68:58:b3:33:49:5c:f4:cd:8f:f4:2f:72:9c:ab:dc:
                    64:50:84:b6:7a:02:32:ff:a9:30:c9:75:de:c1:8b:
                    4f:c5:5b:9a:b4:b0:3b:d4:c0:a9:91:20:b2:c5:16:
                    c7:0b:5b:72:8c:a7:2f:8a:06:5e:06:9c:ce:9b:b3:
                    f6:ce:c1:8d:9b:4a:97:c5:11:f5:e5:bb:50:ab:8b:
                    a6:fc:e1:58:ec:5f:4a:ca:ee:03:a8:46:9f:55:6c:
                    cc:b9:05:3a:5b:8b:96:12:99:b9:b8:bc:54:e4:2d:
                    7e:da:48:0a:df:e3:70:15:3f:b5:06:c6:15:d1:50:
                    d1:06:a2:c7:ec:16:f7:37:cb:ff:ed:92:c9:6f:26:
                    f3:c8:45:37:38:57:7e:23:a6:f7:02:15:c0:be:f9:
                    20:9f:6b:eb:30:fd:02:b7:aa:4d:9d:00:25:a1:94:
                    3c:87:9a:0a:80:22:e2:f1:d3:6c:a6:69:8d:08:f1:
                    2e:ef:18:e9:ab:43:03:c7:f1:a4:30:10:b9:0e:1b:
                    fc:9b:d0:f9:b8:5d:e9:1f:7e:4d:c9:39:f1:f2:bc:
                    e3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B0:49:05:D2:32:3E:C4:1A:21:7C:1B:69:6F:DC:0B:97:20:62:0C
            X509v3 Authority Key Identifier:
                keyid:96:D1:A5:99:49:A1:BB:7A:26:6D:72:A0:F1:2F:FC:D5:F5:05:9F:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:b7:de:fe:da:52:ef:b7:7e:04:a5:7e:6e:d5:94:20:c2:04:
         ae:7a:a5:02:79:62:b2:2e:b0:28:03:0b:ed:e6:cf:08:bd:69:
         71:7d:b5:4b:34:2b:5f:4a:b6:2c:e7:32:fb:32:88:3b:30:c4:
         2c:6c:e7:00:bb:7c:6f:32:f2:02:5d:57:84:65:8c:bb:30:bb:
         06:7e:08:95:a4:32:3a:d9:55:ec:e9:b9:3e:67:05:2f:ae:11:
         81:f5:ce:8e:88:86:d8:e8:78:78:6b:d3:3c:35:6f:c6:57:6d:
         0c:3f:89:6d:c4:d7:02:c4:28:b0:44:95:f8:1b:53:30:52:57:
         bd:42:51:05:af:c7:94:67:12:62:fb:20:b6:62:0c:9e:5d:f9:
         49:60:7f:8a:12:fe:03:33:de:bd:13:a1:b3:55:12:d8:b7:dc:
         9a:08:c4:b7:97:8f:61:3f:55:71:b8:4c:f3:b3:26:ef:12:d0:
         01:b7:25:50:6c:a7:6c:69:fe:72:84:c1:d0:b0:52:a1:63:56:
         dc:b7:60:b2:13:a0:7e:f7:4f:97:ce:dc:b1:1d:27:88:34:e4:
         98:4d:d9:b2:e3:80:06:d6:67:e9:3f:fb:43:12:e5:5d:d2:3b:
         91:23:81:bb:93:7a:b1:4e:a2:3a:85:e4:c1:3f:bc:ac:1e:63:
         d6:3c:7a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:50:23 2026 by rpki-client