Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.mft
File:                     4lmIZ0880loTYNf-lTpYTxqvq8c.mft (raw, json)
Hash identifier:          YnGERcRGfHi6su0kxUZSRNXZ9Xw98gjiQ0C9SZkX/eI=
Subject key identifier:   32:98:D5:E2:9E:A9:64:C6:FF:73:78:0E:9B:02:61:E9:3E:FD:4B:38
Authority key identifier: E2:59:88:67:4F:3C:D2:5A:13:60:D7:FE:95:3A:58:4F:1A:AF:AB:C7
Certificate issuer:       /CN=A91B296A/serialNumber=E25988674F3CD25A1360D7FE953A584F1AAFABC7
Certificate serial:       2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lmIZ0880loTYNf-lTpYTxqvq8c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.mft
Manifest number:          26
Signing time:             Sat 13 Jun 2026 08:54:22 +0000
Manifest this update:     Sat 13 Jun 2026 08:54:21 +0000
Manifest next update:     Sat 20 Jun 2026 08:54:21 +0000
Files and hashes:         1: 4lmIZ0880loTYNf-lTpYTxqvq8c.crl (hash: /9bmqS7rz23E65wRC7hgvlpBrw9TPTRuYLjmIZnbZec=)
                          2: F685154E343511F194D2A58293833773.roa (hash: gqBjSjVoyBRxofp8a9jrvox3u68qYGspZzJrkr23A5k=)
                          3: F8C00164383D11F19F938D80A4833773.roa (hash: JA9a2tMNHCe2mcsEqThoattlGfh1KZXTRBAODQIj2BE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.crl
                          rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lmIZ0880loTYNf-lTpYTxqvq8c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:54:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B296A, serialNumber=E25988674F3CD25A1360D7FE953A584F1AAFABC7
        Validity
            Not Before: Jun 13 08:54:21 2026 GMT
            Not After : Jun 20 08:54:21 2026 GMT
        Subject: CN=6a2d1abe-cac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:99:0d:83:d5:36:d3:ab:a4:47:52:6d:1c:81:
                    ba:16:2c:b1:31:db:16:b6:cf:06:7c:e6:ca:10:2e:
                    b8:b8:2e:8e:1c:22:9f:3c:2a:de:01:da:a7:ce:1b:
                    51:12:f1:12:63:93:a9:0b:83:b6:7b:b4:ed:7e:5e:
                    66:87:59:6b:74:3b:b0:4a:4f:b1:f4:05:85:1a:fd:
                    c6:8f:91:bd:ee:1b:62:b0:85:45:f7:9f:92:9f:cd:
                    5d:8a:07:e9:ec:0a:d3:03:76:fb:50:d1:41:62:97:
                    dd:b5:8d:5b:b2:e4:49:88:15:46:76:b6:49:64:91:
                    cb:eb:9f:72:98:19:63:9b:f0:a2:22:e4:64:8f:b6:
                    29:08:07:7b:67:6e:8e:f0:41:f3:f6:32:2d:79:d2:
                    f4:de:66:ff:51:ad:1a:c6:26:10:4c:a4:18:8a:cc:
                    e5:51:ae:ac:c3:43:e3:1b:d1:4f:00:54:8e:90:62:
                    3b:c5:68:21:63:7f:82:e0:8f:30:fe:e3:e0:f0:4d:
                    84:c8:73:6e:cd:f4:37:2b:9b:6f:01:97:9f:a8:13:
                    c5:fb:3b:5f:7f:0a:d3:f5:96:b1:cc:e4:95:c6:8c:
                    63:fc:98:92:ad:4f:ff:21:10:72:1d:1f:6e:72:97:
                    73:c9:af:cf:f1:9d:d2:b3:64:72:f2:03:b2:ba:0d:
                    d5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:98:D5:E2:9E:A9:64:C6:FF:73:78:0E:9B:02:61:E9:3E:FD:4B:38
            X509v3 Authority Key Identifier:
                keyid:E2:59:88:67:4F:3C:D2:5A:13:60:D7:FE:95:3A:58:4F:1A:AF:AB:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lmIZ0880loTYNf-lTpYTxqvq8c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:d6:af:12:1b:93:7e:7a:bb:f0:a7:12:88:75:33:f5:b1:70:
         a8:15:9e:48:52:5a:ee:54:de:77:4d:de:a8:cc:cf:7f:74:64:
         f4:7f:95:ae:f1:b9:25:75:b8:84:55:05:da:58:f5:22:ac:1c:
         3f:a8:8a:a6:b0:41:ec:31:06:b3:0f:ad:e4:46:4c:9d:61:83:
         49:f4:41:cf:c0:2e:62:bc:c3:f0:8b:6c:db:de:0c:dd:29:0f:
         3d:cd:69:f9:50:2d:53:37:be:82:63:a2:4c:36:ed:14:9f:9c:
         7f:e5:ee:9b:37:69:50:52:5b:e2:f1:b5:bb:57:74:f5:85:3f:
         a5:2f:1f:fe:e1:bc:5d:1f:6a:4a:78:7b:d2:b1:f2:46:ed:9a:
         97:cd:55:0e:a5:c1:c3:dd:73:83:67:7a:bd:61:f6:73:23:48:
         d0:75:d7:eb:e1:ff:ed:09:1c:ff:f7:0f:08:04:8c:e3:bf:2b:
         bf:25:1b:5d:00:e3:26:02:2c:fb:0e:84:fa:c8:9a:f5:75:79:
         a7:95:60:a2:46:e1:ab:1d:14:5c:a9:37:1c:79:54:8b:45:7b:
         9d:e1:21:f3:ae:11:af:1b:9e:62:b8:b8:a7:f6:db:55:ac:b0:
         0d:37:0c:d1:6a:4d:d0:15:f5:f4:87:64:28:84:05:46:7a:1f:
         71:d9:de:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:37:51 2026 by rpki-client