Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.mft
File:                     lKlQswO0aQDdWjBhAwyJpIloA68.mft (raw, json)
Hash identifier:          PvOTcKCj0Ndety89YeGd/I+3+epr0cWESBXhTnVPG1o=
Subject key identifier:   BE:1B:47:8C:4D:5E:CA:F3:6B:22:6A:D9:D9:2B:73:18:E4:D8:8C:75
Authority key identifier: 94:A9:50:B3:03:B4:69:00:DD:5A:30:61:03:0C:89:A4:89:68:03:AF
Certificate issuer:       /CN=A91BAD2D/serialNumber=94A950B303B46900DD5A3061030C89A4896803AF
Certificate serial:       01D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKlQswO0aQDdWjBhAwyJpIloA68.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.mft
Manifest number:          01C5
Signing time:             Wed 29 Jul 2026 05:09:01 +0000
Manifest this update:     Wed 29 Jul 2026 05:09:01 +0000
Manifest next update:     Wed 05 Aug 2026 05:09:01 +0000
Files and hashes:         1: lKlQswO0aQDdWjBhAwyJpIloA68.crl (hash: xb9RDmiC41wIQcWG/NTZA95GAwwnC9x4XjFqIfPldDQ=)
                          2: 10771E5497C211F0A9D40817C4F9AE02.roa (hash: Ih6CUVzbaPRdHejVQvZNcYEMy1tnq4yUXbGOoq+u3g0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.crl
                          rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKlQswO0aQDdWjBhAwyJpIloA68.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 05:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 471 (0x1d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BAD2D, serialNumber=94A950B303B46900DD5A3061030C89A4896803AF
        Validity
            Not Before: Jul 29 05:09:01 2026 GMT
            Not After : Aug  5 05:09:01 2026 GMT
        Subject: CN=6a698aed-af84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d1:73:f8:e0:51:ec:d6:50:40:15:f4:3f:5d:
                    8b:5e:d7:68:87:47:d4:a8:93:29:45:65:0f:48:ad:
                    cf:cf:c3:89:30:a7:83:fd:fd:df:1e:ef:8c:3d:49:
                    0b:58:af:3f:1e:eb:2f:e8:c2:62:73:95:96:f2:1d:
                    48:c5:90:72:73:ac:6f:8b:77:ef:f1:a3:10:ac:76:
                    8a:11:33:b1:cd:cb:a7:2a:83:4f:ef:be:ca:34:de:
                    5b:52:c3:80:db:62:c3:4b:cb:34:53:ae:ca:ac:f1:
                    ab:bb:c6:86:47:0a:d7:95:92:58:26:33:4d:7b:f6:
                    a8:e4:f9:ad:bb:b4:67:b5:76:57:0b:01:c0:6b:2b:
                    20:80:25:b0:96:17:d4:01:ae:19:f9:b1:c2:f3:5b:
                    55:de:c9:da:62:96:11:f0:8e:05:2d:94:d9:d7:c2:
                    c5:39:1e:78:3a:cf:2f:46:17:0a:b0:a7:c5:e8:b8:
                    ee:37:ba:aa:d4:25:f0:96:c5:7e:44:6f:27:ec:f4:
                    02:06:e4:ac:74:bd:ce:fe:78:df:94:1f:5f:ba:6c:
                    0c:56:a1:76:85:81:8a:6b:2f:90:01:a4:d0:77:02:
                    5e:e3:e9:7a:23:f6:45:60:06:3c:4c:88:ab:d4:d2:
                    4c:01:08:a5:ca:7f:aa:48:f1:6b:88:70:41:e5:4e:
                    84:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:1B:47:8C:4D:5E:CA:F3:6B:22:6A:D9:D9:2B:73:18:E4:D8:8C:75
            X509v3 Authority Key Identifier:
                keyid:94:A9:50:B3:03:B4:69:00:DD:5A:30:61:03:0C:89:A4:89:68:03:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKlQswO0aQDdWjBhAwyJpIloA68.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:9a:06:d6:5a:f6:52:86:ae:53:20:98:39:f1:1e:02:69:e5:
         ba:8c:e4:50:dd:e2:ec:18:d5:cb:12:8f:17:64:cf:be:47:96:
         cb:9e:15:e1:fa:c6:cc:89:be:f8:7c:00:aa:73:04:60:cd:1a:
         07:3c:50:22:c0:fa:bf:a9:42:34:ff:c5:5a:60:62:00:67:c1:
         5f:c1:4a:f2:cc:e0:d9:fb:82:ab:5f:30:f2:97:06:e0:03:8b:
         cf:39:e1:fa:c8:ee:a3:a9:5a:3e:f1:43:56:ca:0d:25:38:53:
         92:15:f7:82:62:10:5a:26:f7:71:28:d6:d6:d1:ca:ec:2f:8e:
         27:f5:9f:10:ec:ea:8e:63:32:61:90:82:96:6a:aa:a2:59:76:
         1d:0a:9c:67:ad:a9:6a:34:ea:3d:70:40:e6:9e:85:16:55:5e:
         44:db:13:17:40:2b:4f:ed:78:37:c3:c2:cd:43:7a:4b:9b:31:
         84:1d:dd:47:67:89:28:12:69:80:f0:93:5b:2c:32:4e:13:42:
         eb:9b:d4:fb:c2:bf:61:40:4a:f8:9c:c7:ea:fb:61:e1:d8:31:
         6a:24:42:59:37:13:25:0f:c0:35:67:83:e8:3a:3c:7b:8d:97:
         47:6a:ee:11:a8:6f:b0:10:c8:06:54:5f:b4:08:b9:0e:3c:0a:
         8a:05:59:5d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkFEMkQxMTAvBgNVBAUTKDk0QTk1MEIzMDNCNDY5MDBERDVBMzA2MTAzMEM4OUE0
ODk2ODAzQUYwHhcNMjYwNzI5MDUwOTAxWhcNMjYwODA1MDUwOTAxWjAYMRYwFAYD
VQQDEw02YTY5OGFlZC1hZjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx9Fz+OBR7NZQQBX0P12LXtdoh0fUqJMpRWUPSK3Pz8OJMKeD/f3fHu+MPUkL
WK8/Husv6MJic5WW8h1IxZByc6xvi3fv8aMQrHaKETOxzcunKoNP777KNN5bUsOA
22LDS8s0U67KrPGru8aGRwrXlZJYJjNNe/ao5Pmtu7RntXZXCwHAaysggCWwlhfU
Aa4Z+bHC81tV3snaYpYR8I4FLZTZ18LFOR54Os8vRhcKsKfF6LjuN7qq1CXwlsV+
RG8n7PQCBuSsdL3O/njflB9fumwMVqF2hYGKay+QAaTQdwJe4+l6I/ZFYAY8TIir
1NJMAQilyn+qSPFriHBB5U6EPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL4bR4xN
XsrzayJq2dkrcxjk2Ix1MB8GA1UdIwQYMBaAFJSpULMDtGkA3VowYQMMiaSJaAOv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUQyRC85MDg4RUU1QUU4
MDExMUVFQUQ2QzUwMzBDNEY5QUUwMi9sS2xRc3dPMGFRRGRXakJoQXd5SnBJbG9B
NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xLbFFzd08wYVFEZFdqQmhBd3lKcElsb0E2OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QUQyRC85MDg4RUU1QUU4MDExMUVFQUQ2QzUwMzBDNEY5QUUwMi9sS2xRc3dPMGFR
RGRXakJoQXd5SnBJbG9BNjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUpoG1lr2UoauUyCYOfEeAmnluozkUN3i7BjVyxKPF2TPvkeWy54V4frGzIm+
+HwAqnMEYM0aBzxQIsD6v6lCNP/FWmBiAGfBX8FK8szg2fuCq18w8pcG4AOLzznh
+sjuo6laPvFDVsoNJThTkhX3gmIQWib3cSjW1tHK7C+OJ/WfEOzqjmMyYZCClmqq
oll2HQqcZ62pajTqPXBA5p6FFlVeRNsTF0ArT+14N8PCzUN6S5sxhB3dR2eJKBJp
gPCTWywyThNC65vU+8K/YUBK+JzH6vth4dgxaiRCWTcTJQ/ANWeD6Do8e42XR2ru
EahvsBDIBlRftAi5DjwKigVZXQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:43:31 2026 by rpki-client