Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft
File:                     LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft (raw, json)
Hash identifier:          vtRHII/ivRUI3CZCyyZckKXK3FKM4FcQevqdItddYj4=
Subject key identifier:   42:63:D9:09:C1:76:9A:A2:7A:2F:0F:17:89:8C:A0:47:1C:FF:BA:4F
Authority key identifier: 2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C
Certificate issuer:       /CN=A91D0B40/serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C
Certificate serial:       0177
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft
Manifest number:          016F
Signing time:             Sat 13 Jun 2026 04:45:09 +0000
Manifest this update:     Sat 13 Jun 2026 04:45:08 +0000
Manifest next update:     Sat 20 Jun 2026 04:45:08 +0000
Files and hashes:         1: LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl (hash: Y5W9Ut2Fh89r7eFJhTBJ1z6YoeJiGDKRnvhjWvPqfgY=)
                          2: F8CD5EAA4CB511F0B121AE45C4F9AE02.roa (hash: zAdUeLORZiO4f/KSBL4alxYSI+DmbONmLsqQbgHi324=)
                          3: F9C8081E4CB511F0B121AE45C4F9AE02.roa (hash: PtbtJlcJRwUkYVZTTdhAVrVCAYKXUtPXtxl26TpZjBg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl
                          rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 04:45:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 375 (0x177)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0B40, serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C
        Validity
            Not Before: Jun 13 04:45:08 2026 GMT
            Not After : Jun 20 04:45:08 2026 GMT
        Subject: CN=6a2ce055-7da6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b0:39:54:3e:ff:55:6d:f5:dd:48:d3:29:d1:
                    ae:38:08:c0:8a:d5:8b:e1:66:9d:6a:3f:24:cb:0b:
                    c6:b3:63:1d:a2:7c:a4:bb:53:ec:37:97:17:2d:9b:
                    f4:a3:69:67:34:f3:5f:ab:ea:1c:e5:f7:9b:1d:76:
                    44:07:74:65:01:35:f4:83:8f:6a:0d:93:6e:94:1d:
                    0a:3e:f4:a5:35:86:75:00:cb:99:e0:a4:01:80:d0:
                    ec:07:9d:e9:31:4e:0e:c7:77:ad:71:8c:fd:75:f5:
                    a4:67:8d:55:a9:0c:db:1f:0c:8a:b2:26:f9:f6:be:
                    df:80:78:03:05:7f:30:b6:bf:09:58:75:e1:bb:bf:
                    38:44:4a:c1:d4:b8:b2:cc:2c:0a:8a:22:2f:88:34:
                    ba:70:5f:05:c2:f4:2b:43:85:9d:fc:98:04:80:2b:
                    61:6d:bc:24:be:60:79:29:e0:f5:75:b2:06:84:80:
                    4a:8d:0e:58:e4:0b:ec:90:ce:d6:28:54:51:f1:0f:
                    18:6b:8f:5d:f2:2e:c9:4c:9a:2d:15:37:ce:c7:02:
                    06:7b:71:99:21:e1:67:80:c3:e7:66:c5:90:1c:f4:
                    3e:2d:76:60:b9:19:7b:59:bf:ec:93:8a:34:bc:e1:
                    e3:af:0f:cc:ca:63:ef:fe:c1:df:81:5e:87:21:0b:
                    d0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:63:D9:09:C1:76:9A:A2:7A:2F:0F:17:89:8C:A0:47:1C:FF:BA:4F
            X509v3 Authority Key Identifier:
                keyid:2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:e2:3c:27:70:71:85:98:74:3b:e6:40:c5:bc:9c:3c:ca:e0:
         ec:0f:61:8c:00:cd:95:ba:10:00:5b:9e:4e:2d:16:1b:ea:f2:
         fb:3d:80:80:2d:b9:71:b9:2b:a6:bd:51:ce:b1:a9:9c:61:f6:
         a7:b1:00:45:4d:2f:41:12:2e:b1:fc:b3:1b:50:65:6c:6d:f4:
         39:03:d5:59:2d:83:33:c5:08:25:af:7e:5b:6b:4d:6a:84:32:
         b6:a0:99:76:7f:fd:21:19:98:9c:31:bf:90:7d:7b:e7:6c:ff:
         19:f0:c7:01:7d:08:dc:64:e3:2a:37:46:11:46:c9:ac:65:de:
         a3:a7:c7:94:64:66:16:47:fe:c0:58:11:da:ea:5d:6e:d6:43:
         a0:02:ab:32:e5:e4:47:dc:5c:48:cc:9e:4a:9e:e4:33:f6:fc:
         9e:d1:53:69:49:ce:d5:83:9a:97:a7:7a:39:b8:b9:bf:17:eb:
         87:a2:b4:1b:36:3a:20:a0:de:bf:f5:dd:27:fe:f6:a2:d0:33:
         9c:3e:5f:bd:d8:51:9a:4f:ff:32:ca:3e:1c:9f:31:95:f5:6f:
         fe:fa:a9:78:1a:4f:3d:1b:32:d8:ae:91:64:5c:92:66:1b:2a:
         13:2c:42:a1:88:54:7e:b9:ba:df:6e:c2:d2:11:a5:b7:d4:16:
         d2:df:bb:4e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDBCNDAxMTAvBgNVBAUTKDJENzQ4NEExN0Y0RTlFNjk0MTAwNTFFRjUzQjdCRTcx
OTM3RjlGOUMwHhcNMjYwNjEzMDQ0NTA4WhcNMjYwNjIwMDQ0NTA4WjAYMRYwFAYD
VQQDEw02YTJjZTA1NS03ZGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsLA5VD7/VW313UjTKdGuOAjAitWL4Wadaj8kywvGs2Mdonyku1PsN5cXLZv0
o2lnNPNfq+oc5febHXZEB3RlATX0g49qDZNulB0KPvSlNYZ1AMuZ4KQBgNDsB53p
MU4Ox3etcYz9dfWkZ41VqQzbHwyKsib59r7fgHgDBX8wtr8JWHXhu784RErB1Liy
zCwKiiIviDS6cF8FwvQrQ4Wd/JgEgCthbbwkvmB5KeD1dbIGhIBKjQ5Y5AvskM7W
KFRR8Q8Ya49d8i7JTJotFTfOxwIGe3GZIeFngMPnZsWQHPQ+LXZguRl7Wb/sk4o0
vOHjrw/MymPv/sHfgV6HIQvQ0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEJj2QnB
dpqiei8PF4mMoEcc/7pPMB8GA1UdIwQYMBaAFC10hKF/Tp5pQQBR71O3vnGTf5+c
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEI0MC8xRkEwMjI1MDM4
RTAxMUVGOTRCODREN0ZDNEY5QUUwMi9MWFNFb1g5T25tbEJBRkh2VTdlLWNaTl9u
NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0xYU0VvWDlPbm1sQkFGSHZVN2UtY1pOX241dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MEI0MC8xRkEwMjI1MDM4RTAxMUVGOTRCODREN0ZDNEY5QUUwMi9MWFNFb1g5T25t
bEJBRkh2VTdlLWNaTl9uNXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANeI8J3BxhZh0O+ZAxbycPMrg7A9hjADNlboQAFueTi0WG+ry+z2AgC25cbkr
pr1RzrGpnGH2p7EARU0vQRIusfyzG1BlbG30OQPVWS2DM8UIJa9+W2tNaoQytqCZ
dn/9IRmYnDG/kH1752z/GfDHAX0I3GTjKjdGEUbJrGXeo6fHlGRmFkf+wFgR2upd
btZDoAKrMuXkR9xcSMyeSp7kM/b8ntFTaUnO1YOal6d6Obi5vxfrh6K0GzY6IKDe
v/XdJ/72otAznD5fvdhRmk//Mso+HJ8xlfVv/vqpeBpPPRsy2K6RZFySZhsqEyxC
oYhUfrm6327C0hGlt9QW0t+7Tg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:09:22 2026 by rpki-client