Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.mft
File:                     LJM3XsY801R8z5PRPhK1urgy_Zw.mft (raw, json)
Hash identifier:          Y91IZY4ucJOj0Dov0wxLM8MqBAp/EUewU40pFovTMhA=
Subject key identifier:   39:A8:13:55:57:B6:35:6E:47:59:07:19:E9:06:15:BE:5C:F9:2B:47
Authority key identifier: 2C:93:37:5E:C6:3C:D3:54:7C:CF:93:D1:3E:12:B5:BA:B8:32:FD:9C
Certificate issuer:       /CN=A91E0C5F/serialNumber=2C93375EC63CD3547CCF93D13E12B5BAB832FD9C
Certificate serial:       100D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJM3XsY801R8z5PRPhK1urgy_Zw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.mft
Manifest number:          176C
Signing time:             Thu 16 Apr 2026 17:22:32 +0000
Manifest this update:     Thu 16 Apr 2026 17:22:32 +0000
Manifest next update:     Thu 23 Apr 2026 17:22:32 +0000
Files and hashes:         1: LJM3XsY801R8z5PRPhK1urgy_Zw.crl (hash: XrQMYRAryXWFLwpSJ7Wa3Iiu9OrKox5WXdUnpeMrtFQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.crl
                          rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJM3XsY801R8z5PRPhK1urgy_Zw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:22:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4109 (0x100d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0C5F, serialNumber=2C93375EC63CD3547CCF93D13E12B5BAB832FD9C
        Validity
            Not Before: Apr 16 17:22:32 2026 GMT
            Not After : Apr 23 17:22:32 2026 GMT
        Subject: CN=69e11ad8-9fa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c3:20:b9:a1:f9:86:ae:7f:55:c7:1b:aa:06:
                    ec:c8:f9:64:f6:60:be:fe:e5:d4:c8:13:54:75:ca:
                    5c:c0:19:bc:9e:b3:18:58:15:8b:a3:30:e2:e2:6a:
                    3f:50:0f:47:11:f6:ba:10:7a:0b:39:35:f3:e1:b4:
                    a7:90:89:ff:a5:42:52:0a:13:5b:8c:e5:f5:9e:21:
                    e4:dc:a7:92:b6:0c:0c:08:62:47:a3:4b:29:64:7d:
                    83:55:6d:f4:b0:c6:79:be:de:0e:9c:b5:b5:ce:bf:
                    38:f2:13:69:0e:e6:f9:8c:b2:f3:51:bd:c1:49:05:
                    28:94:ce:47:19:0c:89:5d:e7:86:eb:ef:51:d8:07:
                    eb:ee:8d:b3:62:88:42:88:98:3e:93:4a:75:85:65:
                    67:2f:7d:7f:35:c0:17:39:0c:c0:89:8b:8e:7b:d9:
                    ac:57:51:bb:7c:7e:ff:36:b4:25:62:1d:aa:bf:c5:
                    58:ae:12:2a:04:72:38:59:21:a2:c7:a3:85:18:1b:
                    83:21:4b:ea:b9:4f:48:2b:82:77:0c:5f:8f:b1:0d:
                    d4:37:54:b7:00:92:27:19:2c:93:fa:15:91:0a:e6:
                    99:c4:f8:cc:41:06:1a:d2:4d:a8:ed:80:00:d1:db:
                    06:fa:8c:a0:2d:51:e0:63:c6:e7:d0:c0:b6:33:23:
                    85:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A8:13:55:57:B6:35:6E:47:59:07:19:E9:06:15:BE:5C:F9:2B:47
            X509v3 Authority Key Identifier:
                keyid:2C:93:37:5E:C6:3C:D3:54:7C:CF:93:D1:3E:12:B5:BA:B8:32:FD:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJM3XsY801R8z5PRPhK1urgy_Zw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:75:f2:2d:8f:11:e7:f7:b3:13:f6:28:73:13:e9:d9:71:e1:
         f9:27:6b:81:ba:df:2c:61:7c:4e:72:1c:d3:59:cb:89:d8:61:
         67:37:a3:e2:5f:30:79:90:79:9b:04:63:d0:02:31:82:a9:26:
         26:ff:03:ff:9e:0d:13:79:08:45:05:c6:e0:ee:b3:4f:b3:53:
         f2:5a:2a:d1:7a:72:66:4f:7b:d1:f8:64:f4:bf:92:6a:53:65:
         72:a8:5c:b7:db:19:02:1a:d5:9a:1f:63:33:aa:1b:a9:f7:44:
         32:48:81:4a:64:32:d6:c7:d7:a3:d0:ab:f2:42:27:ce:c4:70:
         75:07:b0:4d:dd:91:dd:4c:10:0b:ab:84:b6:02:00:ca:e8:c2:
         74:2d:85:13:ae:e2:b9:e8:5b:72:ff:33:65:a7:72:46:ce:73:
         22:e1:92:f2:4d:bc:e4:2a:c4:76:a8:0f:6f:58:b0:e5:b5:30:
         0e:fd:a6:df:a5:7e:ee:1f:ad:08:a1:69:87:8c:60:a4:07:41:
         f8:e6:b2:45:1e:fd:fd:56:71:3b:75:31:b6:29:06:a9:16:7c:
         c0:01:4b:a5:ad:bd:1a:30:ce:04:8e:f6:22:66:c3:44:5a:47:
         8f:45:36:a7:aa:ee:d9:a3:81:70:ce:66:d1:1d:59:12:71:56:
         29:f0:2b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:58:18 2026 by rpki-client