Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft
File:                     lFlKrsbtZqaAoVv-tc2leC1MLYg.mft (raw, json)
Hash identifier:          PLLg4JVgy1pYsvEpVzOprc7JpyrwEEAT2XqBXIaq8sw=
Subject key identifier:   B4:CD:01:57:2F:B3:61:16:16:25:0F:06:26:F5:EE:83:B1:88:7F:FE
Authority key identifier: 94:59:4A:AE:C6:ED:66:A6:80:A1:5B:FE:B5:CD:A5:78:2D:4C:2D:88
Certificate issuer:       /CN=A91E2EF9/serialNumber=94594AAEC6ED66A680A15BFEB5CDA5782D4C2D88
Certificate serial:       016A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft
Manifest number:          015C
Signing time:             Sat 13 Jun 2026 05:05:46 +0000
Manifest this update:     Sat 13 Jun 2026 05:05:46 +0000
Manifest next update:     Sat 20 Jun 2026 05:05:46 +0000
Files and hashes:         1: lFlKrsbtZqaAoVv-tc2leC1MLYg.crl (hash: szAGTnXwANwWvwlKigLIlfjYKOfUXwYxX1NoPi87y2A=)
                          2: D926DBDA605211EF90C2C621C4F9AE02.roa (hash: jUaYUA+q8jmfLhomac7iMQOSZ4bFSAIAI1vEmJtWXwE=)
                          3: E7C7DBF8A0E411EF98A7340EC4F9AE02.roa (hash: kjJfld5TN3m5ZabsgjU4rPFFeonEnHjU7OWPFlkhgEU=)
                          4: 5D3D752CDBEB11F0A1AC385A536F56BC.roa (hash: d4S5QC9WpRroo4q9uH7u+G1i3yLbKbKg652rT+oJ1eM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.crl
                          rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 05:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 362 (0x16a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2EF9, serialNumber=94594AAEC6ED66A680A15BFEB5CDA5782D4C2D88
        Validity
            Not Before: Jun 13 05:05:46 2026 GMT
            Not After : Jun 20 05:05:46 2026 GMT
        Subject: CN=6a2ce52a-247c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:12:ea:c0:87:67:2a:bd:12:83:26:8f:ed:a1:
                    8c:f0:6e:30:f6:28:84:18:66:f6:80:39:50:8b:6a:
                    a9:37:2e:7b:09:88:8b:8d:7e:be:46:7d:2c:78:60:
                    b9:24:be:05:9b:68:c4:d8:8f:08:a8:cf:4c:25:27:
                    12:69:b4:df:00:26:88:e0:0e:3f:a1:c8:7a:af:6e:
                    11:d9:63:37:37:f9:29:ee:6f:2b:9d:3b:d5:6e:f7:
                    01:55:57:0a:f0:53:d0:d4:76:93:2f:dc:8f:8a:c4:
                    2d:4b:8b:6d:4f:50:cd:81:8a:2c:af:b7:58:23:59:
                    3c:03:0a:b5:cf:3f:15:0a:1d:2c:50:3b:d0:40:e1:
                    5a:33:98:f7:d7:10:e4:e6:8c:66:6c:d6:1d:69:40:
                    98:c7:cf:30:9c:4e:01:30:b6:95:72:d5:80:97:17:
                    81:7c:07:1d:3d:dd:2b:98:66:60:ff:17:23:cb:27:
                    ee:d4:83:52:d3:2a:95:e7:4e:71:b4:c9:13:4b:0c:
                    ae:97:9e:f5:1d:83:3b:23:2d:47:59:99:8e:4f:8b:
                    c9:11:29:e7:b4:24:8d:db:7f:58:3e:3a:0b:0d:ab:
                    76:7e:49:78:00:aa:4a:d8:cc:6c:a6:3c:4b:98:80:
                    65:87:9a:a1:6f:88:d8:c7:e9:34:4a:47:8e:74:09:
                    58:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:CD:01:57:2F:B3:61:16:16:25:0F:06:26:F5:EE:83:B1:88:7F:FE
            X509v3 Authority Key Identifier:
                keyid:94:59:4A:AE:C6:ED:66:A6:80:A1:5B:FE:B5:CD:A5:78:2D:4C:2D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:94:5c:41:44:25:53:a9:27:0b:32:9e:c5:a4:55:06:71:80:
         2d:7e:fb:80:75:d6:69:36:27:9e:78:18:dc:70:38:a3:d3:cc:
         67:e2:ba:0d:74:6d:ca:bd:5d:dc:82:b3:9f:5f:42:b2:ec:d2:
         6a:1c:1c:ea:69:4f:67:54:d1:1e:9b:59:cf:06:3d:57:4b:4f:
         ef:66:9c:4b:da:bf:98:fc:bb:15:67:24:9f:71:9b:3a:1b:75:
         12:af:84:33:39:7e:fc:d4:fa:cf:61:ec:55:a5:6e:4e:0a:39:
         08:89:06:07:bf:7e:83:92:47:f9:32:b3:c7:1e:78:ac:ab:41:
         f4:50:a2:84:23:a9:1d:63:71:31:b2:ce:7a:89:eb:d9:34:ee:
         bd:0e:05:c1:97:ab:49:cc:fa:3d:bf:67:df:75:6f:c7:48:8f:
         e9:0b:f1:73:c1:9d:95:0b:0b:3a:ff:1d:c3:45:7b:cf:7b:9e:
         09:4b:06:34:64:e1:4b:17:25:1b:97:06:4b:d0:b2:ef:d0:fc:
         72:26:0f:0f:6d:b2:14:c3:b0:05:ea:68:4f:98:12:c4:be:69:
         2f:a3:42:5e:a3:70:bb:48:a3:b1:ba:b1:33:09:88:5b:a2:fb:
         6f:0c:4f:04:3f:e3:8f:10:4a:40:50:8d:80:66:80:08:43:17:
         28:60:b3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:18:08 2026 by rpki-client