Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft
File:                     lQfxHRNjrFs5Lzb17zgixc_NaPk.mft (raw, json)
Hash identifier:          2dtHFbJo53jZruYbdd+tvhiFpneokQ0j5NldIz4RMSc=
Subject key identifier:   04:F5:F2:7A:58:70:F1:D8:31:0F:8D:7C:33:CD:DA:84:B3:DD:92:67
Authority key identifier: 95:07:F1:1D:13:63:AC:5B:39:2F:36:F5:EF:38:22:C5:CF:CD:68:F9
Certificate issuer:       /CN=A91EE8AC/serialNumber=9507F11D1363AC5B392F36F5EF3822C5CFCD68F9
Certificate serial:       0278
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQfxHRNjrFs5Lzb17zgixc_NaPk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft
Manifest number:          03FB
Signing time:             Fri 17 Apr 2026 01:48:01 +0000
Manifest this update:     Fri 17 Apr 2026 01:48:00 +0000
Manifest next update:     Fri 24 Apr 2026 01:48:00 +0000
Files and hashes:         1: lQfxHRNjrFs5Lzb17zgixc_NaPk.crl (hash: W/NK4kBJ2IuNTpWGSzyMRn+LDEU2SffrqlMUmMmIZBc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.crl
                          rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQfxHRNjrFs5Lzb17zgixc_NaPk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:47:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 632 (0x278)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE8AC, serialNumber=9507F11D1363AC5B392F36F5EF3822C5CFCD68F9
        Validity
            Not Before: Apr 17 01:48:00 2026 GMT
            Not After : Apr 24 01:48:00 2026 GMT
        Subject: CN=69e19150-0896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0a:c5:26:8a:75:c0:38:5c:4b:07:98:e8:55:
                    9f:b5:ba:c4:a1:b5:bd:b0:01:e2:8a:d5:b4:f8:eb:
                    f1:d6:49:a4:17:61:16:14:d4:e4:87:1e:71:8e:82:
                    4c:78:1b:e3:e2:9d:81:8c:a6:40:e2:15:d3:a7:8c:
                    5a:08:41:df:04:14:e9:d5:96:0a:45:be:fa:fe:f2:
                    50:99:8a:4e:23:35:68:ec:af:8e:48:cf:42:00:57:
                    7d:5b:f7:55:04:21:72:fb:4c:f5:3a:ae:57:35:ac:
                    85:18:6b:88:0a:f1:c2:0f:97:36:f3:e8:28:8d:57:
                    97:76:4c:a5:8c:b2:ff:ed:0c:cb:cb:be:1d:91:54:
                    d1:47:4e:c7:2d:1f:94:db:37:f0:e5:e8:6d:d7:0f:
                    3b:75:23:cd:1b:46:15:25:bf:35:c5:84:21:14:b0:
                    52:f5:62:bd:f2:2a:04:a5:81:64:5c:22:f5:f9:28:
                    ab:39:d0:9b:7c:5b:59:57:da:9f:3d:74:30:47:f7:
                    e6:66:4d:b1:e7:be:84:89:4f:07:50:00:03:f5:cc:
                    a0:f6:df:9e:44:98:91:c3:82:cc:29:d0:5e:ab:cc:
                    ea:6c:99:09:92:16:68:f0:f4:3a:0b:ed:8f:4d:7e:
                    1e:b0:42:5b:8f:18:45:a0:e8:17:53:1f:6c:69:e7:
                    a4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F5:F2:7A:58:70:F1:D8:31:0F:8D:7C:33:CD:DA:84:B3:DD:92:67
            X509v3 Authority Key Identifier:
                keyid:95:07:F1:1D:13:63:AC:5B:39:2F:36:F5:EF:38:22:C5:CF:CD:68:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQfxHRNjrFs5Lzb17zgixc_NaPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:1c:ea:d0:29:6f:87:5e:f0:6a:e8:d1:7a:58:70:16:72:eb:
         d4:59:3b:02:21:6a:2c:c4:48:d1:91:71:19:d5:75:7e:e9:de:
         0e:59:b0:82:5a:2a:e8:39:df:d0:80:e2:f2:29:93:d9:c8:6b:
         25:81:21:e3:ff:e5:63:9d:db:45:03:38:15:de:42:d7:9d:89:
         6e:8d:cd:de:42:43:57:dc:7f:0f:2b:b9:fb:db:99:f4:5b:f2:
         01:ae:32:0e:d2:8f:78:f2:26:c1:fb:e0:d5:d6:32:c9:72:e4:
         8d:a8:71:10:12:d1:ca:5e:77:62:a2:ed:5e:23:f2:8f:11:71:
         cd:d0:9a:9e:3e:6d:46:f2:75:fc:be:ba:26:21:99:4f:74:8a:
         33:a9:cd:05:0c:92:86:63:31:40:86:01:48:c7:ca:15:ed:c9:
         7c:10:10:1e:9c:0c:80:2c:29:ce:95:d0:b2:b4:83:3c:dd:b1:
         a4:5f:d3:ca:2c:58:3b:38:2f:20:1f:e4:e1:cc:19:75:43:a6:
         5f:5d:ab:87:a6:43:5e:6b:00:d6:d9:f7:d4:5d:77:3d:e7:e9:
         c0:01:f4:40:9d:f9:87:eb:13:ea:e0:b4:55:36:55:a8:30:73:
         f4:86:e9:7d:dd:f7:b0:a4:ae:81:b7:c2:58:71:49:77:cb:95:
         3a:a7:6f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:17:59 2026 by rpki-client