Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
File:                     lMjvPyqSLuFEqm8LZkNspGbMSwo.mft (raw, json)
Hash identifier:          OXFOd6QgTHWKIjuoZjZuMmm/owkMze96Qlr9y8cvsFo=
Subject key identifier:   83:8D:61:1E:58:1E:FA:EB:17:C2:84:5D:CA:EF:B6:52:01:8F:3E:DE
Authority key identifier: 94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A
Certificate issuer:       /CN=A91F37AB/serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A
Certificate serial:       0102
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
Manifest number:          EF
Signing time:             Mon 27 Jul 2026 08:31:09 +0000
Manifest this update:     Mon 27 Jul 2026 08:31:09 +0000
Manifest next update:     Mon 03 Aug 2026 08:31:09 +0000
Files and hashes:         1: lMjvPyqSLuFEqm8LZkNspGbMSwo.crl (hash: VnyXuQm4Pd+lMRa3KwvJF6FTNP6ZvW8zYO6L0YABqiY=)
                          2: 3C2E004221F411F0848CDE7EC4F9AE02.roa (hash: 5NNtAQyFropb/Z6y0svtRqsWdy6ThB8osPzJl9uYO4k=)
                          3: 3B5A1BBA21F411F0848CDE7EC4F9AE02.roa (hash: uwAj/+Du5C1qEvZtOUqf44R0VMo9+4/mthpipOHyiGw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl
                          rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:31:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F37AB, serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A
        Validity
            Not Before: Jul 27 08:31:09 2026 GMT
            Not After : Aug  3 08:31:09 2026 GMT
        Subject: CN=6a67174d-3a4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b1:a6:de:6e:09:24:35:67:e8:55:e1:82:29:
                    e8:33:ca:e4:71:eb:21:e4:5f:79:96:ce:94:22:79:
                    e8:49:65:98:f6:32:d4:db:05:df:67:82:c4:36:3e:
                    b5:cc:09:a3:12:d8:6f:0a:2b:26:9b:64:5f:04:f6:
                    42:77:4c:bc:81:cd:75:f8:f4:71:f3:08:2d:da:9a:
                    0e:eb:af:f9:92:0c:fc:40:3a:07:1a:5a:66:4e:08:
                    40:44:f2:be:c2:dd:96:89:72:79:3e:97:f1:c7:38:
                    83:f7:93:af:91:17:d3:8a:02:88:78:2a:57:8c:61:
                    e4:bc:71:bc:37:3b:fd:72:c5:4a:3b:5f:ee:ed:b7:
                    2e:d8:51:6e:b2:da:6a:ed:88:b4:21:4a:65:40:37:
                    1e:43:53:f5:17:3f:3e:fb:1e:32:93:74:bc:f7:e9:
                    6d:c6:1f:30:05:e8:51:4b:4f:c1:ed:2e:5a:86:98:
                    18:04:4b:75:6d:38:44:5b:98:d6:b8:ad:f6:19:ce:
                    50:d4:f6:e3:19:84:bb:e4:28:8b:42:9f:cf:db:7a:
                    fe:7f:2d:d9:6d:d3:24:36:a4:87:a3:0f:a8:07:e6:
                    62:41:5b:39:7d:90:5d:f4:d6:a5:98:40:b9:e3:8f:
                    4e:ae:7f:c1:85:29:52:2b:50:f8:f3:c4:7e:1e:de:
                    46:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:8D:61:1E:58:1E:FA:EB:17:C2:84:5D:CA:EF:B6:52:01:8F:3E:DE
            X509v3 Authority Key Identifier:
                keyid:94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:42:86:83:ed:b5:ab:a9:cf:d8:e4:ab:f1:da:70:69:f6:70:
         d6:2f:30:de:45:2e:7d:0c:93:1e:a0:78:b0:d4:c5:00:b6:26:
         82:89:13:8b:ba:2e:53:17:4d:5f:34:ff:c8:d2:e1:86:f4:0b:
         93:dd:c0:31:04:e4:e4:0d:24:25:0c:95:50:e0:ab:15:11:a2:
         8e:23:2c:1c:02:b2:0e:4a:78:38:f1:9e:66:e5:cb:77:c9:82:
         95:ed:bb:39:ef:03:5b:1c:76:a6:87:0a:dd:8d:7f:50:dc:f5:
         fc:5f:12:af:6b:9e:8d:3d:65:75:9f:82:49:a3:a8:5a:90:8c:
         07:44:db:50:eb:b7:c3:8e:b1:04:96:98:99:40:0c:04:85:92:
         eb:57:ec:f9:66:0e:79:4f:2b:40:6e:e1:a4:9a:14:da:d4:bd:
         84:e7:70:e5:61:bc:f9:7c:d8:3f:80:27:a7:9e:44:d9:a3:78:
         3a:9d:d6:98:6a:52:47:6e:fe:92:93:55:7c:6e:24:02:18:23:
         f0:cd:a6:46:94:fe:1e:d1:6d:37:70:97:bf:dc:33:a5:09:83:
         1a:bd:26:68:48:29:2c:0c:9c:48:6b:5a:49:6b:f5:04:55:12:
         18:ee:56:56:b0:4e:87:54:0e:3b:36:72:59:72:36:4f:af:87:
         22:21:82:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:37:40 2026 by rpki-client