Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft
File:                     L-bMC5qdlV4-LFnV2fjukZcYAG8.mft (raw, json)
Hash identifier:          3G6v1Bf535y1w4Vd/BJWWbWiHctx1K/Umj530BJGepM=
Subject key identifier:   A9:C7:27:3D:8D:2B:9A:9D:7E:05:8A:28:BC:E1:5B:88:25:07:E3:1A
Authority key identifier: 2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F
Certificate issuer:       /CN=A91FAC84/serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F
Certificate serial:       022E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft
Manifest number:          0222
Signing time:             Sat 13 Jun 2026 02:49:00 +0000
Manifest this update:     Sat 13 Jun 2026 02:49:00 +0000
Manifest next update:     Sat 20 Jun 2026 02:49:00 +0000
Files and hashes:         1: L-bMC5qdlV4-LFnV2fjukZcYAG8.crl (hash: R63xT1TxyTTyF24yOEnSyZsKaETsznvdnVO6o22bGSc=)
                          2: 9E0E36BC687011EFB37CF04DC4F9AE02.roa (hash: R8Xz4AKde3EwsZ0bzyfq8h/88WRmzgM83oD7fGiwBo4=)
                          3: C4CA725C687011EFA523204EC4F9AE02.roa (hash: /6gHyezYVVDm5jshkHJrGHxxNK6YvRh1Udvso6+2LXQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl
                          rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:48:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 558 (0x22e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FAC84, serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F
        Validity
            Not Before: Jun 13 02:49:00 2026 GMT
            Not After : Jun 20 02:49:00 2026 GMT
        Subject: CN=6a2cc51c-702f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8d:d2:be:c0:b1:d7:38:5e:0a:66:b6:bd:9d:
                    49:7d:3e:d5:1c:9d:05:52:32:ee:47:91:71:af:d5:
                    32:9e:28:82:ed:c4:65:0c:f4:8f:ee:f7:f3:c5:a3:
                    b4:27:f2:39:28:33:4a:9c:02:31:70:8c:f0:1c:e3:
                    8d:a7:04:0b:63:29:b1:60:3c:c8:c7:c4:df:7a:3c:
                    61:06:6f:fb:a8:4e:7d:1b:c7:9f:63:70:db:da:9f:
                    98:77:ac:66:a7:c0:33:06:30:7c:a5:49:8e:4d:00:
                    3b:e2:64:44:2d:5d:aa:c0:79:55:b1:43:dd:9d:ff:
                    ea:06:80:f3:79:4b:62:a7:12:5e:c9:ee:10:a5:ca:
                    ec:0d:0e:a3:f7:73:b0:20:88:5d:75:3b:e5:e3:c7:
                    64:c3:85:67:4e:e7:69:f0:f3:84:c4:f9:19:9a:d4:
                    3b:e2:82:8f:e6:44:8e:91:37:b0:c1:e5:34:31:27:
                    10:bc:bf:87:d6:c6:ef:51:ee:2d:ad:05:37:dd:86:
                    50:e6:35:f1:4f:71:05:12:f6:a0:15:89:6f:1e:c2:
                    28:76:02:46:6d:ed:1b:7b:26:2b:b0:11:f8:4f:2f:
                    78:90:3c:1b:2c:1c:e5:16:44:56:c5:ad:1f:c2:76:
                    e3:ab:42:4e:51:3f:44:2f:18:41:5a:58:88:d6:99:
                    eb:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C7:27:3D:8D:2B:9A:9D:7E:05:8A:28:BC:E1:5B:88:25:07:E3:1A
            X509v3 Authority Key Identifier:
                keyid:2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:45:2d:d6:02:82:32:bf:7f:7f:e1:ec:3e:83:61:12:42:78:
         13:9e:6f:97:90:59:de:55:de:9f:09:8e:68:26:6a:a9:05:04:
         46:70:d4:6d:cf:02:f1:51:b0:01:18:ad:80:15:e2:d0:e6:cd:
         3d:91:90:d7:97:c8:f9:79:c7:8c:2b:af:29:63:3d:99:91:2e:
         98:fe:ae:c8:41:bb:d8:49:a2:84:3e:11:5c:06:af:9f:df:49:
         7b:f1:6e:e8:1c:03:fb:e1:a4:6b:c7:42:ee:7f:73:b2:0b:ac:
         c7:6f:f5:d7:66:86:30:65:34:f9:c7:7d:d2:e5:61:86:82:c5:
         1d:e0:7c:de:27:40:a9:58:bf:e8:c1:f9:14:c9:1b:7a:d6:2f:
         f4:f9:90:87:9a:95:0e:0a:82:c5:31:a7:c0:f4:4b:d7:60:3b:
         b3:f8:4e:28:31:ef:3b:5e:bd:2d:e1:10:6b:84:5c:96:c7:7e:
         e9:b1:82:a6:30:7a:b6:99:e5:26:6f:2f:79:35:99:5b:e8:cf:
         77:37:f6:ba:8b:da:d7:56:7c:43:47:3f:1d:5a:31:ad:d2:40:
         1d:84:75:a8:12:36:96:7e:13:3a:c3:60:bd:f7:82:4e:28:d1:
         48:2c:e4:c1:f0:2d:8a:35:b2:4d:06:71:2a:df:12:80:b2:43:
         23:3b:8d:f4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkFDODQxMTAvBgNVBAUTKDJGRTZDQzBCOUE5RDk1NUUzRTJDNTlENUQ5RjhFRTkx
OTcxODAwNkYwHhcNMjYwNjEzMDI0OTAwWhcNMjYwNjIwMDI0OTAwWjAYMRYwFAYD
VQQDEw02YTJjYzUxYy03MDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoI3SvsCx1zheCma2vZ1JfT7VHJ0FUjLuR5Fxr9UyniiC7cRlDPSP7vfzxaO0
J/I5KDNKnAIxcIzwHOONpwQLYymxYDzIx8TfejxhBm/7qE59G8efY3Db2p+Yd6xm
p8AzBjB8pUmOTQA74mRELV2qwHlVsUPdnf/qBoDzeUtipxJeye4QpcrsDQ6j93Ow
IIhddTvl48dkw4VnTudp8POExPkZmtQ74oKP5kSOkTewweU0MScQvL+H1sbvUe4t
rQU33YZQ5jXxT3EFEvagFYlvHsIodgJGbe0beyYrsBH4Ty94kDwbLBzlFkRWxa0f
wnbjq0JOUT9ELxhBWliI1pnrawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKnHJz2N
K5qdfgWKKLzhW4glB+MaMB8GA1UdIwQYMBaAFC/mzAuanZVePixZ1dn47pGXGABv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUM4NC9ERDVDOUVCQzJC
ODYxMUVFQTY5RjRCMTdDNEY5QUUwMi9MLWJNQzVxZGxWNC1MRm5WMmZqdWtaY1lB
RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0wtYk1DNXFkbFY0LUxGblYyZmp1a1pjWUFHOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QUM4NC9ERDVDOUVCQzJCODYxMUVFQTY5RjRCMTdDNEY5QUUwMi9MLWJNQzVxZGxW
NC1MRm5WMmZqdWtaY1lBRzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGEUt1gKCMr9/f+HsPoNhEkJ4E55vl5BZ3lXenwmOaCZqqQUERnDUbc8C8VGw
ARitgBXi0ObNPZGQ15fI+XnHjCuvKWM9mZEumP6uyEG72EmihD4RXAavn99Je/Fu
6BwD++Gka8dC7n9zsgusx2/112aGMGU0+cd90uVhhoLFHeB83idAqVi/6MH5FMkb
etYv9PmQh5qVDgqCxTGnwPRL12A7s/hOKDHvO169LeEQa4Rclsd+6bGCpjB6tpnl
Jm8veTWZW+jPdzf2uova11Z8Q0c/HVoxrdJAHYR1qBI2ln4TOsNgvfeCTijRSCzk
wfAtijWyTQZxKt8SgLJDIzuN9A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:52:01 2026 by rpki-client