Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft
File:                     LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft (raw, json)
Hash identifier:          IuYF3fCzHoYriPVs/jvxP+BwSZbGaZ8xmTa91ddMaGY=
Subject key identifier:   98:7D:F2:B9:47:9F:F7:8C:96:C0:3A:69:27:03:EA:AC:66:B0:E6:44
Authority key identifier: 2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C
Certificate issuer:       /CN=A91203EB/serialNumber=2F265B0C802473094926890A85124E21B109DA3C
Certificate serial:       06FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft
Manifest number:          06EA
Signing time:             Tue 12 May 2026 22:17:12 +0000
Manifest this update:     Tue 12 May 2026 22:17:11 +0000
Manifest next update:     Tue 19 May 2026 22:17:11 +0000
Files and hashes:         1: LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl (hash: dFXxkUgAsrkNR82ZIa/TQQ2lVlJPc/HJBFKEu7DNgrU=)
                          2: 579FE34A0BF211EF8B0F9C81C4F9AE02.roa (hash: I0WpDgMmllreaPhV65poRHSHDSmFE5dRW9kHHGyYH/U=)
                          3: 8CBE17540BCF11EF80BE8E0CC4F9AE02.roa (hash: v9b/yGtqVwFD8gxkWfJo/P1ZI/EvbUBmOLRUxAaLNxY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl
                          rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:17:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1787 (0x6fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91203EB, serialNumber=2F265B0C802473094926890A85124E21B109DA3C
        Validity
            Not Before: May 12 22:17:11 2026 GMT
            Not After : May 19 22:17:11 2026 GMT
        Subject: CN=6a03a6e8-e327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a9:75:75:be:b1:4b:67:30:23:68:81:70:7e:
                    38:1b:4a:35:43:5f:e1:15:2d:e8:ea:dc:54:d9:b3:
                    35:e4:5b:ab:49:16:ff:45:b9:40:97:10:13:ba:ff:
                    d9:c3:70:06:ad:d9:12:09:1a:ab:19:26:e0:a1:e6:
                    0d:c5:bb:70:c6:6d:41:b3:cc:92:f1:d1:75:b7:06:
                    61:f2:a9:f3:98:fe:99:f7:02:45:17:e8:37:6a:d7:
                    90:09:19:cc:b8:b8:ec:c9:25:4f:67:d5:03:39:ef:
                    c7:f9:7c:7f:3d:9e:6b:70:b7:fc:f8:2e:b9:21:39:
                    dd:dc:49:35:d8:fa:62:ee:b4:f0:5b:6c:59:e3:6f:
                    2e:72:27:a3:c0:af:e4:ee:9c:b4:e0:e9:15:f4:87:
                    e2:24:5c:40:85:42:aa:bf:3f:45:fc:56:79:9c:d0:
                    38:96:fd:b8:63:de:ce:97:c7:2a:97:fd:87:7b:11:
                    09:ff:8a:84:4d:c7:d5:22:a5:fc:17:c5:eb:ae:82:
                    2e:a8:2c:b2:42:43:79:82:10:1c:01:89:15:a2:15:
                    76:c6:b8:21:57:30:42:8a:17:65:1b:42:95:50:7b:
                    db:c2:8b:a0:ef:8a:69:25:29:b6:26:e0:f0:60:cd:
                    30:74:c0:06:ac:db:84:e6:0e:46:a1:77:9b:d6:81:
                    7a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:7D:F2:B9:47:9F:F7:8C:96:C0:3A:69:27:03:EA:AC:66:B0:E6:44
            X509v3 Authority Key Identifier:
                keyid:2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:22:63:c2:bc:50:11:ff:02:f5:38:77:d2:27:4c:94:6b:f6:
         3a:6c:84:39:08:07:fa:49:b7:34:18:87:59:b6:11:80:6c:fd:
         ad:46:31:38:b8:69:85:06:d3:2b:03:2c:2b:97:52:36:75:3c:
         64:f9:38:56:dc:43:d4:0b:9c:4c:c2:de:31:f8:20:bb:eb:04:
         92:40:9e:8a:bd:54:21:8d:72:10:84:06:ce:ea:fb:a4:1b:36:
         7c:ab:9c:8d:06:a2:25:0f:88:22:b9:21:5d:19:87:bd:7c:87:
         e3:58:9b:74:8d:0f:dd:75:97:de:fa:98:58:1e:c5:ae:33:5a:
         2f:43:32:88:33:f6:13:6b:9f:91:86:47:71:8c:2b:82:6e:48:
         14:f2:cf:4e:7a:f1:88:67:be:70:a9:86:dc:b2:77:0d:c0:42:
         49:c9:3a:f4:ca:cd:69:82:3a:4c:bb:25:e0:f5:b7:fc:af:2b:
         78:fb:77:c6:10:20:10:bb:7b:bc:81:61:75:8a:28:3f:e1:06:
         55:5c:4e:2f:b0:1a:b4:e2:b4:df:09:5c:21:9b:a1:f1:96:9a:
         88:fc:0a:3a:5c:fa:b0:c3:1a:33:5e:70:e7:1f:40:64:1c:5a:
         1e:7a:d2:dd:2d:87:e4:2d:15:d6:e0:e2:23:ea:01:7b:d8:5a:
         c1:5a:95:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:02:14 2026 by rpki-client