Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
File:                     lWVe5y4XegIJbAy2BnaqHmaa5-A.mft (raw, json)
Hash identifier:          cCIns6JrMFQFPnvQoHxkrG/c1Zjea53WKRJpDUT9oOY=
Subject key identifier:   86:53:B4:68:DD:AD:D7:D0:5B:4F:EB:BB:CB:4E:54:AB:7A:67:48:EA
Authority key identifier: 95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0
Certificate issuer:       /CN=A9127898/serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
Certificate serial:       021D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
Manifest number:          07E9
Signing time:             Tue 12 May 2026 23:05:07 +0000
Manifest this update:     Tue 12 May 2026 23:05:06 +0000
Manifest next update:     Tue 19 May 2026 23:05:06 +0000
Files and hashes:         1: lWVe5y4XegIJbAy2BnaqHmaa5-A.crl (hash: ReLe2CUxx8R1gAysh5pD3z+5S2JoFmgv/OHrpijZg9c=)
                          2: BFD5DDF0D95311EF9B045445C4F9AE02.roa (hash: n7OEkS+f68NF4N/p9/uhdtvyYSY3OrDptN85GWEeXDg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl
                          rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 541 (0x21d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127898, serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
        Validity
            Not Before: May 12 23:05:06 2026 GMT
            Not After : May 19 23:05:06 2026 GMT
        Subject: CN=6a03b223-5adf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fe:2e:45:33:e4:90:c9:ef:67:dc:06:f6:cd:
                    71:4f:cb:98:4c:6d:09:b5:09:a1:47:b6:a1:af:5d:
                    26:9b:b5:ab:6c:66:de:a2:e2:9a:57:6d:b4:82:d4:
                    8e:7e:34:da:99:4a:13:6e:7b:16:5e:2b:09:0d:11:
                    52:ca:2c:65:c7:c7:bd:12:c8:f3:23:19:9a:39:9b:
                    0a:3f:83:ff:28:f9:3d:69:64:c1:ca:1c:3c:1c:b9:
                    08:33:db:ea:5c:3b:7d:2b:80:0d:7e:37:7e:f5:b0:
                    c5:a2:89:ae:ec:f2:a2:b6:7a:a1:42:dc:cc:be:70:
                    17:18:e5:0f:26:a3:e1:3e:59:8b:e8:95:ab:34:26:
                    7c:4f:f2:48:42:2c:c2:ee:b9:8c:f4:3b:09:e0:fb:
                    b2:6f:f2:ed:44:4e:69:62:e3:11:ed:c0:7b:09:8f:
                    7b:d1:09:4c:fc:c7:58:57:eb:88:e6:11:9f:24:42:
                    1d:46:6d:90:0e:40:7f:1e:87:f7:3c:f9:3f:72:67:
                    e5:95:89:46:12:a7:39:31:3b:9c:14:b4:ca:9e:19:
                    d0:b0:fb:04:24:bb:24:b8:68:fc:71:e5:ff:c6:22:
                    8f:eb:d5:41:18:9c:2f:c3:cc:3d:63:30:bb:c6:12:
                    7d:25:c8:55:fe:28:16:2a:80:44:e0:4d:bf:5e:e5:
                    ee:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:53:B4:68:DD:AD:D7:D0:5B:4F:EB:BB:CB:4E:54:AB:7A:67:48:EA
            X509v3 Authority Key Identifier:
                keyid:95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:ee:fd:d5:37:be:96:b3:aa:3a:82:a4:ef:ef:d2:d2:44:78:
         b0:a3:60:60:d9:60:20:54:a2:07:51:b6:a8:e7:c7:29:a4:3f:
         a3:d5:c6:94:f9:5e:b6:55:89:65:2f:7f:bf:b2:8d:27:d1:35:
         39:ff:0a:12:e2:1a:84:a0:aa:fd:d4:b3:a9:74:47:87:dd:46:
         3d:19:0d:58:fd:7a:d5:08:42:d8:49:64:6e:cc:0a:92:2f:13:
         c0:1e:03:03:ab:48:6c:15:a5:0e:3e:ee:99:91:a6:0d:b9:d5:
         f5:90:68:e8:b1:fd:50:ef:d0:b3:89:1b:72:60:2c:f4:90:b1:
         27:aa:42:9b:0e:5e:16:71:27:84:2c:82:34:ed:2b:d4:9c:dc:
         2b:d7:e1:c3:cd:2d:c4:66:00:46:47:4c:49:b3:f4:a1:af:99:
         af:3c:72:12:5c:7c:7f:51:dc:bf:29:39:80:a1:06:10:82:f0:
         0a:07:49:b0:df:fd:4f:b4:ce:72:e6:1a:38:f5:4f:dd:54:5c:
         cc:e0:63:77:4b:84:4a:3a:15:f7:1f:a4:f9:d3:88:ac:b9:31:
         18:88:10:0b:87:ee:f6:f4:3a:b2:01:e9:a1:15:d8:13:3f:8b:
         ea:53:ce:90:35:ec:9d:22:be:b4:10:9b:59:94:8e:34:d4:ee:
         8e:ed:aa:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:13:40 2026 by rpki-client