Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft
File:                     lLA392-iN6eOqVSONVel4W7WJJo.mft (raw, json)
Hash identifier:          l/tRMMv/l7NMzpRsTZLvEcHbe8KJR6eSjAIj8Q+GoeI=
Subject key identifier:   EE:F9:48:D1:09:4A:16:AA:52:D9:43:C2:E0:9B:9C:FE:1E:EA:F5:E6
Authority key identifier: 94:B0:37:F7:6F:A2:37:A7:8E:A9:54:8E:35:57:A5:E1:6E:D6:24:9A
Certificate issuer:       /CN=A9147BF1/serialNumber=94B037F76FA237A78EA9548E3557A5E16ED6249A
Certificate serial:       01FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft
Manifest number:          01F5
Signing time:             Wed 13 May 2026 03:21:02 +0000
Manifest this update:     Wed 13 May 2026 03:21:02 +0000
Manifest next update:     Wed 20 May 2026 03:21:02 +0000
Files and hashes:         1: lLA392-iN6eOqVSONVel4W7WJJo.crl (hash: 8N8f+CHChW91iN0Lmrx1MLbvsRkVSW2OjkrmKc3ZHBQ=)
                          2: 26C760F002EA11F0836EF72FC4F9AE02.roa (hash: wrQZ3i6auQE6hasl5pdOo4dzJGXDbVakH3Xi8U4i1wQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.crl
                          rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 03:21:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 509 (0x1fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147BF1, serialNumber=94B037F76FA237A78EA9548E3557A5E16ED6249A
        Validity
            Not Before: May 13 03:21:02 2026 GMT
            Not After : May 20 03:21:02 2026 GMT
        Subject: CN=6a03ee1e-7505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e0:9d:5d:fa:96:bc:48:83:51:fd:a2:e9:16:
                    28:e0:2d:29:22:56:65:6b:df:16:15:67:d0:41:b8:
                    32:3b:8c:e5:1a:06:23:58:a3:dc:e7:f6:dd:b4:49:
                    26:b9:77:2a:70:9f:ff:dd:59:43:eb:09:41:8b:86:
                    08:7d:f9:5d:57:46:ae:f0:fc:5c:37:1b:c8:9d:51:
                    dd:a7:50:11:fb:67:26:24:69:31:d0:05:78:e1:37:
                    05:50:7b:11:20:ed:63:e9:ee:48:6e:0c:4c:a8:83:
                    70:0a:97:1c:90:62:f4:0d:ac:38:49:86:b0:5c:69:
                    c4:c0:f8:89:49:10:9a:f5:a9:ba:f2:84:33:29:98:
                    74:f6:a2:eb:d9:6d:c0:ec:8a:b6:be:46:cf:c7:c1:
                    a0:57:4e:07:da:68:f6:af:62:7d:e1:d0:31:3d:7d:
                    33:38:d8:3c:f6:27:84:ad:91:cd:0d:b5:7f:10:aa:
                    46:72:56:11:1a:4d:50:39:0f:5f:aa:c3:29:33:5e:
                    8d:18:b2:bc:8c:00:34:ef:5e:b9:43:01:17:8b:23:
                    1a:a2:59:5d:7b:56:89:01:ca:92:08:70:49:eb:b1:
                    91:28:c6:b0:af:06:b3:cf:df:fd:69:82:12:03:94:
                    40:da:34:5f:12:83:7a:14:6d:af:2f:0c:76:5d:36:
                    76:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F9:48:D1:09:4A:16:AA:52:D9:43:C2:E0:9B:9C:FE:1E:EA:F5:E6
            X509v3 Authority Key Identifier:
                keyid:94:B0:37:F7:6F:A2:37:A7:8E:A9:54:8E:35:57:A5:E1:6E:D6:24:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:96:2a:f9:7d:35:9c:6d:49:38:10:f2:36:84:a0:7e:71:b5:
         8c:be:74:39:45:42:f1:1d:2c:73:f7:69:02:3e:7e:d2:5e:65:
         09:b7:eb:a3:46:97:dc:45:01:ac:03:cc:e7:f0:5b:b5:8b:d5:
         52:61:62:b1:2b:b6:0c:40:b8:64:cd:8d:32:30:9b:30:7b:76:
         ad:f8:d0:b2:dc:64:4c:da:3b:3a:2e:7a:23:8a:f0:73:23:61:
         e7:41:8f:5f:13:0d:26:d7:5a:8f:0c:26:54:17:3a:ea:d0:0e:
         88:e1:55:57:35:bd:f0:e6:13:82:28:7b:f2:bf:ba:0c:49:c6:
         5c:cc:44:c2:8c:3f:e9:cf:34:92:e4:42:31:f1:4e:3f:72:52:
         87:02:31:0e:68:64:1f:74:58:cd:94:f6:a7:9b:68:5f:fa:f2:
         d8:94:93:b3:34:2d:c3:37:36:39:78:32:23:07:65:30:61:83:
         95:90:f3:d4:27:bd:1a:9d:5c:d3:6d:a4:03:12:56:ff:6a:1a:
         5a:f9:d7:77:4b:ba:4f:13:b6:34:55:bf:57:ab:97:22:d9:11:
         da:2a:54:13:41:23:ef:6d:32:00:d7:7c:c6:11:29:80:30:b0:
         52:ab:65:58:8a:39:f0:5c:e8:d9:5f:05:0d:22:11:bb:2b:b5:
         81:5d:72:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:34:14 2026 by rpki-client