Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.mft
File:                     lDuBQuFVPslGJaRyTlaYKhVY_pw.mft (raw, json)
Hash identifier:          FQjzfiNe7uuaQ55gLo5jkX6LJFSUoE9V6/Fokguokjg=
Subject key identifier:   EB:1C:35:38:50:D5:D4:5F:86:1E:66:C6:CC:81:41:2A:0E:D4:47:F3
Authority key identifier: 94:3B:81:42:E1:55:3E:C9:46:25:A4:72:4E:56:98:2A:15:58:FE:9C
Certificate issuer:       /CN=A91582D9/serialNumber=943B8142E1553EC94625A4724E56982A1558FE9C
Certificate serial:       186C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDuBQuFVPslGJaRyTlaYKhVY_pw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.mft
Manifest number:          2145
Signing time:             Wed 22 Jul 2026 16:35:50 +0000
Manifest this update:     Wed 22 Jul 2026 16:35:49 +0000
Manifest next update:     Wed 29 Jul 2026 16:35:49 +0000
Files and hashes:         1: lDuBQuFVPslGJaRyTlaYKhVY_pw.crl (hash: OlZh28diRBU2N6FckQjowpl3UwYn1v3a4zMfqattiEg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.crl
                          rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDuBQuFVPslGJaRyTlaYKhVY_pw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:35:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6252 (0x186c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91582D9, serialNumber=943B8142E1553EC94625A4724E56982A1558FE9C
        Validity
            Not Before: Jul 22 16:35:49 2026 GMT
            Not After : Jul 29 16:35:49 2026 GMT
        Subject: CN=6a60f166-e8d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:85:30:00:de:1b:9b:1d:ad:fd:70:a6:57:46:
                    e9:41:e8:10:ef:14:1b:04:5d:c9:65:d2:a8:5c:08:
                    36:de:0a:c9:eb:4f:94:66:44:fe:fd:be:27:3a:36:
                    f2:b8:b2:21:88:6a:9a:86:11:a9:78:53:c6:34:b7:
                    67:e6:ea:2d:ea:5c:e4:16:19:2a:b2:9a:5b:e4:85:
                    98:35:ad:9b:0e:e6:ef:da:98:16:ca:0f:13:39:81:
                    3e:27:0a:56:4d:cd:be:f9:ae:a7:f7:74:4d:71:11:
                    66:1b:bf:fe:d5:ad:67:c5:0f:08:2a:f7:4a:bd:0e:
                    db:63:34:1c:87:91:7f:a2:2a:61:c1:42:ff:f8:16:
                    c5:15:d1:f3:30:95:7b:64:f1:5e:8c:af:35:b9:ae:
                    f3:b5:b9:e3:2e:ab:be:26:d4:31:1f:d3:88:89:22:
                    8e:f3:15:de:f2:f6:39:40:06:e2:4d:49:81:15:49:
                    3d:9e:81:3f:6d:6a:97:a2:7f:10:88:f9:55:1f:13:
                    c5:a3:b4:7e:df:60:76:f8:4f:3f:ce:19:5b:10:1a:
                    e5:93:f4:16:01:fb:de:e4:7d:c2:11:a1:6f:d1:0d:
                    68:3c:32:f4:76:4d:60:ed:c8:a5:dd:0e:e3:41:73:
                    8d:55:43:8b:82:c1:19:8d:43:09:77:39:65:6f:1c:
                    96:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:1C:35:38:50:D5:D4:5F:86:1E:66:C6:CC:81:41:2A:0E:D4:47:F3
            X509v3 Authority Key Identifier:
                keyid:94:3B:81:42:E1:55:3E:C9:46:25:A4:72:4E:56:98:2A:15:58:FE:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDuBQuFVPslGJaRyTlaYKhVY_pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:4f:13:d7:78:e3:82:da:46:cd:76:9b:59:6c:07:78:b0:2e:
         09:da:c8:4c:2e:c5:6e:d9:4b:53:f5:63:c5:30:c9:87:97:a1:
         0d:fe:da:a6:24:e5:51:27:f6:94:3b:38:db:db:71:1b:dd:58:
         ce:01:1b:4b:e8:e8:54:de:1d:4a:61:c3:a5:7d:f9:d6:92:de:
         4f:7a:b8:fe:ea:96:c5:9c:1f:3f:1c:48:59:8a:33:ff:b5:8b:
         57:c1:22:4f:43:53:b6:f0:59:2e:d9:9d:8d:0b:b6:f9:65:b1:
         a8:38:73:52:75:e4:20:4f:b7:b3:e7:19:d2:7d:c1:8d:db:48:
         2b:75:ac:35:ab:a4:4e:17:78:54:6c:f5:32:2d:1c:e3:42:5a:
         89:ca:22:49:79:11:5e:04:77:4b:d4:75:39:4d:2d:ed:b1:59:
         be:3a:2b:b6:24:09:71:b6:bd:15:0b:88:47:d1:ec:d8:5f:8c:
         d8:cb:64:91:b3:ae:28:08:8c:f8:eb:9f:40:f3:42:63:cb:cf:
         ce:49:6f:74:a7:d3:07:af:9b:75:2d:09:cf:8d:9b:bc:ee:3f:
         19:63:74:0a:16:80:d2:32:a2:4c:c1:21:16:dd:2f:24:76:ba:
         77:f5:b8:1f:6e:7c:d1:04:9f:af:a4:f8:62:a6:64:98:15:74:
         32:a2:9b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:58:15 2026 by rpki-client