Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.mft
File:                     lufMd6OOPhgL91JrodlTIYBONeY.mft (raw, json)
Hash identifier:          T7owejt/IBwOb+PDB2LkyQr3BbSELfR3/KaYbGs0S6o=
Subject key identifier:   DD:A0:9F:9D:41:B8:0B:73:E6:75:CC:85:46:EB:BE:28:87:09:EE:93
Authority key identifier: 96:E7:CC:77:A3:8E:3E:18:0B:F7:52:6B:A1:D9:53:21:80:4E:35:E6
Certificate issuer:       /CN=A916C4FA/serialNumber=96E7CC77A38E3E180BF7526BA1D95321804E35E6
Certificate serial:       026A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lufMd6OOPhgL91JrodlTIYBONeY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.mft
Manifest number:          066A
Signing time:             Wed 13 May 2026 00:34:21 +0000
Manifest this update:     Wed 13 May 2026 00:34:20 +0000
Manifest next update:     Wed 20 May 2026 00:34:20 +0000
Files and hashes:         1: lufMd6OOPhgL91JrodlTIYBONeY.crl (hash: 2l6A4WibrE+kohTyl+d/TfNjw2DlnOrBFzCuKnlHA2U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.crl
                          rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lufMd6OOPhgL91JrodlTIYBONeY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:34:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 618 (0x26a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C4FA, serialNumber=96E7CC77A38E3E180BF7526BA1D95321804E35E6
        Validity
            Not Before: May 13 00:34:20 2026 GMT
            Not After : May 20 00:34:20 2026 GMT
        Subject: CN=6a03c70d-8920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2b:f2:34:00:bc:bb:a7:ed:18:1a:b5:55:d4:
                    b0:c2:a3:f9:fa:71:36:1d:a2:ec:ab:98:4f:de:f6:
                    94:bf:38:48:5e:ec:7e:f5:c2:a2:90:e6:0d:10:7b:
                    21:ed:ae:c5:06:06:31:45:0e:9c:85:d4:b1:93:2e:
                    03:e2:d2:f5:84:13:88:c4:d1:04:d8:2c:a9:78:cc:
                    08:61:bc:98:eb:1c:a2:25:33:88:e8:f1:1e:94:c6:
                    fc:14:c0:a7:31:bd:f4:28:a2:a4:c8:8a:31:d3:ef:
                    cc:6c:d5:04:f4:de:60:c1:ae:5f:ca:f7:5d:71:7a:
                    c1:a2:64:be:90:4f:38:3b:e1:41:da:e4:45:3a:3d:
                    70:00:8e:12:3d:82:f5:6d:44:53:ab:7c:ce:98:21:
                    04:6e:35:c2:af:c4:70:e7:4b:08:77:00:16:97:13:
                    fa:eb:6e:d6:bc:7d:b2:5b:ef:bf:23:f0:b7:0c:ca:
                    34:e0:61:a5:74:6f:b3:8e:74:b4:15:f1:56:8c:e5:
                    ff:c2:33:ed:30:6c:d2:45:f7:8b:67:45:08:f7:eb:
                    65:15:9a:b1:49:dd:20:3e:77:b3:51:12:9c:d3:c9:
                    9d:3a:a0:8a:cd:7f:75:7d:23:a7:d5:14:3f:0a:6b:
                    55:07:32:b1:48:ae:b0:b4:ad:ba:81:ae:69:83:79:
                    28:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A0:9F:9D:41:B8:0B:73:E6:75:CC:85:46:EB:BE:28:87:09:EE:93
            X509v3 Authority Key Identifier:
                keyid:96:E7:CC:77:A3:8E:3E:18:0B:F7:52:6B:A1:D9:53:21:80:4E:35:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lufMd6OOPhgL91JrodlTIYBONeY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:27:23:78:04:c1:0d:c8:19:82:63:14:6e:27:e7:99:78:1b:
         9f:f6:99:d3:99:e9:9f:e2:75:8e:7f:bb:a7:72:5b:37:cb:db:
         01:78:39:3a:52:5a:b8:7a:29:a6:3e:99:04:68:58:9e:10:ce:
         09:28:31:4f:6c:33:d7:0c:cf:0c:bd:12:94:00:10:d6:b7:e6:
         50:b2:cd:d2:22:56:75:f5:61:c1:e8:83:80:3b:24:01:7e:a1:
         bb:a5:15:80:46:23:ec:d3:ea:57:77:91:a2:f4:fb:7b:74:c5:
         f0:96:e0:ce:0a:01:a6:38:60:7c:fb:5a:79:6b:4c:fd:a1:8d:
         a3:2a:74:17:12:75:99:25:6b:98:5c:2f:3f:94:7c:f3:79:c1:
         2f:03:f7:32:72:69:8c:d4:ce:04:ba:8e:38:2f:c2:96:42:54:
         e4:6f:c7:94:4b:40:c3:f6:c1:e7:60:0c:23:1e:57:e6:7c:dd:
         f4:82:6e:5f:59:75:75:1e:21:0d:d4:78:c4:f1:78:aa:4d:f9:
         2a:e3:f8:47:83:25:da:a1:e2:d0:43:5b:61:c8:36:f0:9d:df:
         1f:5b:09:cb:fe:61:3c:fc:bf:bb:48:80:c6:9b:41:6f:a1:a5:
         4e:5c:1d:9a:8d:8b:71:05:2d:f8:c7:d5:bd:36:6e:03:c7:7a:
         bb:97:25:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:45:55 2026 by rpki-client