Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.mft
File:                     0xLuUOZR-vA5aO306gARSeWV_A4.mft (raw, json)
Hash identifier:          dgVNAwZ5dDe1HXLDFcq9JLmnZZAyFZPCaNPiMiWnqCk=
Subject key identifier:   C2:C4:5F:EA:AD:89:A2:F0:66:8E:1D:72:7B:A6:C3:6C:65:8B:E1:1D
Authority key identifier: D3:12:EE:50:E6:51:FA:F0:39:68:ED:F4:EA:00:11:49:E5:95:FC:0E
Certificate issuer:       /CN=A9187347/serialNumber=D312EE50E651FAF03968EDF4EA001149E595FC0E
Certificate serial:       5A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0xLuUOZR-vA5aO306gARSeWV_A4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.mft
Manifest number:          54
Signing time:             Thu 23 Jul 2026 10:17:19 +0000
Manifest this update:     Thu 23 Jul 2026 10:17:19 +0000
Manifest next update:     Thu 30 Jul 2026 10:17:19 +0000
Files and hashes:         1: 0xLuUOZR-vA5aO306gARSeWV_A4.crl (hash: Mrs4rgHYgXMyXuA8/+uKKBscBWe3oc/V/xtNqUYsMIA=)
                          2: 69E5BC382CD811F1ACDE793A9A833773.roa (hash: smF654Hi+ihZBGyEmAdAxIkMQXLLQzXqzXf/0N/B6sI=)
                          3: 8C5B4E020E3F11F18FED49E9183D8C67.roa (hash: Hz/ArrYvezX4EXJ8DDY9ijBLJGuFrjsekFb24N7uhk8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.crl
                          rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0xLuUOZR-vA5aO306gARSeWV_A4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187347, serialNumber=D312EE50E651FAF03968EDF4EA001149E595FC0E
        Validity
            Not Before: Jul 23 10:17:19 2026 GMT
            Not After : Jul 30 10:17:19 2026 GMT
        Subject: CN=6a61ea2f-acc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:51:db:22:e1:3f:70:ca:33:7f:b7:6f:f2:0d:
                    75:be:44:db:51:7c:7c:0a:ef:50:e8:f7:a6:a8:51:
                    fc:22:fe:f2:8f:77:d4:5d:50:88:ef:bf:b2:c1:cb:
                    7a:6b:cd:bf:cb:d0:7a:85:5b:f7:d0:80:c3:9b:b9:
                    f9:cc:72:f7:c4:5b:ce:97:1b:61:6e:c0:e1:cc:ca:
                    ba:73:57:a9:40:9d:4a:29:e4:63:cc:35:f9:cd:5d:
                    26:1a:4b:e9:61:1a:f2:2a:d5:10:21:af:8d:96:b5:
                    a2:b2:da:b2:33:a7:d1:55:03:bc:8f:f1:2a:db:37:
                    02:6b:39:1e:e3:7a:7f:12:55:c1:96:25:f2:9f:3b:
                    0b:52:7e:03:3f:35:06:12:34:b4:57:e8:c1:6f:e4:
                    5d:f2:36:2d:ea:fa:e3:be:8e:63:e5:b7:be:2d:70:
                    e3:bd:92:6b:ba:84:49:4f:d3:b0:82:cd:8f:f2:2a:
                    30:b2:50:c0:44:11:a8:e7:77:28:ad:9c:c1:06:21:
                    26:f7:99:cf:63:53:3d:4f:37:41:ed:4e:dd:a3:6a:
                    cd:c4:b3:63:3b:0c:a7:f4:8d:ce:f9:c3:7c:7e:b8:
                    ee:b7:15:a6:2c:38:c8:26:58:90:bd:b8:69:63:cf:
                    b1:85:4e:42:16:bc:92:3e:cb:c0:ef:80:fc:3c:85:
                    74:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C4:5F:EA:AD:89:A2:F0:66:8E:1D:72:7B:A6:C3:6C:65:8B:E1:1D
            X509v3 Authority Key Identifier:
                keyid:D3:12:EE:50:E6:51:FA:F0:39:68:ED:F4:EA:00:11:49:E5:95:FC:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0xLuUOZR-vA5aO306gARSeWV_A4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:66:22:f0:18:4e:62:87:53:0b:b6:24:b4:4a:02:b7:90:8a:
         0f:84:b5:1b:d2:32:f1:35:e0:ab:b4:6e:9b:d4:b2:9f:f1:13:
         a3:48:de:2e:12:84:80:ff:83:77:67:78:2a:b4:9d:db:ad:b3:
         ec:cf:9b:0e:0e:9e:86:5a:b5:ad:b5:3b:cd:79:e1:0c:87:8d:
         d4:de:02:ed:1b:b4:92:2c:d7:1d:f2:46:4d:19:83:7f:4c:ac:
         64:94:c3:c0:4c:b1:6e:7c:30:b3:3a:d2:c2:34:89:2a:46:e5:
         2f:ed:30:2b:f2:91:38:d4:4a:fc:d1:8e:29:96:bf:d6:ed:a7:
         3f:e1:6b:94:ca:be:1b:0e:45:a9:27:67:c9:8b:c0:77:d2:24:
         f2:c9:e8:42:93:f5:49:15:03:c8:ef:a1:0d:01:a4:59:5f:3b:
         0b:ad:68:06:cd:d7:a9:0c:9c:d5:ff:7b:c7:ff:2d:50:90:36:
         8c:25:6e:b7:14:cd:16:08:3e:ae:bd:3e:1b:7b:ed:3a:06:ea:
         a3:b9:45:dd:70:3e:e6:4a:00:c1:0b:66:3f:3c:0d:db:1d:be:
         d0:35:a5:28:41:52:76:18:3b:24:d6:b2:a6:6f:df:c6:d8:f5:
         3c:46:b0:b6:7d:d4:54:4b:5f:66:f6:65:05:a6:e1:4a:47:3b:
         05:25:8c:69
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
NzM0NzExMC8GA1UEBRMoRDMxMkVFNTBFNjUxRkFGMDM5NjhFREY0RUEwMDExNDlF
NTk1RkMwRTAeFw0yNjA3MjMxMDE3MTlaFw0yNjA3MzAxMDE3MTlaMBgxFjAUBgNV
BAMTDTZhNjFlYTJmLWFjYzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCqUdsi4T9wyjN/t2/yDXW+RNtRfHwK71Do96aoUfwi/vKPd9RdUIjvv7LBy3pr
zb/L0HqFW/fQgMObufnMcvfEW86XG2FuwOHMyrpzV6lAnUop5GPMNfnNXSYaS+lh
GvIq1RAhr42WtaKy2rIzp9FVA7yP8SrbNwJrOR7jen8SVcGWJfKfOwtSfgM/NQYS
NLRX6MFv5F3yNi3q+uO+jmPlt74tcOO9kmu6hElP07CCzY/yKjCyUMBEEajndyit
nMEGISb3mc9jUz1PN0HtTt2jas3Es2M7DKf0jc75w3x+uO63FaYsOMgmWJC9uGlj
z7GFTkIWvJI+y8DvgPw8hXQvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUwsRf6q2J
ovBmjh1ye6bDbGWL4R0wHwYDVR0jBBgwFoAU0xLuUOZR+vA5aO306gARSeWV/A4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3MzQ3LzRBOTM3MkY2MEUz
RjExRjFCMkNDREI3MzE4M0Q4QzY3LzB4THVVT1pSLXZBNWFPMzA2Z0FSU2VXVl9B
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvMHhMdVVPWlItdkE1YU8zMDZnQVJTZVdWX0E0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3
MzQ3LzRBOTM3MkY2MEUzRjExRjFCMkNDREI3MzE4M0Q4QzY3LzB4THVVT1pSLXZB
NWFPMzA2Z0FSU2VXVl9BNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAHZiLwGE5ih1MLtiS0SgK3kIoPhLUb0jLxNeCrtG6b1LKf8ROjSN4uEoSA/4N3
Z3gqtJ3brbPsz5sODp6GWrWttTvNeeEMh43U3gLtG7SSLNcd8kZNGYN/TKxklMPA
TLFufDCzOtLCNIkqRuUv7TAr8pE41Er80Y4plr/W7ac/4WuUyr4bDkWpJ2fJi8B3
0iTyyehCk/VJFQPI76ENAaRZXzsLrWgGzdepDJzV/3vH/y1QkDaMJW63FM0WCD6u
vT4be+06BuqjuUXdcD7mSgDBC2Y/PA3bHb7QNaUoQVJ2GDsk1rKmb9/G2PU8RrC2
fdRUS19m9mUFpuFKRzsFJYxp
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:31:14 2026 by rpki-client