Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.mft
File:                     LViYkEjCGfAQiK5yv64JcN9dpjY.mft (raw, json)
Hash identifier:          5YyXdIdIS8S3VHB3PUA/Be0XEKMy5v+v8SGDMPLmpzA=
Subject key identifier:   A9:03:C7:CB:74:C9:C6:1E:85:31:D1:C1:DE:41:FF:A0:24:FC:F1:1C
Authority key identifier: 2D:58:98:90:48:C2:19:F0:10:88:AE:72:BF:AE:09:70:DF:5D:A6:36
Certificate issuer:       /CN=A919690C/serialNumber=2D58989048C219F01088AE72BFAE0970DF5DA636
Certificate serial:       0A54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LViYkEjCGfAQiK5yv64JcN9dpjY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.mft
Manifest number:          0A3A
Signing time:             Tue 12 May 2026 19:48:35 +0000
Manifest this update:     Tue 12 May 2026 19:48:34 +0000
Manifest next update:     Tue 19 May 2026 19:48:34 +0000
Files and hashes:         1: LViYkEjCGfAQiK5yv64JcN9dpjY.crl (hash: UJvFs/Pi6Dcqo+B4uLbzQHIM6l5Xtkv4Ra0Y9ytcNEQ=)
                          2: E5E0FAAC020D11EF9DEBCD65C4F9AE02.roa (hash: I522j1UP6rkopIfKtloa9IQO+dyn5kwps6ThFrAaJLs=)
                          3: 87818166020D11EF916F0D65C4F9AE02.roa (hash: ornbPFQGfx6/yfJwqQC5E8pEyY5xP+J6SQ5GeX/1iXA=)
                          4: 76A97C669D2C11F0AB031860C4F9AE02.roa (hash: 8KlVgmZAX4O385wf8K4L0jF1lqlsm5dBNZwyT+vaC2E=)
                          5: B0EE80B28FBB11EAA0855C73C4F9AE02.roa (hash: axE8boHX8yd5f+z+47p5pFgyCJbzp0ULGAKyGmC4lXA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.crl
                          rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LViYkEjCGfAQiK5yv64JcN9dpjY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2644 (0xa54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919690C, serialNumber=2D58989048C219F01088AE72BFAE0970DF5DA636
        Validity
            Not Before: May 12 19:48:34 2026 GMT
            Not After : May 19 19:48:34 2026 GMT
        Subject: CN=6a038413-d4e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fa:e8:b6:54:f0:3d:a6:8e:ab:06:8f:a5:ce:
                    6e:d9:ff:18:cd:53:61:42:38:47:fa:06:42:50:da:
                    e3:f6:2c:08:d6:23:a6:f7:6b:e0:21:97:d4:40:be:
                    1d:67:5f:77:9f:cd:da:97:f2:67:e2:c9:4c:fa:8d:
                    7f:dc:ef:8a:dc:6d:62:62:a7:27:8a:38:5d:c9:68:
                    80:63:39:85:e3:57:1a:be:2a:81:13:a8:eb:f7:01:
                    f2:11:2e:d7:68:bd:31:64:98:58:50:96:5f:d7:3a:
                    a1:c9:86:7b:96:62:fd:b4:68:26:d9:93:4d:36:34:
                    99:02:b5:35:c6:0e:42:ea:ad:9e:27:0c:46:28:af:
                    00:db:fd:9a:bd:00:e4:d2:56:8f:b7:ed:04:d5:7f:
                    20:49:b0:83:24:e3:f4:de:c0:25:c5:e5:f1:be:30:
                    5e:a8:52:7d:59:f6:2f:ca:3f:e1:30:eb:ac:55:a3:
                    d0:97:0e:a6:48:ac:33:6b:5a:5e:4e:9e:18:71:4d:
                    14:8e:9f:6c:f1:0e:e0:5a:cd:71:eb:fb:cd:8e:6c:
                    d9:a4:64:7f:0e:ae:00:65:cf:c8:e4:ff:07:ca:56:
                    44:87:41:23:76:25:2d:f7:e5:3c:c5:b3:ae:75:fd:
                    6f:da:bc:4d:dd:06:d9:76:bf:82:bb:44:dc:c9:1f:
                    ce:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:03:C7:CB:74:C9:C6:1E:85:31:D1:C1:DE:41:FF:A0:24:FC:F1:1C
            X509v3 Authority Key Identifier:
                keyid:2D:58:98:90:48:C2:19:F0:10:88:AE:72:BF:AE:09:70:DF:5D:A6:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LViYkEjCGfAQiK5yv64JcN9dpjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:28:fa:77:b6:b7:0d:21:bc:43:65:13:81:0f:4b:89:99:ff:
         1c:89:0f:c8:5d:a4:2e:ce:39:d1:e5:5f:60:aa:d9:55:9e:35:
         56:33:8b:25:5e:11:bd:9a:0c:e3:8c:95:c6:2f:b4:5e:d9:c8:
         f6:2b:67:9d:4a:d7:f2:b9:6e:9c:fb:90:c9:1f:fc:59:9f:09:
         1e:be:f2:63:f7:38:1b:66:fe:24:33:a8:14:bd:62:ca:0a:d4:
         d2:25:37:26:1b:b7:6d:22:a8:c5:57:5f:d8:3f:83:b4:7a:3b:
         7d:48:fd:b6:cf:6e:9a:f0:15:3e:dc:d8:da:ea:a4:72:a5:8e:
         5c:c2:36:70:78:fb:9d:37:35:0f:3b:de:e2:79:a9:ce:70:46:
         27:b3:f0:97:2d:b8:36:30:97:d5:31:5f:34:33:a7:c3:2c:b8:
         fa:9f:1c:37:9b:6d:2e:ba:a5:d1:cf:1c:ce:be:c1:8c:43:a3:
         31:be:a9:87:32:67:fa:8e:58:c8:89:69:e6:0b:7c:90:41:94:
         44:d4:2e:26:67:6f:78:77:df:c6:3a:72:ce:c5:e2:89:98:3a:
         5b:10:56:e1:58:83:13:45:fc:2d:de:1f:a1:ef:b2:fe:db:d9:
         45:e9:b6:f8:da:a3:5e:8b:73:59:64:b1:af:68:b6:75:32:7b:
         1e:37:18:46
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICClQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTY5MEMxMTAvBgNVBAUTKDJENTg5ODkwNDhDMjE5RjAxMDg4QUU3MkJGQUUwOTcw
REY1REE2MzYwHhcNMjYwNTEyMTk0ODM0WhcNMjYwNTE5MTk0ODM0WjAYMRYwFAYD
VQQDEw02YTAzODQxMy1kNGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAovrotlTwPaaOqwaPpc5u2f8YzVNhQjhH+gZCUNrj9iwI1iOm92vgIZfUQL4d
Z193n83al/Jn4slM+o1/3O+K3G1iYqcnijhdyWiAYzmF41caviqBE6jr9wHyES7X
aL0xZJhYUJZf1zqhyYZ7lmL9tGgm2ZNNNjSZArU1xg5C6q2eJwxGKK8A2/2avQDk
0laPt+0E1X8gSbCDJOP03sAlxeXxvjBeqFJ9WfYvyj/hMOusVaPQlw6mSKwza1pe
Tp4YcU0Ujp9s8Q7gWs1x6/vNjmzZpGR/Dq4AZc/I5P8HylZEh0EjdiUt9+U8xbOu
df1v2rxN3QbZdr+Cu0TcyR/OOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKkDx8t0
ycYehTHRwd5B/6Ak/PEcMB8GA1UdIwQYMBaAFC1YmJBIwhnwEIiucr+uCXDfXaY2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjkwQy9EM0Q1ODQ4QzhG
QkExMUVBQTM0QUMwNzJDNEY5QUUwMi9MVmlZa0VqQ0dmQVFpSzV5djY0SmNOOWRw
alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xWaVlrRWpDR2ZBUWlLNXl2NjRKY045ZHBqWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NjkwQy9EM0Q1ODQ4QzhGQkExMUVBQTM0QUMwNzJDNEY5QUUwMi9MVmlZa0VqQ0dm
QVFpSzV5djY0SmNOOWRwalkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARyj6d7a3DSG8Q2UTgQ9LiZn/HIkPyF2kLs450eVfYKrZVZ41VjOLJV4RvZoM
44yVxi+0XtnI9itnnUrX8rlunPuQyR/8WZ8JHr7yY/c4G2b+JDOoFL1iygrU0iU3
Jhu3bSKoxVdf2D+DtHo7fUj9ts9umvAVPtzY2uqkcqWOXMI2cHj7nTc1Dzve4nmp
znBGJ7Pwly24NjCX1TFfNDOnwyy4+p8cN5ttLrql0c8czr7BjEOjMb6phzJn+o5Y
yIlp5gt8kEGURNQuJmdveHffxjpyzsXiiZg6WxBW4ViDE0X8Ld4foe+y/tvZRem2
+NqjXotzWWSxr2i2dTJ7HjcYRg==
-----END CERTIFICATE-----
Generated at Wed May 13 11:20:26 2026 by rpki-client