Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.mft
File:                     lMPujMByTro8sQMk-e24G6yFAyA.mft (raw, json)
Hash identifier:          +R7fPZEFpzsv2QgXbAFCwGfdQBXCem8c0lc+S+RsWhs=
Subject key identifier:   F1:76:6B:50:5A:87:18:84:70:F2:78:C5:14:4B:18:5B:65:9F:4F:D5
Authority key identifier: 94:C3:EE:8C:C0:72:4E:BA:3C:B1:03:24:F9:ED:B8:1B:AC:85:03:20
Certificate issuer:       /CN=A9197DD5/serialNumber=94C3EE8CC0724EBA3CB10324F9EDB81BAC850320
Certificate serial:       01D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMPujMByTro8sQMk-e24G6yFAyA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.mft
Manifest number:          01D3
Signing time:             Mon 11 May 2026 03:36:50 +0000
Manifest this update:     Mon 11 May 2026 03:36:49 +0000
Manifest next update:     Mon 18 May 2026 03:36:49 +0000
Files and hashes:         1: lMPujMByTro8sQMk-e24G6yFAyA.crl (hash: QEM2//Creeb0GwrQ1QCqSj0FIqJDpCRNCcW0GKRkZps=)
                          2: 5E3ADA8C81CF11EE9AB1F360C4F9AE02.roa (hash: v1uuoVFUnedlDTjjrQCWqm2VkiqYxyN2FpeHQY4I9y4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.crl
                          rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMPujMByTro8sQMk-e24G6yFAyA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 03:36:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 472 (0x1d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197DD5, serialNumber=94C3EE8CC0724EBA3CB10324F9EDB81BAC850320
        Validity
            Not Before: May 11 03:36:49 2026 GMT
            Not After : May 18 03:36:49 2026 GMT
        Subject: CN=6a014ed2-c866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:07:6f:8e:aa:ed:c2:dd:f2:20:93:43:ce:ff:
                    25:c0:80:a6:80:06:5c:e5:8b:68:6c:64:ea:05:42:
                    1a:fe:d8:12:e4:ab:b3:cb:7d:54:77:44:33:cd:95:
                    e0:55:d3:37:16:ea:4d:f1:79:4b:57:89:b1:cd:68:
                    c0:ba:6a:67:e8:35:8c:bc:f4:bd:f3:86:bf:08:11:
                    c1:ee:53:9d:6d:7a:5f:d6:be:57:11:4b:49:e0:75:
                    6f:e7:92:4c:ee:dd:ca:42:2f:0b:c7:ce:57:7d:cf:
                    81:90:8a:5d:51:55:28:d4:23:60:d3:29:54:01:c5:
                    6d:93:36:ab:35:62:73:ed:b7:75:46:72:82:0e:f6:
                    2b:37:33:c0:2e:14:7b:d0:8d:39:29:e1:84:60:da:
                    82:d4:26:4e:8f:b9:7b:77:73:6c:ae:7b:c7:74:d3:
                    eb:b8:0d:d0:c5:42:bb:45:05:2b:98:ec:14:7e:0b:
                    ff:bb:aa:47:a7:a8:23:3c:d6:ee:20:40:ad:46:12:
                    f5:e8:52:76:ee:8c:88:fd:6b:fd:e9:6f:c4:34:cf:
                    c0:d0:8f:27:47:b7:b3:0f:8e:6f:35:69:fd:8e:95:
                    62:a3:3f:ad:ca:52:1e:8e:d6:ec:17:7b:2f:52:ee:
                    a7:93:43:bb:33:44:48:08:bd:ad:78:9a:b4:34:da:
                    8e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:76:6B:50:5A:87:18:84:70:F2:78:C5:14:4B:18:5B:65:9F:4F:D5
            X509v3 Authority Key Identifier:
                keyid:94:C3:EE:8C:C0:72:4E:BA:3C:B1:03:24:F9:ED:B8:1B:AC:85:03:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMPujMByTro8sQMk-e24G6yFAyA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:b8:3e:6a:73:65:80:7f:1e:c8:7e:78:ba:a6:80:2b:f7:3e:
         7d:70:a9:02:a6:89:15:e6:8b:50:b9:27:4f:cd:36:46:09:42:
         83:5d:5e:b9:a7:b8:78:96:6a:aa:b7:84:79:5a:93:d8:60:a7:
         cf:4d:44:d9:d4:01:37:0d:04:37:4a:b1:e1:a2:e5:89:98:7b:
         3b:4c:16:6d:e9:4b:45:47:7e:2b:67:d6:05:41:43:01:53:de:
         91:f5:8e:e7:cd:41:47:c9:26:94:04:8f:c8:5e:e9:f4:13:65:
         16:7d:d8:6a:19:4a:94:1a:da:dc:95:f3:db:9f:26:f4:59:93:
         c8:eb:6e:47:be:27:a2:35:3d:c5:11:b5:66:58:cc:e4:69:e3:
         57:ac:5d:99:d2:0a:02:71:d7:58:dc:5a:39:54:2f:47:dc:1b:
         97:a8:19:02:89:6a:e3:17:b6:fa:ef:a0:41:67:68:cd:84:3b:
         25:a0:86:76:3b:02:f9:0e:52:00:58:a0:b2:24:2d:e6:3c:e3:
         98:ac:51:e7:6b:43:31:08:69:7c:4d:2d:a0:89:8e:85:25:b6:
         d1:10:6c:82:21:27:84:30:9b:3f:60:0d:fa:c9:19:dc:50:82:
         0c:5c:2c:44:4b:d6:6a:81:ba:3f:ed:e9:21:fd:6d:d8:61:d8:
         7c:41:84:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:01:23 2026 by rpki-client