Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft
File:                     lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft (raw, json)
Hash identifier:          Mu1MdcB7bgcbscr2swkrSm6XqKogJOZMiEA54lXv7Qc=
Subject key identifier:   8F:55:18:54:A1:18:C6:90:56:4C:A5:36:F3:7F:BE:99:15:F9:CF:33
Authority key identifier: 96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2
Certificate issuer:       /CN=A919EFDE/serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2
Certificate serial:       35E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft
Manifest number:          356C
Signing time:             Tue 12 May 2026 14:25:09 +0000
Manifest this update:     Tue 12 May 2026 14:25:08 +0000
Manifest next update:     Tue 19 May 2026 14:25:08 +0000
Files and hashes:         1: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl (hash: wHR5zBaZKprevKsxhvbsD69cWIvggnUJWTSD2tz20uU=)
                          2: B2690D6CCA5511EE9683413FC4F9AE02.roa (hash: A+a3H+TI3Fy7ECqMtSSHf3q0bX9LrpXD0sKYqQLyRzM=)
                          3: 1B513B10FA3011E9BF5A291EC4F9AE02.roa (hash: P3ZRq1xA8QtDqTnLHnRb3kjohttdnDktPk8gMx+p6lU=)
                          4: 1A7891D4FA3011E9BF5A291EC4F9AE02.roa (hash: KeE1mpgZhkEhqP2LCs6EXDMfZu6Zxoag+TQ3ftbgOYk=)
                          5: A9D92784B0CA11E59BE6876FC4F9AE02.roa (hash: khATrdo5z+GWLARkNlA8hcKpjIC1yChn98ttcidrqFs=)
                          6: A769D0DEB0CA11E59BE6876FC4F9AE02.roa (hash: g0qbK+AgDky7jS+tfKk3FPH4lZwss0lhqd032VOFuPI=)
                          7: 5113BF7CFE6011EA9D63505CC4F9AE02.roa (hash: M4WBswg1YJ4TezL6E7iYouHn8KwdFBvWXJuWc2T2coA=)
                          8: 19DE7DB0FA3011E9BF5A291EC4F9AE02.roa (hash: IrGm+0rrhe6nwg8fMZphy3bLySRgbqK4gCqvkr1SaPY=)
                          9: F6D63E40054A11EAA00FB024C4F9AE02.roa (hash: 7jOIbaiPNEQ5tv45ewj5Fz6f7M91EZnlJBs6MK56S3w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl
                          rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:25:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13796 (0x35e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EFDE, serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2
        Validity
            Not Before: May 12 14:25:08 2026 GMT
            Not After : May 19 14:25:08 2026 GMT
        Subject: CN=6a033845-be23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:27:0e:ea:63:a0:0d:0e:ca:95:ad:36:e6:4e:
                    24:3b:9a:ca:19:8d:01:c1:9f:84:9c:b9:2b:7a:60:
                    6f:0a:88:45:c2:31:07:b0:20:48:59:ff:55:bf:b9:
                    9d:6e:e0:02:81:4d:43:d5:14:8c:94:d9:fb:49:be:
                    0a:1b:de:cb:6c:cd:93:a3:58:76:6e:ca:05:b9:3a:
                    ba:bd:9b:cf:bd:8d:72:c1:e0:7f:c2:03:18:b9:98:
                    40:6e:2e:64:f4:86:ec:12:93:05:97:b6:23:51:5d:
                    dd:30:22:d3:8a:c5:fc:d5:28:ed:be:2c:14:8e:da:
                    e9:b3:e7:be:fb:40:9f:9d:89:8e:f5:5b:50:62:06:
                    39:ac:8b:d1:fd:4c:15:bb:51:01:27:64:33:21:de:
                    26:48:12:63:63:13:c1:88:a7:41:c8:a7:a7:01:dc:
                    02:94:66:fb:51:6e:54:6c:f2:e8:5d:5e:9f:69:c4:
                    c1:3e:7c:f8:6b:e8:d9:dc:2e:7b:b1:e0:55:fd:8e:
                    c8:9c:60:22:e6:0b:0d:57:de:71:e5:4d:78:62:16:
                    cf:b4:90:c1:eb:04:d9:2a:fb:df:3c:e6:71:3e:8d:
                    61:34:4f:8f:06:cb:3c:fc:58:14:f2:a9:99:66:7d:
                    81:39:d1:05:af:ba:6e:10:69:c2:65:bd:37:b5:82:
                    83:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:55:18:54:A1:18:C6:90:56:4C:A5:36:F3:7F:BE:99:15:F9:CF:33
            X509v3 Authority Key Identifier:
                keyid:96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:96:22:fe:2a:a7:98:ad:75:72:42:14:ad:25:84:49:3a:c2:
         2d:3d:87:13:e4:97:78:62:be:22:3e:3e:28:c2:5c:20:79:ab:
         6f:26:74:18:9b:20:ec:19:64:e4:2d:77:46:2e:48:55:d4:6c:
         32:78:0e:c3:fe:cf:dc:f4:93:c6:32:e4:f5:99:2a:89:f9:5f:
         b5:a4:c5:7d:e3:e9:30:d0:40:b4:4e:84:b4:2f:21:8c:80:b3:
         06:b6:fd:ef:4c:b9:3b:2a:6b:d0:b8:75:1c:d8:66:3f:f6:c3:
         ab:8e:9b:e2:b9:d9:73:05:9a:20:cb:c3:68:b5:2e:86:8e:17:
         dd:39:57:62:cc:a8:70:32:20:55:fe:68:95:79:dc:0d:61:c3:
         7f:d3:fe:5d:30:45:98:61:e4:e0:eb:8b:82:c2:81:7a:cd:bc:
         c6:b2:e4:d6:81:23:25:ab:58:b6:73:11:31:ea:cd:d8:76:1a:
         71:e7:64:6c:ce:58:99:6f:8b:c9:71:36:d3:0d:16:bc:eb:4c:
         ea:47:fd:21:06:e4:27:43:e0:bb:29:74:17:2c:79:8c:99:75:
         f1:4d:ff:0e:57:77:35:9c:a0:c6:21:42:d7:22:13:d3:64:df:
         59:9a:be:ca:58:b6:84:19:1d:c9:60:da:15:2b:08:75:7d:71:
         39:de:d7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:06:05 2026 by rpki-client