Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft
File:                     lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft (raw, json)
Hash identifier:          9qoARBJtzxRTO1Mtm+1gKJDVoPR+R5C0h/8DonbCkJw=
Subject key identifier:   5D:0F:82:49:BF:8F:30:DF:1E:74:15:AC:BA:20:1A:17:92:7C:B8:66
Authority key identifier: 96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2
Certificate issuer:       /CN=A919EFDE/serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2
Certificate serial:       3608
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft
Manifest number:          3590
Signing time:             Wed 22 Jul 2026 14:25:21 +0000
Manifest this update:     Wed 22 Jul 2026 14:25:21 +0000
Manifest next update:     Wed 29 Jul 2026 14:25:21 +0000
Files and hashes:         1: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl (hash: boCvtYUkGqkQt7dZ1NzhG6xzztWBcHLvE5R4w7nH0gU=)
                          2: B2690D6CCA5511EE9683413FC4F9AE02.roa (hash: A+a3H+TI3Fy7ECqMtSSHf3q0bX9LrpXD0sKYqQLyRzM=)
                          3: 1B513B10FA3011E9BF5A291EC4F9AE02.roa (hash: P3ZRq1xA8QtDqTnLHnRb3kjohttdnDktPk8gMx+p6lU=)
                          4: 5113BF7CFE6011EA9D63505CC4F9AE02.roa (hash: M4WBswg1YJ4TezL6E7iYouHn8KwdFBvWXJuWc2T2coA=)
                          5: A9D92784B0CA11E59BE6876FC4F9AE02.roa (hash: khATrdo5z+GWLARkNlA8hcKpjIC1yChn98ttcidrqFs=)
                          6: 19DE7DB0FA3011E9BF5A291EC4F9AE02.roa (hash: IrGm+0rrhe6nwg8fMZphy3bLySRgbqK4gCqvkr1SaPY=)
                          7: 1A7891D4FA3011E9BF5A291EC4F9AE02.roa (hash: KeE1mpgZhkEhqP2LCs6EXDMfZu6Zxoag+TQ3ftbgOYk=)
                          8: F6D63E40054A11EAA00FB024C4F9AE02.roa (hash: 7jOIbaiPNEQ5tv45ewj5Fz6f7M91EZnlJBs6MK56S3w=)
                          9: A769D0DEB0CA11E59BE6876FC4F9AE02.roa (hash: g0qbK+AgDky7jS+tfKk3FPH4lZwss0lhqd032VOFuPI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl
                          rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:25:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13832 (0x3608)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EFDE, serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2
        Validity
            Not Before: Jul 22 14:25:21 2026 GMT
            Not After : Jul 29 14:25:21 2026 GMT
        Subject: CN=6a60d2d1-2be7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ae:8c:cd:c6:d5:ee:fb:07:e1:cf:eb:c8:25:
                    92:ed:11:40:12:85:a2:de:6b:b1:a7:60:b4:89:c2:
                    e6:28:8d:bb:3d:cd:75:15:05:72:88:53:e4:b6:ad:
                    c9:dc:ec:99:e7:a5:5c:e5:4d:19:08:5a:0e:82:f5:
                    f4:a4:18:7e:c3:d6:c0:6d:a2:b9:b6:f3:94:25:e1:
                    da:9e:fa:e4:45:c5:01:df:5c:24:9f:40:a4:86:f5:
                    10:46:6c:c9:62:de:80:4f:74:76:1d:bd:ea:b1:bd:
                    3d:73:8d:58:1d:dc:4e:b5:97:86:0b:80:34:f3:2c:
                    15:75:45:78:24:89:db:5c:29:b1:9e:f4:6b:f4:95:
                    b4:0b:f5:a2:77:e6:d5:d9:4a:5e:c2:3e:d3:d8:6a:
                    9d:ed:81:52:29:05:38:f4:98:f1:9e:98:a1:3a:a6:
                    a4:6c:f9:5b:11:87:92:bf:10:b9:26:9c:9d:8e:da:
                    87:09:21:c3:a7:3b:ce:db:92:02:26:cd:ba:f2:33:
                    57:f1:0e:d6:50:df:69:45:ea:d3:69:33:a0:8c:5d:
                    2f:e2:a8:ef:17:76:aa:71:f5:9c:d7:f2:8a:93:c0:
                    47:0d:11:80:8a:78:7f:4d:53:1e:8b:95:21:eb:74:
                    fe:35:af:d0:81:24:40:83:2e:81:3f:cb:6b:a0:1a:
                    df:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:0F:82:49:BF:8F:30:DF:1E:74:15:AC:BA:20:1A:17:92:7C:B8:66
            X509v3 Authority Key Identifier:
                keyid:96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:41:84:8f:5a:d4:37:4c:f6:3b:28:c7:0f:ac:91:76:57:a6:
         d9:9a:5b:0c:e3:aa:eb:1d:e7:14:49:83:85:4c:9d:2f:f8:c3:
         dc:fb:40:a9:bb:c1:f6:77:d9:52:41:b8:9c:c8:98:67:f2:7b:
         c4:a8:c2:e2:8b:a5:a0:b2:4f:7c:6c:c5:44:98:00:50:e9:e8:
         a4:a1:8e:e6:eb:f6:d5:1f:c3:17:2b:b7:f0:8f:93:dd:02:76:
         3a:41:ed:04:ae:aa:53:a4:d1:ec:2c:11:5e:6e:fd:e9:5b:3a:
         3a:65:ca:3d:77:37:40:6e:c1:3b:a0:df:44:34:bf:49:99:23:
         a6:be:b4:73:be:3b:9e:37:f4:0e:9a:5c:3e:21:a6:34:3b:ee:
         9b:6e:0b:ac:5e:51:22:eb:cd:d7:14:a8:db:02:4b:1d:5a:1e:
         1e:79:50:81:e9:b1:37:e0:93:ed:a3:91:e0:f8:9b:f1:fe:cc:
         9f:b1:65:3e:43:1d:09:ca:d3:4c:a3:c2:8e:fe:8c:d8:b9:5a:
         fe:ee:6e:54:d8:df:74:27:60:2a:f5:78:d7:4f:df:ef:e9:5e:
         6a:2d:f0:73:56:14:6d:0a:a7:77:82:ff:37:10:24:86:01:9f:
         cb:6a:5f:7a:e0:64:b0:4a:e8:9d:46:3b:b6:02:e3:49:f8:f4:
         85:34:31:8a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVGREUxMTAvBgNVBAUTKDk2NjlDRDVCM0Q4NzM1ODE1QTY1RDY1OUYyNzQxQjQz
RTY0NzMyQjIwHhcNMjYwNzIyMTQyNTIxWhcNMjYwNzI5MTQyNTIxWjAYMRYwFAYD
VQQDEw02YTYwZDJkMS0yYmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzK6MzcbV7vsH4c/ryCWS7RFAEoWi3muxp2C0icLmKI27Pc11FQVyiFPktq3J
3OyZ56Vc5U0ZCFoOgvX0pBh+w9bAbaK5tvOUJeHanvrkRcUB31wkn0CkhvUQRmzJ
Yt6AT3R2Hb3qsb09c41YHdxOtZeGC4A08ywVdUV4JInbXCmxnvRr9JW0C/Wid+bV
2Upewj7T2Gqd7YFSKQU49JjxnpihOqakbPlbEYeSvxC5JpydjtqHCSHDpzvO25IC
Js268jNX8Q7WUN9pRerTaTOgjF0v4qjvF3aqcfWc1/KKk8BHDRGAinh/TVMei5Uh
63T+Na/QgSRAgy6BP8troBrfrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF0Pgkm/
jzDfHnQVrLogGheSfLhmMB8GA1UdIwQYMBaAFJZpzVs9hzWBWmXWWfJ0G0PmRzKy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUZERS9DQzQ1RUNBODFE
ODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5ZRmFaZFpaOG5RYlEtWkhN
ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xtbk5XejJITllGYVpkWlo4blFiUS1aSE1ySS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RUZERS9DQzQ1RUNBODFEODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5Z
RmFaZFpaOG5RYlEtWkhNckkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPUGEj1rUN0z2OyjHD6yRdlem2ZpbDOOq6x3nFEmDhUydL/jD3PtAqbvB9nfZ
UkG4nMiYZ/J7xKjC4ouloLJPfGzFRJgAUOnopKGO5uv21R/DFyu38I+T3QJ2OkHt
BK6qU6TR7CwRXm796Vs6OmXKPXc3QG7BO6DfRDS/SZkjpr60c747njf0DppcPiGm
NDvum24LrF5RIuvN1xSo2wJLHVoeHnlQgemxN+CT7aOR4Pib8f7Mn7FlPkMdCcrT
TKPCjv6M2Lla/u5uVNjfdCdgKvV410/f7+leai3wc1YUbQqnd4L/NxAkhgGfy2pf
euBksEronUY7tgLjSfj0hTQxig==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:27:39 2026 by rpki-client