Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A26B4/7ECAFBD255A911F18E92BC479B833773/lEQwmLiAH9qz9QqhrWffnUrY-uQ.mft
File:                     lEQwmLiAH9qz9QqhrWffnUrY-uQ.mft (raw, json)
Hash identifier:          enRigPHN3As4gRjBjO0PbPNgpw07ajObLKAS6clfJ7c=
Subject key identifier:   4B:91:3B:12:64:3A:DA:5B:C5:4D:00:3B:98:DC:F2:C0:88:EA:40:37
Authority key identifier: 94:44:30:98:B8:80:1F:DA:B3:F5:0A:A1:AD:67:DF:9D:4A:D8:FA:E4
Certificate issuer:       /CN=A91A26B4/serialNumber=94443098B8801FDAB3F50AA1AD67DF9D4AD8FAE4
Certificate serial:       22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEQwmLiAH9qz9QqhrWffnUrY-uQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A26B4/7ECAFBD255A911F18E92BC479B833773/lEQwmLiAH9qz9QqhrWffnUrY-uQ.mft
Manifest number:          21
Signing time:             Thu 23 Jul 2026 10:57:38 +0000
Manifest this update:     Thu 23 Jul 2026 10:57:37 +0000
Manifest next update:     Thu 30 Jul 2026 10:57:37 +0000
Files and hashes:         1: lEQwmLiAH9qz9QqhrWffnUrY-uQ.crl (hash: wju+XRhUOdhO8ofW+5f7CD8Mx4vK1EmDEpzVAY9GzRk=)
                          2: 8DB4437A5B0C11F1A290872FAE833773.roa (hash: 2h3y8zlQJ+5L/RD1VFOM8gQPQw1g78QSU956pQJuSJA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A26B4/7ECAFBD255A911F18E92BC479B833773/lEQwmLiAH9qz9QqhrWffnUrY-uQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A26B4/7ECAFBD255A911F18E92BC479B833773/lEQwmLiAH9qz9QqhrWffnUrY-uQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEQwmLiAH9qz9QqhrWffnUrY-uQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A26B4, serialNumber=94443098B8801FDAB3F50AA1AD67DF9D4AD8FAE4
        Validity
            Not Before: Jul 23 10:57:37 2026 GMT
            Not After : Jul 30 10:57:37 2026 GMT
        Subject: CN=6a61f3a2-9640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e3:c8:e4:3f:ab:47:d8:34:3d:07:30:fa:12:
                    27:d6:a7:9c:5e:01:95:92:66:93:2a:50:23:b2:6b:
                    1d:f7:53:0c:4d:1e:f1:1a:7b:6b:60:6e:c0:dc:44:
                    6e:49:bf:46:33:c3:08:fd:26:48:84:c5:32:2c:67:
                    aa:dc:e6:25:80:4d:6b:3d:db:e7:f8:fe:85:88:69:
                    16:0e:cf:89:2e:2d:30:61:3e:00:06:fe:4d:08:4f:
                    75:4a:4c:6d:49:2f:23:3e:11:87:31:ff:a1:3d:8b:
                    76:34:21:ca:13:35:7f:ea:fa:1a:e1:6f:b4:18:e7:
                    3c:e3:96:dc:59:84:62:e9:e6:68:1d:75:e6:a8:a1:
                    6e:c5:fb:04:69:67:fb:1e:00:cb:1c:70:a8:6e:de:
                    ab:7d:af:50:24:c1:c0:94:ae:a8:8d:69:55:14:fc:
                    16:d0:02:d2:d1:0c:ec:a2:cb:ca:fb:8a:c1:4a:cf:
                    e7:be:17:d3:00:da:82:36:a1:21:75:0b:57:05:29:
                    1f:7f:e7:2b:73:01:6c:2f:89:9f:90:e8:b9:ea:a4:
                    18:fc:f2:7e:2a:02:9e:64:cc:f5:ca:ac:fa:9c:31:
                    96:d6:46:d4:9c:2a:6c:b1:eb:e2:6e:a1:bb:47:6c:
                    43:8e:90:d9:f3:7e:b3:91:6d:2a:8b:ed:c3:e0:90:
                    1b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:91:3B:12:64:3A:DA:5B:C5:4D:00:3B:98:DC:F2:C0:88:EA:40:37
            X509v3 Authority Key Identifier:
                keyid:94:44:30:98:B8:80:1F:DA:B3:F5:0A:A1:AD:67:DF:9D:4A:D8:FA:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A26B4/7ECAFBD255A911F18E92BC479B833773/lEQwmLiAH9qz9QqhrWffnUrY-uQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEQwmLiAH9qz9QqhrWffnUrY-uQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A26B4/7ECAFBD255A911F18E92BC479B833773/lEQwmLiAH9qz9QqhrWffnUrY-uQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:ec:ac:55:6d:ee:b1:a4:76:b3:65:36:c0:cd:13:71:9c:74:
         d6:a2:77:73:fd:c6:d9:6e:02:5c:3c:24:cc:dd:b5:69:26:be:
         07:0a:87:48:07:a9:de:b6:6c:5f:0f:66:ac:cd:ed:aa:21:47:
         52:2f:f5:8e:6c:99:65:a6:14:46:11:46:0e:c3:e0:b7:f0:a8:
         b3:16:37:b9:27:25:0b:ce:83:31:dd:85:25:a6:62:21:9e:23:
         b4:6d:ad:bb:31:05:92:3b:f8:31:94:bf:fe:1b:a8:d6:e4:a3:
         07:30:d5:5e:61:ba:c5:ef:e2:30:23:d9:e8:bf:ff:c4:e0:ae:
         2b:ae:e5:27:03:d1:ed:b0:35:a6:0b:06:e4:76:b3:d3:fd:db:
         3a:15:6b:78:a0:21:b4:db:10:dc:a1:4d:67:cd:ea:af:90:2d:
         c7:64:f0:fe:17:b1:10:6d:74:61:9d:bb:c0:eb:7f:ac:c2:3a:
         87:ba:2b:49:99:da:8b:88:b2:30:80:a4:8a:7f:6d:24:6f:c4:
         b3:88:5a:f7:38:65:19:16:e8:08:b4:34:bb:64:24:58:29:a1:
         10:be:5e:cc:6d:c9:f1:9a:d0:b0:2a:84:c5:1c:70:11:4c:08:
         6c:a1:56:77:f8:ee:2b:08:85:43:14:82:94:d8:3e:ed:df:f7:
         40:27:e1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:44:27 2026 by rpki-client