Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
File:                     LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft (raw, json)
Hash identifier:          7ZSdisNQHvqoajG5Aa//avk8OYQ0y3sWN9oMNkaU+qA=
Subject key identifier:   69:F9:53:9A:8F:6F:49:FF:19:DD:30:C7:C7:7C:02:A7:C5:D1:A1:8C
Authority key identifier: 2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F
Certificate issuer:       /CN=A91A8405/serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F
Certificate serial:       0C75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
Manifest number:          0C46
Signing time:             Wed 22 Jul 2026 19:04:27 +0000
Manifest this update:     Wed 22 Jul 2026 19:04:26 +0000
Manifest next update:     Wed 29 Jul 2026 19:04:26 +0000
Files and hashes:         1: LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl (hash: 9H9B6ee6w0BtJmO32NGa9HoXpryu/Grqt04yAykAdIg=)
                          2: D9173AE459E811ED85614349C4F9AE02.roa (hash: SuPmWKkBjA+MG2np2cJm+aHvROfST1rUMzPE+o3Kdeg=)
                          3: F8088528E65D11EDB5112931C4F9AE02.roa (hash: jPSPyzxZ2jIKGy878SzguBP9UIeeLmvl0IzeDBo7IuY=)
                          4: D7D5B86859E811ED85614349C4F9AE02.roa (hash: TWRBYTEu2YvhIheWJBNIRcOrfed1qkUI5EpJZHqUja8=)
                          5: 933DE524C2B811EEAA1FD486C4F9AE02.roa (hash: MY+T8lD7ELcNmfXtDFy1DozxA/ZjKMCtGQcsDkI7xHM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl
                          rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:04:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3189 (0xc75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8405, serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F
        Validity
            Not Before: Jul 22 19:04:26 2026 GMT
            Not After : Jul 29 19:04:26 2026 GMT
        Subject: CN=6a61143a-28f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:db:df:52:63:9a:53:5c:20:15:84:52:30:5e:
                    11:8e:31:9a:bc:e2:21:7c:79:43:3f:1c:fa:19:b7:
                    e3:41:b2:75:b3:19:65:b6:0b:69:06:2a:b9:7b:a7:
                    ef:8d:73:93:ca:9a:14:8c:77:44:33:91:da:46:1f:
                    fd:c3:97:c1:11:d4:82:ca:2c:38:4c:64:68:bb:7c:
                    08:00:c8:b2:df:e2:6a:89:3c:ad:75:6e:dc:88:75:
                    50:73:51:ea:85:ae:d6:04:fe:3f:b8:0b:c1:3d:fc:
                    ed:3d:0d:1b:73:73:ce:5b:6c:d6:a9:a8:40:56:e9:
                    2f:dc:c4:ba:69:3c:fd:32:de:8b:af:b6:a8:c0:ca:
                    2c:65:f4:04:72:71:db:57:f4:68:97:d8:d7:49:6b:
                    c4:fe:b5:81:74:5f:58:21:9f:4a:96:79:a5:1e:b4:
                    23:49:77:8d:a3:14:67:82:8c:15:7d:61:04:7a:b1:
                    2f:9d:2c:a6:ab:4a:a5:ec:27:fc:61:31:d1:d0:39:
                    32:11:76:68:8e:3f:5b:76:20:13:ba:03:2a:ce:89:
                    53:9c:7b:af:08:2a:33:d6:69:a5:6e:88:ba:fa:a5:
                    27:3b:5b:ac:a4:1e:ee:49:bc:f3:cf:9b:d4:cc:12:
                    24:95:a7:98:04:37:37:76:f3:47:0d:0d:44:24:7f:
                    7e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F9:53:9A:8F:6F:49:FF:19:DD:30:C7:C7:7C:02:A7:C5:D1:A1:8C
            X509v3 Authority Key Identifier:
                keyid:2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:f7:87:ed:75:3a:bf:d2:a4:8b:5a:8f:6d:7d:e4:0a:b7:0f:
         43:2b:08:dd:1c:8d:98:31:c4:06:ad:e6:86:94:27:5a:95:7b:
         10:fd:df:02:f8:db:45:d0:62:81:5d:7c:5b:8f:8d:d7:83:57:
         c4:6f:0e:fd:50:14:a3:b3:ae:48:b4:48:09:27:bd:42:20:dc:
         73:09:38:20:1b:42:6c:20:2c:dc:5e:59:d7:27:ce:5c:b7:9d:
         a9:b8:13:85:87:98:5d:e0:bd:3d:e3:89:90:c7:ec:60:23:1c:
         ae:92:4b:4c:68:b1:00:c5:92:bc:e2:da:1d:55:42:d4:b7:ed:
         53:65:ac:05:e3:fc:dc:4a:5f:ef:5a:4a:81:c2:47:8d:7e:3c:
         84:9d:9a:0c:d7:21:09:a1:52:01:fc:85:8f:16:08:9c:92:c6:
         0a:97:dc:4d:49:76:55:36:37:f0:54:31:ff:05:cc:52:33:b6:
         15:8e:31:39:08:fd:69:18:26:78:1e:da:07:48:df:5b:60:fc:
         0a:a1:e8:e8:b7:3e:f7:32:5d:21:41:64:3f:94:8e:e6:ff:ad:
         7a:1f:5c:17:88:92:9f:89:ae:37:8b:73:88:16:e1:c7:ca:20:
         f4:aa:b8:77:8e:66:55:b1:a8:75:4d:eb:ac:9a:5e:a0:76:23:
         4d:4c:b3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:52:03 2026 by rpki-client