Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
File:                     Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft (raw, json)
Hash identifier:          sCuTakrdiAcERVjIxdD7a5Li7TgT4DvStCnncqKFDO8=
Subject key identifier:   23:12:FA:17:6D:94:E7:89:76:C7:94:53:4F:02:68:7A:A1:65:10:5A
Authority key identifier: 2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2
Certificate issuer:       /CN=A91A8A85/serialNumber=2EAF60095334E7F0BAA065A92F653F5C744895C2
Certificate serial:       07A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
Manifest number:          0795
Signing time:             Tue 12 May 2026 21:38:58 +0000
Manifest this update:     Tue 12 May 2026 21:38:57 +0000
Manifest next update:     Tue 19 May 2026 21:38:57 +0000
Files and hashes:         1: Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl (hash: SmxnGeZF4n/OmNCzAEWU8qQYlNz00Zdv5kVSb+88Yqg=)
                          2: 6FBFD196C3B811EF82B40031C4F9AE02.roa (hash: r2E33zBN68DzdFBxJzHPWNCremEV/5Gpjhm3sPaTCEM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl
                          rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 21:38:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1960 (0x7a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8A85, serialNumber=2EAF60095334E7F0BAA065A92F653F5C744895C2
        Validity
            Not Before: May 12 21:38:57 2026 GMT
            Not After : May 19 21:38:57 2026 GMT
        Subject: CN=6a039df1-1839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:87:d8:77:cc:4e:47:de:dd:30:a0:5c:1d:1e:
                    93:f3:28:d2:d6:46:5c:c6:fb:9b:2d:18:57:49:62:
                    f6:32:e4:85:35:f2:eb:8a:95:73:32:91:da:65:fd:
                    95:34:6a:ed:35:be:54:b8:c6:70:bc:6c:c8:ab:31:
                    a8:9e:db:35:f0:ad:83:d5:0d:59:da:c4:e5:c0:ff:
                    9a:37:1e:5c:6d:0c:88:d5:1d:33:f9:f6:d6:71:77:
                    c5:45:64:6f:7c:b4:6c:42:34:17:fe:39:c6:0f:b0:
                    fc:b0:f5:23:eb:a5:70:49:59:2d:ca:d3:a2:25:e2:
                    99:0d:3f:ea:a3:e8:9d:09:dc:85:bd:57:43:bf:64:
                    1a:12:d7:6b:3d:78:46:9d:12:5a:9f:d5:31:74:c0:
                    de:77:b0:76:85:a2:65:5c:4a:17:5a:27:87:78:ec:
                    19:3c:6e:f4:cf:fa:63:3b:1c:08:85:7f:80:dd:3a:
                    30:c2:5d:c7:a2:8b:ba:ab:e8:c1:82:af:3f:eb:2d:
                    68:65:35:ed:dc:63:93:31:38:a6:61:de:ef:4d:8d:
                    67:06:1a:cc:c8:8d:e5:af:d2:eb:1d:46:5e:5e:b3:
                    d6:7b:96:a9:54:aa:91:ff:20:e1:fe:a1:09:6b:a5:
                    27:d4:88:dc:11:3a:a7:92:83:4f:24:2e:20:b6:8f:
                    62:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:12:FA:17:6D:94:E7:89:76:C7:94:53:4F:02:68:7A:A1:65:10:5A
            X509v3 Authority Key Identifier:
                keyid:2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:b7:9f:13:5d:50:02:2d:b7:08:bf:ad:df:80:6a:b1:ee:d9:
         a0:bf:7e:23:b7:40:39:32:58:48:c3:64:28:26:b4:50:01:3a:
         62:69:62:32:b0:17:c8:25:48:73:07:60:ea:d6:a2:95:97:06:
         4c:32:df:01:d0:57:6b:aa:a0:d2:ad:bc:29:14:65:7f:f7:3e:
         88:51:12:bb:4f:f9:9f:db:ae:ad:60:bd:82:fa:bc:a6:b3:91:
         d1:28:98:93:12:42:a1:a1:59:b2:55:a1:2a:a5:dd:95:aa:e8:
         6e:f2:0e:57:3f:90:0f:7c:b8:86:92:33:66:5d:ab:29:9b:39:
         02:4d:ad:96:26:1f:24:43:43:43:35:c2:80:e5:7a:be:f7:6d:
         04:1b:c6:d5:de:66:20:da:ec:62:5e:80:c3:6d:e7:87:54:da:
         2e:f3:30:45:1f:cc:01:9e:76:74:4e:c5:86:95:9b:e7:cd:9e:
         36:6a:78:6b:e1:25:b2:f6:10:41:75:06:2f:39:0e:b8:2c:03:
         af:36:29:e4:3c:12:bd:05:24:da:d0:f8:c8:f5:42:e5:fd:85:
         30:0f:95:b2:f8:24:d2:00:42:b9:7b:98:93:0c:c8:eb:b6:39:
         a8:68:a4:15:33:fd:75:05:ee:59:31:ec:06:5c:2b:00:b1:9a:
         f4:97:28:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:32:46 2026 by rpki-client