Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.mft
File:                     mAzlu_LPNdYK47ByGKtcqRAULJA.mft (raw, json)
Hash identifier:          iCaZQywLTuIyT1Go6OpHfu/L3+NkjrgMTDfXKRN64j4=
Subject key identifier:   EB:93:04:25:1F:9E:93:C1:F6:5A:68:8F:67:81:9C:D4:B5:FC:C1:B6
Authority key identifier: 98:0C:E5:BB:F2:CF:35:D6:0A:E3:B0:72:18:AB:5C:A9:10:14:2C:90
Certificate issuer:       /CN=A91CDBF5/serialNumber=980CE5BBF2CF35D60AE3B07218AB5CA910142C90
Certificate serial:       EE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mAzlu_LPNdYK47ByGKtcqRAULJA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.mft
Manifest number:          E6
Signing time:             Wed 25 Mar 2026 05:39:39 +0000
Manifest this update:     Wed 25 Mar 2026 05:39:39 +0000
Manifest next update:     Wed 01 Apr 2026 05:39:39 +0000
Files and hashes:         1: mAzlu_LPNdYK47ByGKtcqRAULJA.crl (hash: BKTPt8AXJIysOJti6z6XjUiGW8ur8Pw7lgS4hXO55Wg=)
                          2: EA8CF7A8CB5311EF91F1081BC4F9AE02.roa (hash: 4FvToQacfGL/R01Xqon86uwwcxEvS/mvSJCHSiC6W9c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.crl
                          rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mAzlu_LPNdYK47ByGKtcqRAULJA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238 (0xee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDBF5, serialNumber=980CE5BBF2CF35D60AE3B07218AB5CA910142C90
        Validity
            Not Before: Mar 25 05:39:39 2026 GMT
            Not After : Apr  1 05:39:39 2026 GMT
        Subject: CN=69c3751b-4541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ff:d5:83:10:df:6e:e7:46:43:b2:10:3a:c1:
                    2b:e2:23:ec:b9:cb:90:dc:45:9a:b4:8d:b0:07:33:
                    ee:73:92:1c:26:38:47:3c:70:a4:d6:b7:75:45:82:
                    d8:6a:42:c9:5e:0f:96:37:b8:8f:96:93:e7:33:af:
                    c6:f5:d4:24:8c:05:a0:cb:21:3e:ac:f7:88:42:aa:
                    1e:b6:a6:c0:21:93:1c:2e:c9:bd:59:16:7e:54:5d:
                    ae:a1:96:f3:95:a6:f1:72:33:5e:a2:11:fa:64:c9:
                    02:af:27:7c:e2:09:5c:b0:c3:1a:dd:28:c1:fe:ca:
                    0f:89:90:ed:b6:28:55:4f:fb:f4:dd:45:ae:f3:7a:
                    b5:21:b6:fc:fa:5a:9e:7c:7a:ca:25:92:c6:4b:8d:
                    be:3f:2d:e6:be:b6:92:37:15:c8:65:11:9d:b1:95:
                    e9:1c:a1:2a:08:c4:80:30:47:dd:e9:ab:c7:3e:2b:
                    e8:8c:99:52:4b:b6:4f:f9:38:20:d8:c1:b1:a6:60:
                    6a:ca:b7:2d:db:a7:0c:c4:8f:bf:28:5c:32:3d:12:
                    cc:08:ad:ff:a8:9e:dd:a4:18:fc:25:36:b3:03:56:
                    d8:14:0a:7b:59:3b:96:41:85:76:0a:62:42:8e:53:
                    a0:86:37:ee:6a:a0:2e:91:70:fe:34:e3:28:d5:18:
                    4b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:93:04:25:1F:9E:93:C1:F6:5A:68:8F:67:81:9C:D4:B5:FC:C1:B6
            X509v3 Authority Key Identifier:
                keyid:98:0C:E5:BB:F2:CF:35:D6:0A:E3:B0:72:18:AB:5C:A9:10:14:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mAzlu_LPNdYK47ByGKtcqRAULJA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:e9:cd:ae:68:e3:5c:36:fe:e6:39:67:c6:85:b8:7a:27:c5:
         dc:a4:29:e2:ff:e3:c2:3f:97:96:f2:c3:79:4b:8e:16:ad:90:
         98:ee:d8:8f:0f:be:71:aa:f7:3f:3b:bb:c4:46:ca:2b:67:51:
         17:1a:d0:0b:74:e6:61:e4:68:4d:0b:87:13:c5:f9:7f:6e:11:
         e5:05:74:4f:2d:a1:9e:fa:41:20:09:d9:3b:fb:e5:ec:06:6e:
         f4:e5:ca:09:2c:81:c6:6b:bc:a7:aa:af:ae:10:fa:e7:34:89:
         d9:41:b5:ae:82:d1:30:38:c1:16:ab:a8:9b:51:20:0e:7b:e9:
         77:c4:2c:7c:6c:35:8f:d6:5f:6b:75:34:d1:07:f7:1d:ed:3c:
         14:5d:44:e2:81:1c:f7:c9:85:64:5d:74:41:7d:5d:c3:2d:15:
         75:85:83:8c:17:ea:2e:de:7c:3b:2f:36:58:bb:9d:7f:f7:b2:
         b5:c6:c9:94:06:da:87:b4:ef:0e:aa:c0:d9:22:56:11:41:a4:
         2e:da:37:14:c2:82:0a:a5:65:e0:a7:56:26:28:64:dc:bd:c6:
         df:51:59:56:c1:59:7d:29:dc:0a:6d:b3:77:12:ab:4d:d5:f9:
         22:3d:dc:96:89:b0:4a:43:9e:17:85:29:ff:3d:d6:5c:a0:1b:
         58:f0:35:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:55:04 2026 by rpki-client