Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.mft
File:                     mAzlu_LPNdYK47ByGKtcqRAULJA.mft (raw, json)
Hash identifier:          S66810lZ5htURu22bNGFOnyFVj59eVgZspqIfbxH6/M=
Subject key identifier:   CC:F4:D7:33:65:81:20:52:FE:5E:C0:F9:A1:83:E5:6B:65:D9:A6:47
Authority key identifier: 98:0C:E5:BB:F2:CF:35:D6:0A:E3:B0:72:18:AB:5C:A9:10:14:2C:90
Certificate issuer:       /CN=A91CDBF5/serialNumber=980CE5BBF2CF35D60AE3B07218AB5CA910142C90
Certificate serial:       0106
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mAzlu_LPNdYK47ByGKtcqRAULJA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.mft
Manifest number:          FE
Signing time:             Mon 11 May 2026 06:16:02 +0000
Manifest this update:     Mon 11 May 2026 06:16:02 +0000
Manifest next update:     Mon 18 May 2026 06:16:02 +0000
Files and hashes:         1: mAzlu_LPNdYK47ByGKtcqRAULJA.crl (hash: UP3oPsbF5MiIXt4gCA7E3mx4mvji4bi51W8JLtVHhqs=)
                          2: EA8CF7A8CB5311EF91F1081BC4F9AE02.roa (hash: 4FvToQacfGL/R01Xqon86uwwcxEvS/mvSJCHSiC6W9c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.crl
                          rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mAzlu_LPNdYK47ByGKtcqRAULJA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:16:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 262 (0x106)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDBF5, serialNumber=980CE5BBF2CF35D60AE3B07218AB5CA910142C90
        Validity
            Not Before: May 11 06:16:02 2026 GMT
            Not After : May 18 06:16:02 2026 GMT
        Subject: CN=6a017422-d203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b7:35:f3:22:71:f9:be:69:9c:47:64:1a:05:
                    1f:91:52:c9:c2:ec:e8:20:65:ba:37:5d:86:b3:03:
                    e8:71:59:ba:81:3d:e9:87:20:2a:1a:36:a1:e2:a5:
                    89:2f:57:f5:4f:f3:d6:63:fb:f0:6e:5b:e6:89:4c:
                    0c:40:e5:c3:cf:7d:ce:0f:ad:81:43:4a:c6:9a:0e:
                    bf:8e:43:da:3d:27:72:6e:47:54:1a:0b:04:7d:3c:
                    c9:f4:77:42:9c:a8:fc:56:42:48:25:ee:02:08:64:
                    9f:e4:ea:6a:7d:c3:83:07:e7:97:89:fb:0f:6a:c4:
                    a8:cf:b8:1d:ff:9f:8a:66:75:0a:8a:9b:8a:61:f3:
                    7d:3f:7d:28:2a:40:1b:c9:5e:ee:05:63:2d:ad:4e:
                    c1:6f:aa:2f:82:be:c7:f7:ad:ff:f2:0f:58:b8:3f:
                    78:c8:65:88:31:f4:f8:91:35:f6:5a:bb:b5:71:2b:
                    17:ae:96:8e:7b:1b:11:79:58:5b:79:bd:ef:ed:20:
                    33:17:b2:9e:fe:58:32:da:30:b3:a8:21:59:97:f9:
                    87:c8:67:1d:a2:19:a2:f4:21:68:96:a0:78:0c:99:
                    24:51:bd:e9:81:02:33:78:10:41:16:a3:01:0c:01:
                    a2:85:ff:1e:14:74:45:99:0f:70:b8:24:d5:ed:86:
                    2d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F4:D7:33:65:81:20:52:FE:5E:C0:F9:A1:83:E5:6B:65:D9:A6:47
            X509v3 Authority Key Identifier:
                keyid:98:0C:E5:BB:F2:CF:35:D6:0A:E3:B0:72:18:AB:5C:A9:10:14:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mAzlu_LPNdYK47ByGKtcqRAULJA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:42:38:58:df:05:7c:5e:f0:19:af:db:3a:59:68:d0:27:5b:
         ad:eb:5f:4d:95:e2:36:4f:84:b8:a4:0a:4b:a9:6c:cb:26:41:
         88:70:b2:2b:4d:82:40:63:6a:82:61:29:12:f5:a1:01:2d:04:
         f3:5b:ea:62:3f:10:ed:e3:53:b2:7e:6f:12:81:db:95:2e:38:
         f6:d8:20:fd:a9:27:d3:a6:52:0d:9b:e4:9b:97:33:11:65:05:
         dd:da:97:32:e2:71:99:b7:fd:87:d8:13:2e:3f:4c:37:da:21:
         c3:47:3d:ba:e3:85:05:d9:cc:de:80:be:b6:ee:bd:ce:35:10:
         37:05:b1:fc:a7:4b:9f:89:eb:a4:d5:41:f2:17:61:85:46:fa:
         59:b7:9c:36:21:c4:ac:07:71:ca:19:6c:33:47:1f:a6:95:88:
         5b:e6:37:fa:de:47:80:6b:34:b2:4c:dc:6d:39:b0:27:42:54:
         6c:0b:e9:2c:b7:a6:59:5a:2a:1b:45:a4:cb:f7:bd:fa:24:b8:
         ec:db:98:60:55:8b:71:40:2e:43:32:85:5c:4f:a7:e4:c6:1b:
         0a:33:3b:4e:01:8d:d8:a5:99:a9:2f:80:da:d8:a4:bd:bc:48:
         c1:62:f2:d7:b6:45:52:0a:45:9b:c9:52:fb:f4:75:23:b9:1b:
         47:ac:a3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:57:19 2026 by rpki-client