Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/laNNlXWF4FXwNo5HTaPR-bvPqN8.mft
File:                     laNNlXWF4FXwNo5HTaPR-bvPqN8.mft (raw, json)
Hash identifier:          1yBWBX7xklttOnbh1UqxTT0pZpIMsxK/v2YAsdgmY+U=
Subject key identifier:   65:1D:D9:2A:E7:09:9C:A3:EC:42:56:03:D2:AC:94:80:C8:5B:A2:57
Authority key identifier: 95:A3:4D:95:75:85:E0:55:F0:36:8E:47:4D:A3:D1:F9:BB:CF:A8:DF
Certificate issuer:       /CN=A91D2B56/serialNumber=95A34D957585E055F0368E474DA3D1F9BBCFA8DF
Certificate serial:       0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/laNNlXWF4FXwNo5HTaPR-bvPqN8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/laNNlXWF4FXwNo5HTaPR-bvPqN8.mft
Manifest number:          0C
Signing time:             Mon 11 May 2026 09:18:29 +0000
Manifest this update:     Mon 11 May 2026 09:18:28 +0000
Manifest next update:     Mon 18 May 2026 09:18:28 +0000
Files and hashes:         1: laNNlXWF4FXwNo5HTaPR-bvPqN8.crl (hash: /wIFA10yLeEvFAhZ0iK/PsGdGdnHTWqv0/IE4xhQrAo=)
                          2: 04EDE6343E2B11F1B4A6C6E4B6833773.roa (hash: iVmvGDCFN84Pkf1vGvrKze2zsX7JLtz20kszTrEJLI0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/laNNlXWF4FXwNo5HTaPR-bvPqN8.crl
                          rsync://rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/laNNlXWF4FXwNo5HTaPR-bvPqN8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/laNNlXWF4FXwNo5HTaPR-bvPqN8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2B56, serialNumber=95A34D957585E055F0368E474DA3D1F9BBCFA8DF
        Validity
            Not Before: May 11 09:18:28 2026 GMT
            Not After : May 18 09:18:28 2026 GMT
        Subject: CN=6a019ee5-faf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:70:fa:1f:e7:0e:d8:a0:5e:18:17:c9:fa:e6:
                    02:34:fa:43:05:41:c5:9b:69:da:03:41:da:8f:0c:
                    8d:9b:6d:03:60:22:37:1d:cd:74:68:87:8c:3a:3a:
                    e4:cf:61:0b:2f:d0:f2:b7:3a:bb:65:8d:f6:ea:67:
                    2f:70:5c:89:4a:d2:a9:1c:28:6c:9d:0b:bd:af:81:
                    3c:98:87:8b:e0:4d:75:b6:2f:fb:d2:23:4e:0f:de:
                    2e:4a:24:eb:ec:16:e5:00:30:d1:9f:cb:f9:81:b6:
                    ba:8c:4b:9c:e0:2d:ab:e6:5b:8e:ba:a6:4f:a2:0b:
                    e1:74:cf:ed:0d:a9:b6:70:f7:48:15:c6:a4:00:d4:
                    4b:ff:c9:f0:4a:1f:24:0c:7e:fa:9f:d0:83:b7:d0:
                    29:87:21:cb:78:36:47:c0:f9:7a:15:c4:e1:d9:b4:
                    4c:8e:16:d6:76:6f:32:66:9f:41:62:3e:c5:de:75:
                    32:5c:ef:78:c9:b8:f0:51:e7:9c:32:82:c0:a7:63:
                    02:af:6b:4e:bb:d4:41:f0:f7:54:79:16:d9:de:ae:
                    ea:10:71:15:50:c2:d5:1c:08:52:26:e2:0f:6e:e3:
                    d1:05:97:3a:7d:86:7c:fc:eb:08:f5:77:5c:8d:ff:
                    92:24:f7:6d:01:7e:fc:bc:44:5c:18:65:3a:79:26:
                    8b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:1D:D9:2A:E7:09:9C:A3:EC:42:56:03:D2:AC:94:80:C8:5B:A2:57
            X509v3 Authority Key Identifier:
                keyid:95:A3:4D:95:75:85:E0:55:F0:36:8E:47:4D:A3:D1:F9:BB:CF:A8:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/laNNlXWF4FXwNo5HTaPR-bvPqN8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/laNNlXWF4FXwNo5HTaPR-bvPqN8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/laNNlXWF4FXwNo5HTaPR-bvPqN8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:84:d3:5e:27:b1:c0:1f:cd:f4:e4:8a:20:e0:0f:16:9e:63:
         eb:c4:dc:d6:68:fe:25:fc:06:8b:20:cc:f7:81:0c:f1:27:66:
         85:63:1d:21:b8:02:4b:d7:36:78:6f:6d:27:f5:97:b6:a2:83:
         92:c7:ca:cb:68:f4:7e:90:7f:71:d9:5f:81:c3:8a:3c:c9:fb:
         eb:18:55:af:50:39:ed:8e:19:e5:1a:bb:03:89:b2:27:49:8c:
         eb:9b:fb:0e:9a:6d:b1:1b:67:3e:fe:d7:43:05:e4:37:06:b4:
         f4:6f:85:5c:0c:4f:1a:4a:20:14:45:c7:c1:39:b2:19:02:69:
         d7:70:85:6e:74:77:47:85:c9:cc:bd:f6:c2:56:44:cd:86:e1:
         18:e7:2a:4c:eb:72:fb:4e:fa:aa:36:84:ca:af:99:d3:21:10:
         2c:cb:8e:ff:c6:15:c3:16:f9:d0:da:7d:54:94:01:35:49:66:
         59:42:29:c0:67:2a:6b:5b:fb:81:0e:86:53:16:11:2f:00:9b:
         e3:7a:1e:da:bc:63:38:c8:2c:6d:04:11:95:82:ce:38:91:21:
         d8:1e:24:ab:b0:49:2b:5e:7c:ae:66:56:3f:fe:e5:8a:05:15:
         5c:2a:7a:cd:80:05:ba:5c:84:4f:ed:fd:4f:d0:9c:a0:66:88:
         7b:95:0f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:16:49 2026 by rpki-client