Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft
File:                     _LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft (raw, json)
Hash identifier:          ckhpZFLrOTYZZNejlzOCc6zkxguaruOhslEwKAxFN44=
Subject key identifier:   D9:BE:88:CF:14:D7:1A:7E:7F:7F:F0:13:57:14:31:47:72:C3:9A:68
Authority key identifier: FC:B2:3C:7B:F5:F1:93:56:27:5B:AC:F5:7C:DB:55:BF:D6:0E:04:AC
Certificate issuer:       /CN=A91D599B/serialNumber=FCB23C7BF5F19356275BACF57CDB55BFD60E04AC
Certificate serial:       159C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft
Manifest number:          1592
Signing time:             Tue 12 May 2026 16:46:20 +0000
Manifest this update:     Tue 12 May 2026 16:46:19 +0000
Manifest next update:     Tue 19 May 2026 16:46:19 +0000
Files and hashes:         1: _LI8e_Xxk1YnW6z1fNtVv9YOBKw.crl (hash: F91bKEiUURZGCsfm/IlgEXT6FNuWWQ5khOJ3zJiGOdw=)
                          2: 1BFCE1E0554F11E8A5C82D57C4F9AE02.roa (hash: Uw1PTuG+Y4DM/ehlZNwhTINh8c0K6j13Gv43hlbWGr4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.crl
                          rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:46:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5532 (0x159c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D599B, serialNumber=FCB23C7BF5F19356275BACF57CDB55BFD60E04AC
        Validity
            Not Before: May 12 16:46:19 2026 GMT
            Not After : May 19 16:46:19 2026 GMT
        Subject: CN=6a03595b-e190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:53:60:65:61:80:f5:f4:7d:72:eb:eb:b6:ae:
                    9a:aa:32:25:dd:02:46:2e:ee:4e:2b:d9:67:ea:e6:
                    b5:4d:30:65:c3:13:6c:94:67:5d:00:aa:45:62:54:
                    2c:d4:4d:7c:7d:49:39:c8:dd:52:20:ed:de:bf:c6:
                    39:c4:0a:b2:74:fd:5a:26:cf:ea:b6:0c:e6:e8:9a:
                    20:e4:55:35:78:aa:34:0c:0c:92:98:1c:e4:76:c3:
                    3a:87:11:80:b3:a2:07:de:e2:ca:ce:7e:31:e1:9e:
                    c8:d1:0e:de:70:6d:c5:7c:dd:7c:0e:a9:ed:d5:5a:
                    43:a8:44:9c:6c:06:47:9e:b9:1c:0d:83:07:f7:8e:
                    e5:db:a8:4e:00:2b:90:05:db:0c:17:be:0f:a0:9b:
                    f8:30:a9:a1:3f:09:d7:9b:8b:da:8a:43:1d:d2:ab:
                    9a:20:d2:a3:48:75:e3:fb:32:8e:e0:75:9e:dd:4e:
                    19:8b:5b:4d:42:95:b5:b4:8a:91:55:8d:d7:3e:ed:
                    98:af:8f:fa:7e:0c:a0:40:33:6d:1e:95:de:b6:1f:
                    dd:bf:b9:ba:e5:fe:f3:01:6e:97:15:88:dc:a7:2a:
                    50:0a:ff:fd:c7:7c:63:c8:80:3f:4d:c9:a0:0f:6c:
                    f8:56:2a:05:56:95:22:33:f8:86:eb:1d:f2:fa:e5:
                    1e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:BE:88:CF:14:D7:1A:7E:7F:7F:F0:13:57:14:31:47:72:C3:9A:68
            X509v3 Authority Key Identifier:
                keyid:FC:B2:3C:7B:F5:F1:93:56:27:5B:AC:F5:7C:DB:55:BF:D6:0E:04:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:71:5d:bb:26:75:ea:ee:78:d4:86:ce:c3:5c:13:cf:44:b8:
         18:95:ba:ad:08:c1:03:5e:15:bd:a3:06:68:ca:92:a8:b8:e9:
         a4:e5:46:17:ad:65:b2:f0:4c:d5:bc:cc:a8:28:65:94:dc:52:
         d2:63:2c:7a:27:e9:04:0b:be:65:86:21:bf:e4:d8:53:63:d0:
         d9:29:ea:94:17:51:83:cf:64:56:95:e9:d2:00:f8:b5:73:b9:
         c5:b7:2b:93:c8:7b:93:88:f3:80:b2:8e:27:6f:dd:82:18:9c:
         6c:73:a5:7d:85:69:9b:f9:d7:fe:7b:d0:00:53:70:09:c8:5b:
         fb:15:11:0c:db:1e:65:08:36:c2:b4:ac:ad:b3:f1:3f:81:4f:
         b6:d2:8b:c3:62:5c:a6:39:dc:10:fd:6c:90:58:46:2a:60:ff:
         29:c5:1a:17:2f:20:1e:38:f5:78:6b:bc:74:61:c8:ec:e9:9b:
         f7:12:52:e4:64:75:ea:7c:ab:dd:76:2f:23:f2:25:92:ea:61:
         df:8c:a2:92:c4:b1:06:8d:3a:2c:9f:fd:0f:a1:d6:20:3c:6d:
         67:e9:9a:56:b0:68:08:ed:f1:0e:13:65:92:f8:74:1d:97:b3:
         6e:85:f9:5b:a5:4e:26:4a:da:4f:f4:1f:d3:b4:e6:1e:81:ba:
         bf:14:0f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:55:05 2026 by rpki-client