Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
File:                     LnKDqP3Vzws9n6or6XQogZiRk6U.mft (raw, json)
Hash identifier:          uA0kHjOh1ZrfPFtYcfW/H2LWoes592V4QuTi1yf29qg=
Subject key identifier:   17:0F:2D:75:33:38:24:A5:B8:6F:78:01:77:CE:87:BE:13:82:0E:77
Authority key identifier: 2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5
Certificate issuer:       /CN=A91DFADF/serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5
Certificate serial:       0A6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
Manifest number:          0A58
Signing time:             Tue 12 May 2026 19:45:26 +0000
Manifest this update:     Tue 12 May 2026 19:45:25 +0000
Manifest next update:     Tue 19 May 2026 19:45:25 +0000
Files and hashes:         1: LnKDqP3Vzws9n6or6XQogZiRk6U.crl (hash: RAt2G2IK+7Bt5nCiv5rRhhLjVf/MX1y34cm/yP6FvMg=)
                          2: 651384A6766811EF96E4115EC4F9AE02.roa (hash: 4tvOJ0DlZvwroxMkIv2YzecHFGQeqL4hT/QTBep3keQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl
                          rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:45:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2668 (0xa6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFADF, serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5
        Validity
            Not Before: May 12 19:45:25 2026 GMT
            Not After : May 19 19:45:25 2026 GMT
        Subject: CN=6a038356-94dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:17:9b:65:e0:46:d6:8c:24:96:27:10:bf:6a:
                    59:3f:d8:a3:eb:8d:ce:2d:5a:93:a9:77:db:c1:21:
                    85:ac:7d:22:b4:cf:23:34:e3:cd:d8:5e:7f:85:4f:
                    7b:3e:75:f2:16:1a:3d:68:f4:d5:ae:ab:d6:73:fd:
                    92:a6:bd:7b:ba:1f:d1:e2:a3:47:fc:69:0d:a8:74:
                    48:67:8d:c0:7c:27:39:41:b8:08:31:a7:a1:05:d7:
                    9a:a6:08:a6:a4:00:59:34:95:c5:2b:6e:13:32:b2:
                    ad:93:34:e1:a9:8b:82:a2:10:43:53:e5:92:4c:fd:
                    bc:d8:3d:16:bc:94:4c:3c:37:89:53:4d:4e:d2:fa:
                    8b:81:0b:c1:7d:41:04:b2:8c:26:1b:4d:77:12:ad:
                    91:aa:66:8a:fe:fb:57:4d:73:4d:67:6a:45:e7:88:
                    a7:2c:2c:92:8f:2f:a5:14:3c:28:ce:47:2b:b4:01:
                    d0:ca:76:07:a2:ef:17:67:6e:71:b7:c5:c4:ff:92:
                    c0:e3:1f:2f:9c:7b:a7:f2:a3:5e:5c:63:e4:c5:d5:
                    5d:42:59:9f:fe:68:5a:32:24:5d:e3:0a:16:d5:17:
                    14:bd:65:8f:a2:a0:ea:4e:00:aa:92:83:16:9d:02:
                    29:25:d0:31:59:f2:d7:af:42:4f:fb:0c:1a:72:a4:
                    39:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:0F:2D:75:33:38:24:A5:B8:6F:78:01:77:CE:87:BE:13:82:0E:77
            X509v3 Authority Key Identifier:
                keyid:2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:2d:1e:c6:7e:19:8a:7d:e5:b4:46:c8:a8:6e:aa:1c:7f:17:
         77:d7:ae:31:24:54:76:0f:b0:eb:07:c2:94:8b:9e:2a:ac:00:
         fb:53:98:54:35:3d:a3:79:93:f5:10:6a:f4:7b:a2:c5:57:ff:
         5f:62:58:e2:3e:8a:f2:54:c1:80:ab:d2:fe:24:e5:9d:d5:d0:
         f2:d0:e7:ef:f1:2a:72:24:c2:e8:1b:d8:c2:5c:66:7b:69:a3:
         02:c3:b1:a4:8b:81:28:21:99:81:e1:07:a2:21:7d:11:62:9a:
         6a:cd:17:a9:5a:53:58:15:96:15:79:b6:f2:c5:43:d0:09:70:
         c2:dd:16:09:a8:62:6a:0d:d1:75:ce:f3:03:dc:d0:70:32:c1:
         52:98:ce:9c:74:b2:c4:02:f9:6a:9f:7d:1a:ed:3b:55:19:5b:
         27:64:0b:28:c7:3a:66:0f:df:97:5b:17:c0:c2:12:22:fb:c9:
         ec:45:6e:3b:55:d0:62:d8:b5:df:b9:54:c5:39:d1:d9:13:12:
         94:20:51:51:7d:10:3b:e6:f5:47:ef:fd:49:2d:b1:99:d9:8b:
         ef:91:fe:d6:7c:62:d7:c8:4a:8c:38:c6:2e:f5:2f:93:de:ee:
         55:3a:2c:0f:86:ab:84:3e:7d:14:f4:42:72:d5:b2:73:94:83:
         ed:49:3d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:21:59 2026 by rpki-client