Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft
File:                     lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft (raw, json)
Hash identifier:          PZq/Y1bwiRTveKgJaEi5lr2SKbT422Vzw6VYmQq2G3g=
Subject key identifier:   6F:C7:3F:09:4D:7F:9A:AD:60:9A:03:13:86:7F:D8:5F:AB:E5:CA:8B
Authority key identifier: 95:06:8B:B3:0A:BC:7E:00:7F:D8:38:7E:4D:E0:A8:3E:FA:AD:D4:72
Certificate issuer:       /CN=A91E9DF8/serialNumber=95068BB30ABC7E007FD8387E4DE0A83EFAADD472
Certificate serial:       06C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQaLswq8fgB_2Dh-TeCoPvqt1HI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft
Manifest number:          06B7
Signing time:             Wed 22 Jul 2026 23:02:12 +0000
Manifest this update:     Wed 22 Jul 2026 23:02:11 +0000
Manifest next update:     Wed 29 Jul 2026 23:02:11 +0000
Files and hashes:         1: lQaLswq8fgB_2Dh-TeCoPvqt1HI.crl (hash: Ogc3kLdRXeKewkVC68eQhVfNjsK+cLXGRpEVRxPM4Uw=)
                          2: A8086732B6DA11EBB7B67954C4F9AE02.roa (hash: 9cNeCzppQ/e103+t/5bNmmQB3XDS/R3mXfxCBYG3Y9w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.crl
                          rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQaLswq8fgB_2Dh-TeCoPvqt1HI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1728 (0x6c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9DF8, serialNumber=95068BB30ABC7E007FD8387E4DE0A83EFAADD472
        Validity
            Not Before: Jul 22 23:02:11 2026 GMT
            Not After : Jul 29 23:02:11 2026 GMT
        Subject: CN=6a614bf4-281a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:98:1d:2a:bd:39:76:1a:8c:50:d2:02:fc:68:
                    b3:1a:52:a2:21:ff:d2:b8:47:fe:e1:e7:36:48:c6:
                    5a:69:5f:bd:c4:e7:0d:46:06:bf:88:08:d5:75:7b:
                    78:66:2b:c4:f8:e8:1b:b3:7b:86:a8:6a:83:0d:34:
                    f3:61:63:12:3d:bd:44:f6:a5:57:cf:00:ab:e2:63:
                    48:3f:6c:87:fc:28:33:78:ba:ae:b8:7d:8e:f1:1e:
                    aa:3f:1c:1f:96:6b:9c:13:94:a4:5c:6f:e5:eb:02:
                    28:89:89:7f:cc:3b:e2:b4:f4:1d:80:c7:8e:3d:cd:
                    c8:74:18:ac:1a:e9:d1:90:d1:30:2a:5e:75:9c:36:
                    c7:58:d8:3f:ed:02:2d:0e:5d:08:05:a2:cc:9c:53:
                    bf:04:a3:da:e8:c7:c0:61:9e:25:61:1e:ec:8e:57:
                    90:87:b5:a7:2d:c1:8e:d5:e4:b1:7b:31:ea:94:01:
                    bb:b2:90:33:18:56:ad:84:fa:79:71:80:d8:01:f8:
                    b2:9c:7b:f6:32:52:e8:52:8a:17:d7:0d:66:71:67:
                    01:bf:98:35:4e:29:5b:d2:fd:72:16:ee:38:7a:7a:
                    27:d2:02:49:25:61:c8:2a:34:10:2c:2a:03:aa:72:
                    c9:ba:88:dc:a8:1e:1c:b0:0f:5c:c4:80:1e:01:5f:
                    c2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C7:3F:09:4D:7F:9A:AD:60:9A:03:13:86:7F:D8:5F:AB:E5:CA:8B
            X509v3 Authority Key Identifier:
                keyid:95:06:8B:B3:0A:BC:7E:00:7F:D8:38:7E:4D:E0:A8:3E:FA:AD:D4:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQaLswq8fgB_2Dh-TeCoPvqt1HI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:c7:a9:d7:17:ce:09:96:6f:e1:78:f9:49:8f:bd:4c:b9:ba:
         67:08:b0:df:a3:d7:07:08:12:14:4b:f3:14:53:0c:14:1e:23:
         61:d0:3d:0b:1d:ff:7c:52:ca:a8:96:1d:09:8e:49:4f:3e:3e:
         d6:e0:38:dc:04:71:60:f2:9d:26:a1:e3:6f:3e:ae:c4:d1:5c:
         0a:39:38:58:5f:01:e1:8d:87:04:de:66:61:1a:fc:6b:e6:6c:
         5b:d8:70:26:ba:3e:de:ec:ca:9c:4e:87:0a:a9:ba:48:42:91:
         e8:17:1e:a9:99:8f:dd:04:0c:bf:dd:02:52:f1:f4:34:30:21:
         2c:42:1a:cc:b3:ba:65:48:6d:0e:bb:99:dd:84:13:35:78:23:
         d7:7b:9a:8c:df:6e:b0:2e:36:db:c0:4d:6a:1d:49:8e:c1:34:
         cf:3a:89:80:20:df:aa:06:9c:75:d9:0c:71:24:2d:c9:00:6c:
         73:3e:3a:b2:c6:be:a7:27:0e:11:56:ee:a9:ee:f5:45:5c:0f:
         4d:b9:89:b0:a7:26:49:31:7f:f5:5b:a8:ea:fc:ea:1c:bd:7e:
         b7:ef:8f:ec:78:d1:26:c6:29:88:76:5a:7c:a2:12:5d:2b:ef:
         5b:ee:e5:bb:cd:35:3c:94:fa:7a:18:a0:ac:d8:20:7b:7a:13:
         1b:3a:7c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:30:38 2026 by rpki-client