Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft
File:                     lQfxHRNjrFs5Lzb17zgixc_NaPk.mft (raw, json)
Hash identifier:          E3o/3okY2lvk8NRyV/LE9VWrPvrhsrnJhaeXLniQ9V0=
Subject key identifier:   F3:20:E3:EE:C8:9F:DC:FE:08:7C:D3:5F:83:74:E3:35:6D:DB:C7:93
Authority key identifier: 95:07:F1:1D:13:63:AC:5B:39:2F:36:F5:EF:38:22:C5:CF:CD:68:F9
Certificate issuer:       /CN=A91EE8AC/serialNumber=9507F11D1363AC5B392F36F5EF3822C5CFCD68F9
Certificate serial:       0285
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQfxHRNjrFs5Lzb17zgixc_NaPk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft
Manifest number:          0415
Signing time:             Wed 13 May 2026 01:58:47 +0000
Manifest this update:     Wed 13 May 2026 01:58:47 +0000
Manifest next update:     Wed 20 May 2026 01:58:47 +0000
Files and hashes:         1: lQfxHRNjrFs5Lzb17zgixc_NaPk.crl (hash: XX/ZrRNfsiv6kZYKAWzG9iVOx4p38bSqKid9X6SBOZs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.crl
                          rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQfxHRNjrFs5Lzb17zgixc_NaPk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:58:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 645 (0x285)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE8AC, serialNumber=9507F11D1363AC5B392F36F5EF3822C5CFCD68F9
        Validity
            Not Before: May 13 01:58:47 2026 GMT
            Not After : May 20 01:58:47 2026 GMT
        Subject: CN=6a03dad7-6bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:11:51:5d:0f:ab:a1:43:5c:a1:4d:ac:db:0c:
                    45:58:da:ce:3b:f3:08:1f:e0:2c:d7:6c:d4:41:17:
                    82:ab:d0:c8:e6:36:f5:6d:7b:e3:d6:f2:8d:c2:90:
                    9f:a5:88:b4:dc:87:f0:07:86:a4:20:a4:f0:f2:bb:
                    97:e6:cc:fb:c1:db:74:c6:55:e0:65:17:2d:3b:6c:
                    f9:12:30:37:b6:73:d0:41:e5:2d:9b:13:c4:19:57:
                    8a:62:46:0c:ca:35:5a:2a:e0:3f:06:0a:fa:7c:78:
                    69:36:0e:b1:d7:12:e4:a5:21:26:48:dc:50:35:d0:
                    77:e3:1d:bb:a5:56:5b:01:a8:98:84:98:27:f9:9a:
                    27:2e:ac:82:6a:aa:28:40:87:6c:6e:23:72:2f:e4:
                    eb:3b:9d:b3:7d:5a:9d:d4:83:b5:03:e3:3b:eb:96:
                    dd:4c:92:00:c9:80:bd:36:58:10:b9:73:b0:ff:02:
                    22:f2:39:a0:52:ec:d4:ed:df:81:0b:0f:79:a4:b2:
                    72:8e:46:ad:7a:34:db:ee:fc:aa:2e:16:0c:60:c7:
                    08:05:18:19:6a:ff:c9:1c:0f:eb:99:15:a9:54:93:
                    35:65:5e:11:6a:46:eb:36:bf:59:3f:ef:8c:03:ae:
                    4b:e9:31:d6:e3:ef:cc:67:5c:39:48:25:53:04:b3:
                    79:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:20:E3:EE:C8:9F:DC:FE:08:7C:D3:5F:83:74:E3:35:6D:DB:C7:93
            X509v3 Authority Key Identifier:
                keyid:95:07:F1:1D:13:63:AC:5B:39:2F:36:F5:EF:38:22:C5:CF:CD:68:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQfxHRNjrFs5Lzb17zgixc_NaPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:63:5d:b3:e9:71:c8:fb:cf:52:97:87:06:b0:80:6d:64:9d:
         f5:48:d8:3e:b2:e5:0e:8f:33:cd:4b:97:e1:e1:36:0c:18:7c:
         65:a5:a0:9b:38:17:29:14:07:32:fb:d1:02:91:72:b2:b6:15:
         08:90:bc:3d:bd:1c:c6:d3:a0:8d:f0:5e:32:58:a9:be:a6:c2:
         77:27:cc:b5:60:55:06:d5:3c:7d:fe:07:28:01:45:0e:7a:5b:
         01:b4:97:d5:89:6f:7d:42:f4:b3:7a:63:49:46:97:af:d2:8d:
         6f:7e:b4:b7:90:de:36:16:c5:ee:da:47:dd:c2:c8:71:93:49:
         fa:01:ad:98:b4:df:5d:09:00:ef:74:df:d1:5d:d6:60:1f:36:
         c2:a1:33:03:1b:7f:41:42:4b:d9:df:f4:a0:f8:c2:a8:a0:5e:
         7d:8d:a3:76:f7:94:51:b7:a1:7d:f7:54:c7:3b:69:5a:d6:0e:
         79:e7:bc:29:92:40:19:e1:12:b0:e1:7b:b1:6c:5b:40:53:29:
         08:06:c3:6e:69:8f:ba:f2:14:e1:1f:d8:45:fa:5b:fb:99:d9:
         9b:5d:44:a7:0d:36:c2:e7:66:8f:38:62:dd:8d:54:0a:17:a4:
         03:59:c1:18:33:23:e7:72:7b:88:aa:a1:b2:c5:31:a4:ec:9b:
         4f:7e:49:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:49:10 2026 by rpki-client