Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122C9F/D6D43A403E2611F190F6B08EB5833773/lni-5PT__QKHfdc7b6kMv8I363I.mft
File:                     lni-5PT__QKHfdc7b6kMv8I363I.mft (raw, json)
Hash identifier:          qNZSUAVU1SapEr+nNS96vq5khyzXFFK1+mtYmnqIc+I=
Subject key identifier:   5E:3C:AD:01:A5:10:5E:8E:B8:30:1B:CF:9C:2B:35:E2:FB:E0:2A:E3
Authority key identifier: 96:78:BE:E4:F4:FF:FD:02:87:7D:D7:3B:6F:A9:0C:BF:C2:37:EB:72
Certificate issuer:       /CN=A9122C9F/serialNumber=9678BEE4F4FFFD02877DD73B6FA90CBFC237EB72
Certificate serial:       33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lni-5PT__QKHfdc7b6kMv8I363I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122C9F/D6D43A403E2611F190F6B08EB5833773/lni-5PT__QKHfdc7b6kMv8I363I.mft
Manifest number:          31
Signing time:             Thu 23 Jul 2026 11:35:25 +0000
Manifest this update:     Thu 23 Jul 2026 11:35:24 +0000
Manifest next update:     Thu 30 Jul 2026 11:35:24 +0000
Files and hashes:         1: lni-5PT__QKHfdc7b6kMv8I363I.crl (hash: 04jYAgixGuSG1rGPSt7wxELNtRbn3u10Udz+J6l1ic4=)
                          2: 33FC8BC63E2911F1AA842DBCB5833773.roa (hash: Kwf8subIWxc5eX3hf9i2mczgFnlXfzaqlo++VD/Hoy0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122C9F/D6D43A403E2611F190F6B08EB5833773/lni-5PT__QKHfdc7b6kMv8I363I.crl
                          rsync://rpki.apnic.net/member_repository/A9122C9F/D6D43A403E2611F190F6B08EB5833773/lni-5PT__QKHfdc7b6kMv8I363I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lni-5PT__QKHfdc7b6kMv8I363I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:35:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122C9F, serialNumber=9678BEE4F4FFFD02877DD73B6FA90CBFC237EB72
        Validity
            Not Before: Jul 23 11:35:24 2026 GMT
            Not After : Jul 30 11:35:24 2026 GMT
        Subject: CN=6a61fc7d-1803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f8:cc:c9:c4:0c:0a:46:5f:1e:5c:7f:2b:72:
                    20:2f:29:86:d8:f0:3c:67:78:4e:40:9b:c4:95:42:
                    02:df:c7:21:77:2e:4a:be:32:81:89:10:bc:28:55:
                    cf:1b:4b:17:dd:10:f4:6c:52:6f:9c:66:cf:57:90:
                    8e:0f:d2:d6:90:c5:03:ad:e0:47:c5:df:2b:db:4d:
                    6b:46:19:36:10:5d:fa:6c:d3:be:f0:c6:89:b9:f0:
                    cf:23:48:fe:8e:3c:34:28:00:b4:f9:36:95:03:ef:
                    84:2b:ba:d4:c8:77:7f:af:1f:5b:7c:bc:6c:29:06:
                    7f:c2:60:48:02:d6:6f:b6:52:c9:de:70:fd:f3:ce:
                    56:cc:7c:b6:f0:d5:a7:cf:c3:55:e0:de:f9:6d:45:
                    07:cd:ee:a2:a3:2b:5f:13:10:ce:78:a8:c7:46:63:
                    14:ce:7c:7b:b6:f5:9b:9b:9a:3a:9e:50:f7:10:3a:
                    ae:47:0a:af:71:60:49:14:84:77:cc:ca:7f:62:58:
                    2a:15:06:6e:03:6f:8b:05:e3:a4:48:a8:a2:c6:9c:
                    69:85:4a:08:d7:a0:f2:ad:1d:8a:82:37:c5:c8:52:
                    f7:d8:b3:70:60:28:7f:7a:de:fd:ce:ad:56:4a:ab:
                    af:7e:46:bf:2a:ad:1d:cc:10:10:11:40:e8:86:1c:
                    e3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:3C:AD:01:A5:10:5E:8E:B8:30:1B:CF:9C:2B:35:E2:FB:E0:2A:E3
            X509v3 Authority Key Identifier:
                keyid:96:78:BE:E4:F4:FF:FD:02:87:7D:D7:3B:6F:A9:0C:BF:C2:37:EB:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122C9F/D6D43A403E2611F190F6B08EB5833773/lni-5PT__QKHfdc7b6kMv8I363I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lni-5PT__QKHfdc7b6kMv8I363I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122C9F/D6D43A403E2611F190F6B08EB5833773/lni-5PT__QKHfdc7b6kMv8I363I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:49:c9:42:fe:d5:1d:35:6e:2a:38:1c:6d:27:9c:76:13:52:
         6f:97:c9:ac:f9:d6:c4:6e:5e:70:48:fd:31:72:ec:b9:15:6a:
         d9:86:1d:d5:d7:19:b3:c7:aa:fa:da:54:0e:c2:c7:23:7a:9b:
         fc:04:8f:7a:1a:28:bf:f8:d1:15:09:44:e2:d9:40:f5:bc:01:
         9c:e9:fd:9c:11:eb:7f:95:bf:39:74:0c:77:35:16:60:2a:16:
         af:e7:cf:a3:91:a7:b0:32:f3:a7:f8:1f:81:82:34:98:69:ca:
         56:a0:a5:73:53:b1:d2:ad:6d:e8:3a:b2:28:49:b7:43:ae:c7:
         91:92:7b:9c:9c:9f:dd:fa:5c:43:89:4a:f9:4d:87:bb:4b:83:
         b9:0e:d7:1a:b2:23:38:d3:1c:b6:db:f7:a7:1e:e8:1d:da:93:
         58:0a:9e:b6:f6:48:f0:b3:65:24:c1:ac:ad:41:a7:4e:29:87:
         97:4a:ea:f4:0a:2e:c1:c2:96:48:49:89:a9:5e:9e:db:a5:11:
         fd:33:88:57:63:d2:f1:22:06:0b:88:cb:44:3d:11:a9:62:92:
         65:21:d6:34:18:9e:7a:c3:0f:a1:ce:a5:34:7a:35:cc:57:10:
         90:3a:6a:05:c6:54:34:cd:9b:a8:a0:26:9c:8a:b4:1d:b4:1f:
         50:6d:cb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:44 2026 by rpki-client