Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft
File:                     lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft (raw, json)
Hash identifier:          8ggIY2p8xZ61lll0yFvBn2EFX2NluDoHthB0Nvj45Vs=
Subject key identifier:   93:49:34:8D:D5:D2:14:A1:5E:11:4F:16:41:28:C9:02:75:6F:85:6B
Authority key identifier: 96:96:C6:59:2C:02:B5:03:F4:88:D4:43:7C:D0:AC:82:C1:76:B3:76
Certificate issuer:       /CN=A91AEDF7/serialNumber=9696C6592C02B503F488D4437CD0AC82C176B376
Certificate serial:       085A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft
Manifest number:          0848
Signing time:             Thu 26 Mar 2026 20:48:18 +0000
Manifest this update:     Thu 26 Mar 2026 20:48:17 +0000
Manifest next update:     Thu 02 Apr 2026 20:48:17 +0000
Files and hashes:         1: lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl (hash: NzLLoD7FCk3YswlPVV9Nafk/ety98jfxME1OF+qugFk=)
                          2: 13901018203F11ECBE18630CC4F9AE02.roa (hash: qWStS0v5bHsp5UQ+CjZRahzRxVHNB9C2cwcqgmnOyvw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl
                          rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 20:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2138 (0x85a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEDF7, serialNumber=9696C6592C02B503F488D4437CD0AC82C176B376
        Validity
            Not Before: Mar 26 20:48:17 2026 GMT
            Not After : Apr  2 20:48:17 2026 GMT
        Subject: CN=69c59b92-60e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:87:ac:ff:d6:82:e0:6d:ff:40:3c:52:dd:03:
                    16:dc:aa:b0:57:fb:2e:eb:28:65:ef:cb:f4:20:9c:
                    b0:e7:8f:ef:c1:c5:a8:31:10:a4:6c:a3:7d:a4:4d:
                    c6:99:90:d5:eb:07:97:ff:16:07:14:9c:23:76:eb:
                    33:8b:38:e5:1f:a1:b3:13:64:2d:1d:6d:76:06:0d:
                    76:fb:60:a6:1b:64:d1:13:f4:ce:9b:61:70:d5:ed:
                    e8:f7:5d:5b:f8:6d:50:15:43:be:4d:53:a7:9e:34:
                    c8:0b:03:2d:ff:d8:16:b5:82:05:b5:fb:3b:cd:7e:
                    d2:ce:1d:c1:c2:63:5a:55:65:54:1f:ea:ca:e2:db:
                    03:07:76:78:ad:b4:ab:d0:34:df:bd:4e:fc:a7:70:
                    8e:94:48:5d:91:9f:b0:2e:d4:32:69:17:75:53:91:
                    91:bc:37:c0:b5:97:c7:1e:e4:16:3b:0f:cd:95:61:
                    c5:4b:e3:d6:24:e3:72:cc:25:0f:f6:bb:70:da:ee:
                    96:b3:b7:34:84:60:3e:8e:fd:06:1b:d8:ab:66:44:
                    3d:65:a9:51:8b:c9:da:99:b9:f3:c6:c0:a1:3e:59:
                    40:d8:0c:ce:31:9f:f0:08:71:18:e5:17:92:ad:87:
                    bf:bc:37:04:31:f9:db:10:56:41:1b:fe:eb:42:90:
                    fd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:49:34:8D:D5:D2:14:A1:5E:11:4F:16:41:28:C9:02:75:6F:85:6B
            X509v3 Authority Key Identifier:
                keyid:96:96:C6:59:2C:02:B5:03:F4:88:D4:43:7C:D0:AC:82:C1:76:B3:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:93:2d:ae:a1:36:6e:a4:01:d5:c3:b0:4d:a3:7f:4b:e1:08:
         5b:5e:1a:56:0c:f5:26:70:e7:05:cd:0a:92:9d:40:04:ea:97:
         d3:26:27:eb:59:24:01:0a:db:4a:fe:7c:60:95:c3:99:5b:a3:
         2f:aa:28:a4:0c:00:ae:ef:1c:b7:11:fa:3b:ee:a8:0c:fb:0c:
         e4:80:b8:6f:21:3e:f3:46:04:42:15:ef:4e:47:7b:b5:34:da:
         5e:1e:6e:47:94:83:c1:cd:57:94:3e:cc:53:a5:a4:b7:01:f7:
         f2:ba:68:a0:79:fe:ca:b8:21:29:69:da:78:67:71:a1:80:13:
         0a:3a:f2:7d:6b:bc:a5:f3:f0:8c:53:91:d1:93:2e:67:fc:f9:
         35:55:19:b6:b6:52:04:bc:63:fe:8c:26:ad:80:44:40:74:ae:
         56:8a:ce:4d:4a:49:71:bc:d0:2f:f2:c8:20:ee:bb:08:32:43:
         63:a6:59:37:1d:b8:36:5f:08:02:67:ca:93:e7:a1:c2:38:f2:
         73:06:4f:c9:41:8e:ce:36:ec:f3:e2:5f:f1:73:ba:88:20:f7:
         81:0e:dd:ba:b6:47:91:64:f4:2a:5f:7a:56:c0:4e:f0:bd:b9:
         e4:89:82:91:f2:e1:e0:aa:dc:70:7d:91:0d:13:d9:72:4b:58:
         57:bb:e6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:07:36 2026 by rpki-client