Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft
File:                     LsRLn8Flw7yChYEsMTzHgBmI_zE.mft (raw, json)
Hash identifier:          RoKSgxVuoC8wagINLftgf2rkCVkc8uL/02Tvam5UqOc=
Subject key identifier:   EF:F9:06:2A:42:4D:1D:B1:B6:49:09:D7:9F:81:F6:15:E7:A8:AF:FA
Authority key identifier: 2E:C4:4B:9F:C1:65:C3:BC:82:85:81:2C:31:3C:C7:80:19:88:FF:31
Certificate issuer:       /CN=A91BA164/serialNumber=2EC44B9FC165C3BC8285812C313CC7801988FF31
Certificate serial:       12CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft
Manifest number:          12AA
Signing time:             Wed 22 Jul 2026 17:11:34 +0000
Manifest this update:     Wed 22 Jul 2026 17:11:33 +0000
Manifest next update:     Wed 29 Jul 2026 17:11:33 +0000
Files and hashes:         1: LsRLn8Flw7yChYEsMTzHgBmI_zE.crl (hash: ZkMQyB04TFOIHY0BDmEb57iexgHhfJ7aWxOUgJoUF5Y=)
                          2: 96D571D41FEB11F0A2AEE444C4F9AE02.roa (hash: xwp+vsBFySucNW4Yhnh8sJi71zn8ZQofjYnVbPZEHro=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.crl
                          rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:11:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4813 (0x12cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA164, serialNumber=2EC44B9FC165C3BC8285812C313CC7801988FF31
        Validity
            Not Before: Jul 22 17:11:33 2026 GMT
            Not After : Jul 29 17:11:33 2026 GMT
        Subject: CN=6a60f9c6-bc9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7f:05:22:7f:51:85:5a:59:2e:68:6d:71:0c:
                    96:01:cd:19:e6:37:ad:c6:54:60:b7:99:80:41:04:
                    43:10:89:36:16:09:35:c5:8a:60:e1:ab:ff:81:09:
                    af:c4:fb:0d:8f:17:36:7c:26:18:e7:29:35:ab:13:
                    f9:4c:af:ed:3e:56:7b:f0:04:ce:9a:a3:99:77:5a:
                    9c:06:d7:29:e9:f7:ba:7f:9f:4f:35:07:bb:60:1d:
                    b7:f0:16:44:88:0e:90:df:39:fd:dd:0e:cf:80:03:
                    04:25:6a:ca:94:1a:ba:10:f1:ce:e4:43:b8:10:4a:
                    af:e8:ef:4b:21:7d:42:96:a5:de:26:37:af:3f:0d:
                    18:95:ba:51:6e:24:e1:2b:1b:b5:c1:e3:e0:9f:de:
                    7c:11:c5:b3:9b:36:f5:9c:d7:0e:04:1a:8f:e6:ba:
                    2b:64:6b:01:09:7f:d2:4c:1c:5c:bc:86:4d:cf:7a:
                    91:dc:a7:61:fb:26:88:19:53:b6:0f:9b:13:84:17:
                    09:c8:63:d7:43:79:ce:ca:91:bc:e8:a8:f4:41:cd:
                    ac:f4:71:3b:c7:8b:c7:75:79:b0:38:80:f4:d1:b1:
                    f6:fd:8f:54:60:5a:d0:fc:dd:f4:eb:6e:d0:4d:a2:
                    c7:31:88:4c:59:aa:12:de:02:6d:a4:f5:5e:82:9f:
                    f2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F9:06:2A:42:4D:1D:B1:B6:49:09:D7:9F:81:F6:15:E7:A8:AF:FA
            X509v3 Authority Key Identifier:
                keyid:2E:C4:4B:9F:C1:65:C3:BC:82:85:81:2C:31:3C:C7:80:19:88:FF:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:66:6d:1d:50:2a:3d:83:0d:0c:3c:88:db:c4:44:48:7a:74:
         7a:5a:25:a9:70:26:d5:90:b6:ce:ac:1c:ad:0e:d7:96:4c:1a:
         0f:29:d3:c8:98:25:19:f0:67:b8:9e:33:d3:e3:5a:7e:42:84:
         e2:af:21:5a:17:62:6e:ce:a3:c4:74:fc:d3:8f:fe:8b:6c:39:
         59:2e:a8:5f:1a:d1:9b:05:5f:a0:2d:17:3a:b6:2b:b9:5c:7c:
         11:ae:7a:cd:76:54:5c:a7:1b:df:dd:20:9c:d6:8c:76:5c:07:
         bb:4d:a0:2c:8d:f8:11:e8:fe:59:fc:49:55:97:db:60:8f:e7:
         1f:3c:95:82:90:2e:bb:a5:40:9e:71:27:29:23:34:71:82:ce:
         7d:3b:b4:35:e4:f7:59:d2:5c:f1:c6:1f:22:9a:00:4a:eb:2d:
         43:a8:0c:94:29:ec:0c:25:e4:43:85:3e:27:16:af:9b:ff:8e:
         97:5b:79:1c:ee:fd:43:1b:c4:5c:b0:70:80:a5:de:00:08:82:
         09:28:d9:a2:c2:e3:0f:56:10:d0:25:51:00:3d:97:4b:48:d6:
         b6:ec:4a:6c:99:5d:2c:cf:19:6c:7b:52:6a:e5:18:99:9a:e9:
         75:4c:a2:08:15:c1:98:7d:48:61:71:54:95:97:99:79:b2:dc:
         4f:52:be:6c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEs0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkExNjQxMTAvBgNVBAUTKDJFQzQ0QjlGQzE2NUMzQkM4Mjg1ODEyQzMxM0NDNzgw
MTk4OEZGMzEwHhcNMjYwNzIyMTcxMTMzWhcNMjYwNzI5MTcxMTMzWjAYMRYwFAYD
VQQDEw02YTYwZjljNi1iYzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmX8FIn9RhVpZLmhtcQyWAc0Z5jetxlRgt5mAQQRDEIk2Fgk1xYpg4av/gQmv
xPsNjxc2fCYY5yk1qxP5TK/tPlZ78ATOmqOZd1qcBtcp6fe6f59PNQe7YB238BZE
iA6Q3zn93Q7PgAMEJWrKlBq6EPHO5EO4EEqv6O9LIX1ClqXeJjevPw0YlbpRbiTh
Kxu1wePgn958EcWzmzb1nNcOBBqP5rorZGsBCX/STBxcvIZNz3qR3Kdh+yaIGVO2
D5sThBcJyGPXQ3nOypG86Kj0Qc2s9HE7x4vHdXmwOID00bH2/Y9UYFrQ/N30627Q
TaLHMYhMWaoS3gJtpPVegp/yEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO/5BipC
TR2xtkkJ15+B9hXnqK/6MB8GA1UdIwQYMBaAFC7ES5/BZcO8goWBLDE8x4AZiP8x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTE2NC9BRkM1OTJFQ0Yz
MUUxMUU4ODNFQjdCNzlDNEY5QUUwMi9Mc1JMbjhGbHc3eUNoWUVzTVR6SGdCbUlf
ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xzUkxuOEZsdzd5Q2hZRXNNVHpIZ0JtSV96RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QTE2NC9BRkM1OTJFQ0YzMUUxMUU4ODNFQjdCNzlDNEY5QUUwMi9Mc1JMbjhGbHc3
eUNoWUVzTVR6SGdCbUlfekUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANWZtHVAqPYMNDDyI28RESHp0elolqXAm1ZC2zqwcrQ7XlkwaDynTyJglGfBn
uJ4z0+NafkKE4q8hWhdibs6jxHT804/+i2w5WS6oXxrRmwVfoC0XOrYruVx8Ea56
zXZUXKcb390gnNaMdlwHu02gLI34Eej+WfxJVZfbYI/nHzyVgpAuu6VAnnEnKSM0
cYLOfTu0NeT3WdJc8cYfIpoASustQ6gMlCnsDCXkQ4U+Jxavm/+Ol1t5HO79QxvE
XLBwgKXeAAiCCSjZosLjD1YQ0CVRAD2XS0jWtuxKbJldLM8ZbHtSauUYmZrpdUyi
CBXBmH1IYXFUlZeZebLcT1K+bA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:17:41 2026 by rpki-client