Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.mft
File:                     lpDF1gn85ELDW5kW1WP58Ye2itQ.mft (raw, json)
Hash identifier:          P/VXAszuHJ8312NatARGKU8X7D3zx1SauW4xSnolPWk=
Subject key identifier:   22:50:49:95:D1:B8:02:08:ED:FF:3B:EC:8B:FC:8B:35:39:35:4E:57
Authority key identifier: 96:90:C5:D6:09:FC:E4:42:C3:5B:99:16:D5:63:F9:F1:87:B6:8A:D4
Certificate issuer:       /CN=A91D8E2C/serialNumber=9690C5D609FCE442C35B9916D563F9F187B68AD4
Certificate serial:       0F17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpDF1gn85ELDW5kW1WP58Ye2itQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.mft
Manifest number:          0F0D
Signing time:             Wed 22 Jul 2026 17:47:12 +0000
Manifest this update:     Wed 22 Jul 2026 17:47:11 +0000
Manifest next update:     Wed 29 Jul 2026 17:47:11 +0000
Files and hashes:         1: lpDF1gn85ELDW5kW1WP58Ye2itQ.crl (hash: xhhjFxuy8U0caYSqrIXHN8enODy2wIbQEI1US2gxdf0=)
                          2: 6C153768CE5511EB9DD80C30C4F9AE02.roa (hash: 8GXHkMu5QhzxhDcgK/hTob055OzXskK4SzGbgPUovhg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpDF1gn85ELDW5kW1WP58Ye2itQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3863 (0xf17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8E2C, serialNumber=9690C5D609FCE442C35B9916D563F9F187B68AD4
        Validity
            Not Before: Jul 22 17:47:11 2026 GMT
            Not After : Jul 29 17:47:11 2026 GMT
        Subject: CN=6a610220-52d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:41:f6:b8:83:44:33:a0:84:1d:23:f1:45:bb:
                    bf:d9:9e:ad:96:15:2e:9d:b5:24:2c:8a:0d:7c:9e:
                    56:b2:55:17:e2:e7:d3:a5:cd:66:de:6b:e2:2a:d9:
                    77:98:43:e5:5a:19:48:18:5e:d1:7f:f5:14:67:80:
                    f8:e5:3a:be:9b:a3:3b:ac:3c:db:56:c7:f8:c2:d9:
                    ab:67:bd:1b:f3:e9:c0:3e:fa:d0:ee:30:b3:1f:ae:
                    97:eb:39:a6:84:31:6f:97:10:4a:18:8b:69:d5:71:
                    12:29:66:9e:ff:f0:37:06:61:9d:13:75:d3:08:46:
                    45:3f:df:d8:82:db:25:a1:a3:f8:4f:2b:75:44:f3:
                    89:e0:63:d2:08:ee:89:b1:60:f7:3c:6e:08:ea:9c:
                    d5:f2:08:3b:4d:4c:c7:fb:11:b9:c4:e1:5f:26:87:
                    f7:da:68:cd:21:a2:14:dd:d9:7b:56:c2:45:be:a0:
                    d7:d4:31:ce:f3:1b:02:58:46:8d:7a:b7:54:04:95:
                    6d:36:6c:fe:52:f9:6d:05:61:da:21:57:6e:07:55:
                    6f:9d:95:ab:ea:b1:25:66:2d:cd:fb:48:fd:1c:f6:
                    44:0b:a3:61:c5:bc:c2:e1:f0:41:74:59:d4:cc:a3:
                    e3:21:5b:5d:0d:47:56:0f:d9:1a:e8:25:e4:dc:ca:
                    df:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:50:49:95:D1:B8:02:08:ED:FF:3B:EC:8B:FC:8B:35:39:35:4E:57
            X509v3 Authority Key Identifier:
                keyid:96:90:C5:D6:09:FC:E4:42:C3:5B:99:16:D5:63:F9:F1:87:B6:8A:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpDF1gn85ELDW5kW1WP58Ye2itQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:04:f0:c4:2b:6d:89:eb:3e:75:d0:71:f7:6f:26:52:34:be:
         16:fa:1b:c1:98:63:8e:4e:8f:04:a5:e4:8c:fc:53:ea:2d:3e:
         79:a7:f0:12:b4:28:7e:b2:91:03:92:7e:d9:cc:ff:1a:53:d1:
         38:7c:6d:97:f2:52:18:db:83:a4:5b:01:d6:27:f4:9d:c0:8a:
         3c:71:4c:c2:0e:f3:e7:d4:a0:90:d7:66:28:d5:55:de:f8:60:
         31:8b:e7:5e:56:56:bf:98:07:9e:a6:3d:49:65:4c:aa:19:e3:
         05:41:1c:de:3b:73:6d:5d:78:34:10:76:4e:8f:b7:ea:ad:cb:
         9a:d4:6d:56:db:13:62:09:6e:c3:54:29:27:c2:8f:dc:f3:b9:
         7c:26:7a:0a:fa:b1:0f:d0:c9:87:ef:81:ba:1f:a9:71:fd:b8:
         99:5d:5b:18:39:ef:71:4f:b0:e7:60:16:a2:fc:2d:af:33:be:
         32:c5:47:93:c4:07:b0:49:95:ba:32:b1:bc:ea:ed:36:18:e1:
         cc:6c:b6:01:15:e9:ea:78:bb:71:5b:34:be:b9:b7:35:cf:9d:
         82:21:95:2b:47:36:67:f3:f8:02:ac:64:e8:82:b5:aa:72:f1:
         37:fb:46:e8:84:c3:22:43:d9:70:66:f3:f7:bb:1e:9b:7e:cd:
         78:e0:36:24
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDhFMkMxMTAvBgNVBAUTKDk2OTBDNUQ2MDlGQ0U0NDJDMzVCOTkxNkQ1NjNGOUYx
ODdCNjhBRDQwHhcNMjYwNzIyMTc0NzExWhcNMjYwNzI5MTc0NzExWjAYMRYwFAYD
VQQDEw02YTYxMDIyMC01MmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw0H2uINEM6CEHSPxRbu/2Z6tlhUunbUkLIoNfJ5WslUX4ufTpc1m3mviKtl3
mEPlWhlIGF7Rf/UUZ4D45Tq+m6M7rDzbVsf4wtmrZ70b8+nAPvrQ7jCzH66X6zmm
hDFvlxBKGItp1XESKWae//A3BmGdE3XTCEZFP9/YgtsloaP4Tyt1RPOJ4GPSCO6J
sWD3PG4I6pzV8gg7TUzH+xG5xOFfJof32mjNIaIU3dl7VsJFvqDX1DHO8xsCWEaN
erdUBJVtNmz+UvltBWHaIVduB1VvnZWr6rElZi3N+0j9HPZEC6NhxbzC4fBBdFnU
zKPjIVtdDUdWD9ka6CXk3MrfRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCJQSZXR
uAII7f877Iv8izU5NU5XMB8GA1UdIwQYMBaAFJaQxdYJ/ORCw1uZFtVj+fGHtorU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEUyQy8wRkUxRUQwNkEy
RkIxMUU5QTUyNkE1N0VDNEY5QUUwMi9scERGMWduODVFTERXNWtXMVdQNThZZTJp
dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xwREYxZ244NUVMRFc1a1cxV1A1OFllMml0US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OEUyQy8wRkUxRUQwNkEyRkIxMUU5QTUyNkE1N0VDNEY5QUUwMi9scERGMWduODVF
TERXNWtXMVdQNThZZTJpdFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUQTwxCtties+ddBx928mUjS+FvobwZhjjk6PBKXkjPxT6i0+eafwErQofrKR
A5J+2cz/GlPROHxtl/JSGNuDpFsB1if0ncCKPHFMwg7z59SgkNdmKNVV3vhgMYvn
XlZWv5gHnqY9SWVMqhnjBUEc3jtzbV14NBB2To+36q3LmtRtVtsTYgluw1QpJ8KP
3PO5fCZ6CvqxD9DJh++Buh+pcf24mV1bGDnvcU+w52AWovwtrzO+MsVHk8QHsEmV
ujKxvOrtNhjhzGy2ARXp6ni7cVs0vrm3Nc+dgiGVK0c2Z/P4Aqxk6IK1qnLxN/tG
6ITDIkPZcGbz97sem37NeOA2JA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:22:03 2026 by rpki-client