Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.mft
File:                     LFTOW3Q5yME3PII5T2B5FwVy9_0.mft (raw, json)
Hash identifier:          FILY4nEfXVA2qWG3k1IrklBKfHc/G4ANVza1rR0+Ad8=
Subject key identifier:   B8:E0:01:1D:ED:D5:3C:21:AB:7F:DB:12:3A:A9:5A:AE:E7:7A:06:7D
Authority key identifier: 2C:54:CE:5B:74:39:C8:C1:37:3C:82:39:4F:60:79:17:05:72:F7:FD
Certificate issuer:       /CN=A91DC271/serialNumber=2C54CE5B7439C8C1373C82394F6079170572F7FD
Certificate serial:       066E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LFTOW3Q5yME3PII5T2B5FwVy9_0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.mft
Manifest number:          0667
Signing time:             Wed 22 Jul 2026 23:18:41 +0000
Manifest this update:     Wed 22 Jul 2026 23:18:40 +0000
Manifest next update:     Wed 29 Jul 2026 23:18:40 +0000
Files and hashes:         1: LFTOW3Q5yME3PII5T2B5FwVy9_0.crl (hash: oSpeTHRbmwt6WNXbvgoEhnwjyK9ncXnQOh/JfOHs4Vg=)
                          2: 26DDF9C4D59311EB9DBD350EC4F9AE02.roa (hash: bCL3Viem/kaeDI5fANKRqsR+6xed5OvLge1DHC5Yp+E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.crl
                          rsync://rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LFTOW3Q5yME3PII5T2B5FwVy9_0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1646 (0x66e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC271, serialNumber=2C54CE5B7439C8C1373C82394F6079170572F7FD
        Validity
            Not Before: Jul 22 23:18:40 2026 GMT
            Not After : Jul 29 23:18:40 2026 GMT
        Subject: CN=6a614fd1-2a71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:07:7f:d4:fc:1f:ab:65:de:c9:df:35:34:97:
                    39:9e:7c:71:c7:f5:f8:13:18:77:f2:48:f7:fc:4a:
                    ae:08:90:3e:a8:6c:3a:ba:fb:2a:22:86:d0:3c:13:
                    13:1b:36:84:af:2b:fd:1f:e4:0e:d3:45:f6:2d:be:
                    12:3f:b5:82:9b:b1:1d:7f:44:95:a6:1e:8c:97:23:
                    a1:9c:24:03:f6:4f:cc:08:60:be:c9:cf:16:14:b2:
                    7e:75:43:a6:d4:c8:34:cc:e5:6f:f6:f9:66:6c:61:
                    71:c3:e3:ab:bf:83:01:75:cb:67:c5:cf:62:bc:79:
                    1e:e3:2c:96:89:9c:11:71:fe:b2:48:f1:c4:a6:2f:
                    18:cb:f0:1c:70:6c:00:31:7f:29:3e:59:3a:8a:21:
                    35:5d:59:20:01:03:c0:95:d4:ed:2f:b4:ff:6b:60:
                    94:e6:fe:4b:64:0b:e5:9d:88:0e:42:7c:53:5f:30:
                    cb:30:fc:9c:8e:d9:b4:b5:2f:6a:0d:90:15:27:05:
                    ba:2e:79:55:d9:c6:29:7e:97:18:b6:d4:5d:de:04:
                    af:93:42:80:76:92:74:1e:60:ee:f3:7d:b3:41:33:
                    48:68:76:45:12:30:1e:68:fe:e9:a6:c8:5f:ba:9c:
                    37:f1:d8:b3:91:ec:0b:f5:9e:ce:a4:c1:d1:bb:56:
                    13:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E0:01:1D:ED:D5:3C:21:AB:7F:DB:12:3A:A9:5A:AE:E7:7A:06:7D
            X509v3 Authority Key Identifier:
                keyid:2C:54:CE:5B:74:39:C8:C1:37:3C:82:39:4F:60:79:17:05:72:F7:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LFTOW3Q5yME3PII5T2B5FwVy9_0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:b9:f2:5b:1f:e6:b6:74:67:f3:35:41:30:40:f9:8a:65:7b:
         c4:86:8f:a7:42:49:de:f1:16:e2:85:63:23:fb:9c:59:0f:ae:
         ca:89:89:49:75:a7:0b:70:70:49:e3:d4:bd:ad:e7:ba:2a:7a:
         cc:1c:4a:71:82:da:25:61:8d:e3:78:35:da:0c:2b:51:82:92:
         78:0a:87:94:6b:e2:2a:a8:d1:ce:f3:1a:f2:86:18:78:dc:62:
         c3:e2:34:d0:07:51:34:da:17:4d:c0:07:0e:81:72:cd:9f:80:
         9d:d2:b0:83:06:1a:60:74:c2:10:16:3b:4b:8a:b4:d6:6c:31:
         19:1f:e6:d8:65:76:bc:20:90:86:60:44:a2:64:e3:1e:d2:3d:
         b3:3f:7c:7e:db:e6:0e:82:5d:f5:ea:29:1d:63:92:05:94:ac:
         bb:2f:66:4d:1b:5d:0c:ab:44:79:0d:7b:0c:79:b6:bf:fc:a9:
         a9:f7:f5:a0:91:ce:71:a7:a1:1c:25:d3:cb:11:dc:f6:12:eb:
         66:fb:58:23:0e:ef:16:6e:03:2d:a0:0e:6b:6c:a4:ba:ae:86:
         81:23:29:84:a1:d6:80:fa:da:a4:49:a9:aa:c8:dc:32:01:5c:
         17:ee:ca:57:f8:f6:9a:70:1f:58:84:f7:d6:59:b2:4d:dd:6a:
         e6:01:10:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:46:57 2026 by rpki-client