Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft
File:                     LRhptz6h6I6xK-afHA1OfCGWoz4.mft (raw, json)
Hash identifier:          Qh4FENQ6eTX4V4beCC3wQ3hAkYqEbtgC5WxKHkmTpZ4=
Subject key identifier:   B9:A5:79:8E:52:CB:F8:59:FF:5F:A0:71:43:5A:2C:C1:60:BF:12:82
Authority key identifier: 2D:18:69:B7:3E:A1:E8:8E:B1:2B:E6:9F:1C:0D:4E:7C:21:96:A3:3E
Certificate issuer:       /CN=A91E8FFF/serialNumber=2D1869B73EA1E88EB12BE69F1C0D4E7C2196A33E
Certificate serial:       67
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LRhptz6h6I6xK-afHA1OfCGWoz4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft
Manifest number:          65
Signing time:             Thu 23 Jul 2026 09:58:04 +0000
Manifest this update:     Thu 23 Jul 2026 09:58:03 +0000
Manifest next update:     Thu 30 Jul 2026 09:58:03 +0000
Files and hashes:         1: LRhptz6h6I6xK-afHA1OfCGWoz4.crl (hash: KVlORMDA5FuSvGW0YGpTP8yBF/rkqkHhQ0CdYTZUIfw=)
                          2: DB2D63A4EED111F0AB3DEEA1736F56BC.roa (hash: gmdE3N51alm8HvqkCut4cR91VTINLTaVDY/NZdbNc/0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.crl
                          rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LRhptz6h6I6xK-afHA1OfCGWoz4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:58:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8FFF, serialNumber=2D1869B73EA1E88EB12BE69F1C0D4E7C2196A33E
        Validity
            Not Before: Jul 23 09:58:03 2026 GMT
            Not After : Jul 30 09:58:03 2026 GMT
        Subject: CN=6a61e5ac-b4e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f4:16:ae:40:e3:9a:2d:31:e9:bd:03:50:6a:
                    7a:55:42:76:fe:33:9b:ef:bb:c5:e0:55:d6:95:c2:
                    50:dc:7a:d5:fd:bb:37:f7:40:df:0f:2f:04:d7:40:
                    c7:9a:8e:bf:0e:ba:6d:ab:31:bb:ab:b9:82:47:8f:
                    fb:d4:7d:77:06:56:b0:3a:f8:3f:28:29:c0:22:2e:
                    63:9d:06:e4:42:4e:c0:56:e0:df:11:29:a8:0c:07:
                    5e:71:de:dc:fb:7a:44:3a:71:67:5e:1f:b8:c6:be:
                    6f:b6:a7:f9:af:3c:56:5e:eb:48:15:5c:83:61:fa:
                    f4:7d:45:50:17:44:f4:01:d6:3d:2d:1f:b8:cf:0d:
                    8c:7b:3f:87:2e:03:c3:05:f9:04:e6:d4:12:5b:ee:
                    55:97:26:f2:4c:60:47:16:bc:d3:1e:7b:5f:9b:02:
                    c3:a2:08:8e:85:45:c0:2a:53:81:82:a3:16:2e:27:
                    6b:06:cc:ea:e6:19:b6:83:b2:3c:8e:40:9a:55:d2:
                    a1:50:1b:f8:2b:b6:12:80:50:5b:12:fa:e3:6e:f8:
                    1f:c8:d6:80:a6:cb:06:e6:26:16:3a:3b:0d:bb:30:
                    ff:a6:ee:77:ff:0d:3c:ee:78:43:43:63:74:68:d6:
                    08:a2:86:78:12:86:1c:0f:fd:12:ff:13:0b:f4:24:
                    bb:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A5:79:8E:52:CB:F8:59:FF:5F:A0:71:43:5A:2C:C1:60:BF:12:82
            X509v3 Authority Key Identifier:
                keyid:2D:18:69:B7:3E:A1:E8:8E:B1:2B:E6:9F:1C:0D:4E:7C:21:96:A3:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LRhptz6h6I6xK-afHA1OfCGWoz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:41:dc:9c:db:54:69:33:cb:81:fb:2e:32:73:98:df:7e:e8:
         29:da:cb:43:1a:a0:4f:11:03:c5:f1:d3:68:d9:40:a8:d4:87:
         85:ab:77:df:9a:c5:75:dd:6a:ed:83:a3:b3:ca:f0:25:6f:ab:
         27:fc:40:90:ef:ff:63:2c:0e:83:68:b1:4c:76:0c:3e:68:2b:
         f8:19:b5:54:47:a6:35:e2:f7:21:c1:97:03:b2:42:4e:b2:48:
         5d:71:6b:80:67:8c:26:fe:2d:84:a1:6e:2f:1b:85:fe:20:ac:
         03:59:0e:e6:3d:42:34:d1:26:b2:bb:72:5a:49:c9:fc:5f:30:
         e0:96:b4:25:cf:b6:8b:6d:43:5d:bc:6d:28:f7:c6:32:b9:3d:
         f2:1c:17:df:2f:f5:3e:c4:38:f4:f9:33:05:f0:ef:7b:56:87:
         23:fc:44:37:93:e2:89:e3:84:3b:55:d9:43:7a:4f:dd:36:2c:
         ab:d3:7a:62:70:d2:30:81:b0:28:68:26:a1:03:e7:98:fc:0d:
         48:61:fa:cc:c3:d8:fa:c4:4c:77:c1:12:1f:93:9b:db:8b:f0:
         f5:86:97:e6:95:08:95:35:f2:57:44:a7:ee:4b:30:23:96:f1:
         7e:92:01:e9:ce:23:6d:84:2a:77:92:c1:15:be:57:af:1d:66:
         91:ec:6b:e2
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
OEZGRjExMC8GA1UEBRMoMkQxODY5QjczRUExRTg4RUIxMkJFNjlGMUMwRDRFN0My
MTk2QTMzRTAeFw0yNjA3MjMwOTU4MDNaFw0yNjA3MzAwOTU4MDNaMBgxFjAUBgNV
BAMTDTZhNjFlNWFjLWI0ZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDY9BauQOOaLTHpvQNQanpVQnb+M5vvu8XgVdaVwlDcetX9uzf3QN8PLwTXQMea
jr8Oum2rMburuYJHj/vUfXcGVrA6+D8oKcAiLmOdBuRCTsBW4N8RKagMB15x3tz7
ekQ6cWdeH7jGvm+2p/mvPFZe60gVXINh+vR9RVAXRPQB1j0tH7jPDYx7P4cuA8MF
+QTm1BJb7lWXJvJMYEcWvNMee1+bAsOiCI6FRcAqU4GCoxYuJ2sGzOrmGbaDsjyO
QJpV0qFQG/grthKAUFsS+uNu+B/I1oCmywbmJhY6Ow27MP+m7nf/DTzueENDY3Ro
1giihngShhwP/RL/Ewv0JLsDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUuaV5jlLL
+Fn/X6BxQ1oswWC/EoIwHwYDVR0jBBgwFoAULRhptz6h6I6xK+afHA1OfCGWoz4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4RkZGLzUwMzU3Q0YwRUVE
MTExRjBCMEFDRDI3NjczNkY1NkJDL0xSaHB0ejZoNkk2eEstYWZIQTFPZkNHV296
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvTFJocHR6Nmg2STZ4Sy1hZkhBMU9mQ0dXb3o0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4
RkZGLzUwMzU3Q0YwRUVEMTExRjBCMEFDRDI3NjczNkY1NkJDL0xSaHB0ejZoNkk2
eEstYWZIQTFPZkNHV296NC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBCQdyc21RpM8uB+y4yc5jffugp2stDGqBPEQPF8dNo2UCo1IeFq3ffmsV13Wrt
g6OzyvAlb6sn/ECQ7/9jLA6DaLFMdgw+aCv4GbVUR6Y14vchwZcDskJOskhdcWuA
Z4wm/i2EoW4vG4X+IKwDWQ7mPUI00Sayu3JaScn8XzDglrQlz7aLbUNdvG0o98Yy
uT3yHBffL/U+xDj0+TMF8O97Vocj/EQ3k+KJ44Q7VdlDek/dNiyr03picNIwgbAo
aCahA+eY/A1IYfrMw9j6xEx3wRIfk5vbi/D1hpfmlQiVNfJXRKfuSzAjlvF+kgHp
ziNthCp3ksEVvlevHWaR7Gvi
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:13:03 2026 by rpki-client