Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft
File:                     lQfxHRNjrFs5Lzb17zgixc_NaPk.mft (raw, json)
Hash identifier:          oq66Nyy772afcQjpBUi7goDmjRhiqLQs2Chpbp70Smc=
Subject key identifier:   80:5F:3B:D1:B8:FF:41:B9:E9:91:3B:0E:D5:D6:4A:37:0A:08:43:6F
Authority key identifier: 95:07:F1:1D:13:63:AC:5B:39:2F:36:F5:EF:38:22:C5:CF:CD:68:F9
Certificate issuer:       /CN=A91EE8AC/serialNumber=9507F11D1363AC5B392F36F5EF3822C5CFCD68F9
Certificate serial:       02A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQfxHRNjrFs5Lzb17zgixc_NaPk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft
Manifest number:          045B
Signing time:             Thu 23 Jul 2026 02:41:43 +0000
Manifest this update:     Thu 23 Jul 2026 02:41:43 +0000
Manifest next update:     Thu 30 Jul 2026 02:41:43 +0000
Files and hashes:         1: lQfxHRNjrFs5Lzb17zgixc_NaPk.crl (hash: o4y2PP2ueP7YMHF14rqwCJzuFJZFroun2AaTnfEUB+8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.crl
                          rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQfxHRNjrFs5Lzb17zgixc_NaPk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:41:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 680 (0x2a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE8AC, serialNumber=9507F11D1363AC5B392F36F5EF3822C5CFCD68F9
        Validity
            Not Before: Jul 23 02:41:43 2026 GMT
            Not After : Jul 30 02:41:43 2026 GMT
        Subject: CN=6a617f67-9702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9c:ac:54:10:8b:bf:0d:ce:c7:29:b0:48:90:
                    df:06:bb:66:78:40:77:ed:35:78:2b:b0:54:3f:e5:
                    20:aa:21:df:4a:08:c2:7a:f1:45:ff:f9:4e:93:2c:
                    cb:9b:e7:d0:87:a7:eb:38:4f:e2:c7:07:ae:3a:88:
                    03:bd:fc:0b:e2:ba:d8:52:86:d8:78:13:b5:d7:fb:
                    46:02:28:02:df:b6:b7:b5:bd:31:0f:e5:5a:11:25:
                    1f:d2:ca:98:39:66:d7:71:e2:d0:ff:55:3a:39:65:
                    8b:a5:d1:d8:84:ac:3d:44:fa:f5:b4:46:45:fe:c0:
                    db:df:97:26:cc:24:ba:1f:42:7b:19:e7:89:f7:6f:
                    63:0d:f4:54:a3:a4:6f:ed:db:4a:3d:6d:92:31:91:
                    a2:b7:5d:ce:0d:51:d1:f9:b2:0e:e3:33:49:b3:fd:
                    40:f5:2f:a2:85:80:cb:89:99:50:72:6f:27:45:2f:
                    e4:d0:d8:6b:ac:93:19:88:bc:79:8d:ae:5d:d1:88:
                    32:96:41:02:d6:ec:83:11:ab:9d:1f:11:45:f8:a0:
                    17:14:e5:d7:dc:71:25:77:8c:3d:dc:d8:c2:48:a8:
                    ac:53:40:3e:65:97:a0:60:55:28:8a:8f:80:12:5e:
                    d7:f1:3a:e1:e8:af:bf:2a:09:32:3b:5a:a6:b8:db:
                    5c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:5F:3B:D1:B8:FF:41:B9:E9:91:3B:0E:D5:D6:4A:37:0A:08:43:6F
            X509v3 Authority Key Identifier:
                keyid:95:07:F1:1D:13:63:AC:5B:39:2F:36:F5:EF:38:22:C5:CF:CD:68:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQfxHRNjrFs5Lzb17zgixc_NaPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:96:49:22:71:ba:bb:da:e0:b2:d7:14:6e:83:7b:68:9a:33:
         27:5c:88:21:55:b5:ca:a8:f2:bd:c1:aa:a5:9f:9b:c5:3d:47:
         d1:c5:43:12:9e:b6:fd:0e:55:4d:5d:cd:b9:ed:40:df:09:cc:
         d8:23:35:a3:67:e3:a3:6a:38:db:ed:f5:10:c0:a3:86:d4:1f:
         e4:ca:15:f7:8e:7f:92:0f:7e:97:9f:69:d8:01:8f:0b:c4:fa:
         80:1d:c5:fa:20:82:64:a5:87:8a:0b:2f:e9:5a:5d:b0:53:b1:
         fc:8b:41:f1:08:70:cf:86:03:1d:0f:7d:de:b5:7b:b3:d5:b0:
         b6:0c:e3:1c:38:d6:fc:31:d4:b3:74:82:b7:5f:e7:69:08:69:
         db:eb:24:9c:e9:56:92:66:9b:1e:6c:fd:9c:21:df:95:6d:83:
         42:32:0a:a3:88:fc:52:8c:02:48:11:90:f1:f4:71:7d:e8:90:
         79:c9:05:03:c6:71:ce:d9:de:bb:bf:d1:ee:b8:f5:7e:64:eb:
         39:76:a9:88:63:b4:58:95:bb:27:a9:31:da:86:8b:32:d6:94:
         9e:fe:33:3f:c7:4c:14:25:ae:92:e7:ff:a3:1c:40:c7:1c:00:
         4e:a4:0b:08:85:03:36:ae:d4:44:ad:7e:61:37:63:69:48:11:
         10:ec:de:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:32:23 2026 by rpki-client