Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft
File:                     LpwRxtKUXVL5XyTDndH0GHo0F-U.mft (raw, json)
Hash identifier:          RFpUp2VCpQG/6W4ngk6o/oFxGVGPvmSp8VGv2P2Sx+k=
Subject key identifier:   81:E1:89:E6:7D:F7:D3:07:CD:55:DF:45:5E:BD:D0:8A:40:45:4D:94
Authority key identifier: 2E:9C:11:C6:D2:94:5D:52:F9:5F:24:C3:9D:D1:F4:18:7A:34:17:E5
Certificate issuer:       /CN=A913B31D/serialNumber=2E9C11C6D2945D52F95F24C39DD1F4187A3417E5
Certificate serial:       028E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft
Manifest number:          0287
Signing time:             Wed 19 Aug 2026 02:21:30 +0000
Manifest this update:     Wed 19 Aug 2026 02:21:30 +0000
Manifest next update:     Wed 26 Aug 2026 02:21:30 +0000
Files and hashes:         1: LpwRxtKUXVL5XyTDndH0GHo0F-U.crl (hash: x1lqf6R25lTNGhSaZShaW+fMJo9K57hpWHy1Au40ThM=)
                          2: AA12544E5AAF11EF86AAA442C4F9AE02.roa (hash: pEm//IYBO5yUXUVl2BGYI8pEuzX3grMfUMX9Zq00xEc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.crl
                          rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 02:21:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 654 (0x28e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B31D, serialNumber=2E9C11C6D2945D52F95F24C39DD1F4187A3417E5
        Validity
            Not Before: Aug 19 02:21:30 2026 GMT
            Not After : Aug 26 02:21:30 2026 GMT
        Subject: CN=6a85132a-d59e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a2:8f:2a:f9:98:8b:a9:4f:20:90:60:90:e4:
                    a7:b6:cb:77:6e:32:75:0f:00:e7:6f:45:a4:c5:46:
                    51:96:52:04:eb:99:af:f1:33:c5:fb:e6:d8:c7:45:
                    23:d3:a3:a1:1e:7f:92:5a:29:9d:3c:67:a2:f9:43:
                    e6:73:57:4d:fa:75:8c:7f:da:f8:05:9b:b1:f4:99:
                    ec:f5:b0:ec:f2:dc:9f:57:e8:23:44:7e:9b:d8:8e:
                    fa:a8:a2:f1:be:52:4a:b7:d4:c1:d3:db:80:8a:aa:
                    9c:cd:12:41:7d:9a:92:65:a8:3b:d3:63:8d:7b:f5:
                    ba:57:cb:cb:33:9b:05:f2:5d:47:c4:5b:cd:b2:3c:
                    44:33:0b:8f:e4:5a:12:14:dc:87:28:6d:b8:c0:cf:
                    f9:90:de:8d:3f:f7:5e:b4:d1:f7:cf:5d:66:db:7a:
                    8e:54:35:48:d5:eb:25:79:56:39:f1:fa:e8:4d:0f:
                    e1:c0:3e:8e:06:e5:27:83:f5:9c:5b:dc:bd:cb:17:
                    73:41:c4:e4:da:ed:87:5d:97:53:88:cd:a5:a5:69:
                    fa:f7:7f:6e:1f:8f:ff:b6:7b:67:7d:fe:7c:1e:2c:
                    8f:fa:53:67:f7:69:4d:c5:fc:46:c7:5d:68:77:01:
                    19:b5:99:0a:1e:0d:af:7e:ca:76:37:b4:82:34:38:
                    92:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E1:89:E6:7D:F7:D3:07:CD:55:DF:45:5E:BD:D0:8A:40:45:4D:94
            X509v3 Authority Key Identifier:
                keyid:2E:9C:11:C6:D2:94:5D:52:F9:5F:24:C3:9D:D1:F4:18:7A:34:17:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:c1:73:28:98:ef:58:9e:f0:cd:87:8d:d8:ab:28:11:12:5c:
         72:ac:c5:5f:83:d2:fc:89:89:f1:44:4a:03:b9:49:fe:55:5b:
         06:ea:8c:f3:22:d4:fa:bd:e7:a0:74:2b:a1:34:a8:f0:7b:9a:
         59:c3:c8:ab:55:81:8f:2c:6c:d1:61:8d:88:d9:fc:46:db:75:
         54:87:e4:b5:b5:ca:74:39:20:3b:93:c8:91:55:a7:f0:bf:e7:
         7b:55:69:82:75:5f:04:02:25:0f:59:e7:98:cd:31:7d:03:3a:
         01:5b:13:8d:4c:f8:29:5d:e4:7e:08:cf:38:d5:19:b8:b3:eb:
         f0:8f:99:e6:d7:1f:0b:34:55:67:01:64:57:d6:24:d1:21:34:
         c1:d3:97:c3:0a:db:b6:35:d7:53:63:f1:37:7d:2c:dd:01:85:
         e7:e9:24:12:8a:82:47:3f:82:6a:e0:78:5a:e5:a6:95:c6:46:
         8e:e6:2f:11:47:a4:e9:e9:33:c4:14:1d:78:33:bc:71:2d:46:
         4e:c8:f5:a9:f1:7e:05:a6:d6:3e:1a:33:02:2d:06:24:a7:08:
         f5:ba:cd:d8:11:98:cb:92:c9:32:0c:21:e3:2a:c8:07:8b:28:
         0d:68:09:ff:fc:32:07:6f:d7:67:5d:94:4f:a2:15:c2:ac:63:
         58:d1:e1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:29:14 2026 by rpki-client