Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft
File:                     LtTacwW1lNyVt6BBDZrLKN4pIL8.mft (raw, json)
Hash identifier:          5VQPsvg2JkfVrZ8K0193UC+eQvN5/J95fBdNuQeGxO4=
Subject key identifier:   47:17:F7:62:1C:8D:96:CB:0F:4A:CD:C2:18:80:B5:3B:EE:46:C4:1D
Authority key identifier: 2E:D4:DA:73:05:B5:94:DC:95:B7:A0:41:0D:9A:CB:28:DE:29:20:BF
Certificate issuer:       /CN=A91454E4/serialNumber=2ED4DA7305B594DC95B7A0410D9ACB28DE2920BF
Certificate serial:       0573
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtTacwW1lNyVt6BBDZrLKN4pIL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft
Manifest number:          0567
Signing time:             Tue 18 Aug 2026 23:43:55 +0000
Manifest this update:     Tue 18 Aug 2026 23:43:55 +0000
Manifest next update:     Tue 25 Aug 2026 23:43:55 +0000
Files and hashes:         1: LtTacwW1lNyVt6BBDZrLKN4pIL8.crl (hash: PHW5byJ7maELIcGHSARZqctF9opnB5qKkBHekJteRik=)
                          2: A88BB9A01CA011EFB3F91015C4F9AE02.roa (hash: I3gaSJbRtBej3m7ESAqqUXRIOkfko3scyKuyIisZUvA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.crl
                          rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtTacwW1lNyVt6BBDZrLKN4pIL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 23:43:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1395 (0x573)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91454E4, serialNumber=2ED4DA7305B594DC95B7A0410D9ACB28DE2920BF
        Validity
            Not Before: Aug 18 23:43:55 2026 GMT
            Not After : Aug 25 23:43:55 2026 GMT
        Subject: CN=6a84ee3b-2334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2c:50:38:01:cc:37:f5:5f:3c:74:d2:d3:b7:
                    d0:1f:e0:8d:bd:20:21:1d:a4:1a:33:0d:54:1c:0d:
                    e2:89:3c:81:63:4b:7f:ad:9e:66:b6:c6:92:c5:26:
                    78:dc:cd:d8:ea:81:37:13:03:c9:9a:8d:3c:55:93:
                    4f:ab:23:97:28:23:c6:3c:be:6f:f5:79:77:cf:1d:
                    8e:b2:f4:13:47:e2:e8:b2:d9:c0:da:48:d7:66:52:
                    b3:ff:dd:d8:d1:14:e6:64:60:8e:85:89:ae:c6:5d:
                    7f:a8:31:c1:37:87:8a:73:56:da:a2:76:6c:b2:95:
                    57:13:f5:26:26:ff:6b:b8:80:ea:3c:ea:c4:12:5c:
                    eb:08:5b:30:b2:94:5d:31:5d:7b:09:2f:a8:e6:70:
                    31:18:8c:69:33:fb:14:89:f2:1f:d2:77:57:90:4e:
                    e1:ff:ac:64:a9:92:fc:dc:d6:44:ae:9f:41:eb:1a:
                    e0:56:53:10:4a:69:25:72:0d:5a:b1:12:8c:d7:94:
                    83:23:cd:d6:00:b0:07:55:85:8e:b7:f8:47:d7:b7:
                    6e:f4:fd:b6:d9:37:56:8e:0c:1a:90:a9:bc:08:eb:
                    1c:96:69:5d:25:8f:42:f4:3c:0d:29:f7:ec:9f:1e:
                    1f:f1:97:e2:f4:da:00:f1:b8:3c:a9:0d:6e:8a:0d:
                    f8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:17:F7:62:1C:8D:96:CB:0F:4A:CD:C2:18:80:B5:3B:EE:46:C4:1D
            X509v3 Authority Key Identifier:
                keyid:2E:D4:DA:73:05:B5:94:DC:95:B7:A0:41:0D:9A:CB:28:DE:29:20:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtTacwW1lNyVt6BBDZrLKN4pIL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:a5:b9:18:13:41:66:09:e6:91:59:1e:57:6c:0b:df:f0:5a:
         2c:1c:81:5e:62:cc:fb:2e:7a:e6:60:2f:79:af:33:61:fe:99:
         80:e7:15:c7:7a:a4:91:d1:a0:ea:6e:c5:8d:eb:ef:39:03:fc:
         ac:b9:57:c0:4c:cf:9e:97:f9:7f:d6:b8:87:df:ba:b5:1e:15:
         df:3b:28:07:d8:75:d5:8d:88:c9:36:bf:20:07:7d:30:12:4a:
         4b:83:ad:6d:a7:45:0b:5b:b1:35:4b:a9:73:53:3e:da:99:9d:
         73:a3:4a:22:0b:57:7c:a4:bd:51:00:77:5b:24:03:5b:2f:8d:
         ae:9c:6c:0c:40:24:38:6a:34:04:e3:64:b1:5a:63:6e:df:e6:
         f8:af:2d:ae:db:00:38:f3:6f:d5:21:6a:b9:2d:35:8c:5a:ae:
         89:db:09:03:56:96:a6:c4:30:87:84:91:2e:22:8c:2e:6a:48:
         ee:9c:5c:a8:6b:57:d9:0d:19:7f:55:cf:ab:ea:f9:4c:8f:97:
         34:22:da:10:58:78:19:23:60:20:b9:aa:0d:8d:4d:48:e3:78:
         b4:12:ed:a2:d9:0f:a1:fd:a3:11:a6:ee:b9:02:50:81:c9:7c:
         09:e5:84:18:a7:1c:c5:47:99:2b:19:d5:f8:64:cd:73:d6:29:
         5d:d7:19:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:04:28 2026 by rpki-client