Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
File:                     LnG4umMF_9SMEx0IYK8sGs9tIrY.mft (raw, json)
Hash identifier:          UgN4j+C3raXbdeCOZsJ/zc/8S5t9D5V6FO9+BYU+V/0=
Subject key identifier:   07:B7:25:93:03:8E:D9:D1:AD:F8:AA:51:08:6B:13:6E:8B:2D:67:F5
Authority key identifier: 2E:71:B8:BA:63:05:FF:D4:8C:13:1D:08:60:AF:2C:1A:CF:6D:22:B6
Certificate issuer:       /CN=A9165D52/serialNumber=2E71B8BA6305FFD48C131D0860AF2C1ACF6D22B6
Certificate serial:       02B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
Manifest number:          02AD
Signing time:             Wed 19 Aug 2026 02:02:13 +0000
Manifest this update:     Wed 19 Aug 2026 02:02:13 +0000
Manifest next update:     Wed 26 Aug 2026 02:02:13 +0000
Files and hashes:         1: LnG4umMF_9SMEx0IYK8sGs9tIrY.crl (hash: 71Ym3U/5Bnc31siMHYmMSnyoGYiELycGpDxYs8dBKtA=)
                          2: D08310DE94C511EDB2732947C4F9AE02.roa (hash: 2L5qZ+Uea1MHfKirYAIB35nTColOCMTSO380VpA6Q3g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.crl
                          rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 02:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 696 (0x2b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165D52, serialNumber=2E71B8BA6305FFD48C131D0860AF2C1ACF6D22B6
        Validity
            Not Before: Aug 19 02:02:13 2026 GMT
            Not After : Aug 26 02:02:13 2026 GMT
        Subject: CN=6a850ea5-1dc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:49:31:78:3f:ba:6d:41:50:38:1c:43:53:eb:
                    3d:bb:e9:83:88:a4:47:76:4d:1c:81:4a:b3:1f:dd:
                    55:a9:9f:03:81:43:17:63:e1:c2:6f:ca:5e:34:3c:
                    27:7a:db:ab:8a:0b:ff:bd:36:cd:e4:13:e7:94:c9:
                    65:f5:cc:65:67:b7:21:8a:7d:2c:ab:51:61:6b:be:
                    e0:5a:98:3a:12:30:63:1c:1e:81:d8:c7:f5:45:37:
                    47:66:2c:89:e8:80:fc:5a:d6:4b:b9:1f:bc:89:24:
                    86:4b:64:1c:45:fd:32:27:82:fc:85:8f:36:1e:60:
                    e0:44:19:b8:b9:9a:e5:9c:cf:38:b9:2a:27:5f:c4:
                    ba:2d:e7:de:e5:41:25:30:2d:f1:ec:87:16:e3:63:
                    c0:42:7c:a9:61:de:05:a9:5f:c4:ab:a9:58:2b:07:
                    16:3f:4b:14:e0:b6:5b:20:06:f6:f6:45:bc:b6:ef:
                    7b:36:2a:53:76:ec:ef:62:71:e8:25:70:67:4a:dd:
                    59:23:37:2c:f8:b9:a1:19:af:86:74:75:22:ad:c0:
                    65:e4:79:44:d4:68:2d:f7:43:40:22:b7:b7:2a:2f:
                    5a:72:65:f2:4c:6a:a3:3c:fe:5b:3b:79:34:ef:5a:
                    1d:8b:a4:a7:f8:2a:1b:ce:f8:74:ee:a5:27:10:fd:
                    46:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B7:25:93:03:8E:D9:D1:AD:F8:AA:51:08:6B:13:6E:8B:2D:67:F5
            X509v3 Authority Key Identifier:
                keyid:2E:71:B8:BA:63:05:FF:D4:8C:13:1D:08:60:AF:2C:1A:CF:6D:22:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:64:c5:16:7c:40:cd:b3:cf:4d:6b:65:0f:e6:da:c9:d8:ac:
         59:81:c0:ab:0a:98:d5:95:47:f3:38:bf:b8:ed:84:f0:e8:87:
         a2:ec:2b:89:d3:b9:96:b4:28:44:30:78:5b:f0:fd:d8:ae:bf:
         23:fa:39:43:28:3b:be:de:f0:92:de:1e:c1:f9:23:38:c2:22:
         fa:4c:49:d1:2c:f3:22:a9:1c:ef:2f:bd:7e:8e:f1:fb:47:41:
         17:b8:68:51:7d:9d:44:49:a4:6f:fe:64:ed:90:f5:3a:b4:6a:
         0a:c9:0d:85:28:33:ac:80:f4:3b:e9:94:87:a6:a0:a1:d6:82:
         67:fa:63:e8:8e:9e:34:a8:ef:38:56:bc:81:dc:fe:61:0a:27:
         11:79:34:7d:c3:d1:a6:c0:a1:c6:cd:b9:09:61:3b:f6:da:1c:
         b8:01:be:59:3f:65:6b:e6:26:b9:5e:3f:72:5b:10:b5:a0:49:
         ac:7f:af:dd:a3:a4:46:6a:b2:c6:e3:3f:3d:61:25:cd:ef:94:
         10:fc:36:b6:f4:b6:5b:53:07:a5:8d:1d:4f:dd:30:90:80:a6:
         ab:ac:ff:cd:50:0e:11:1c:04:80:10:fc:15:cc:a9:a5:33:75:
         58:9e:6c:8e:eb:94:ed:cd:ac:75:b4:e3:b4:97:1f:a6:e4:2b:
         38:0e:60:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:20 2026 by rpki-client