Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft
File:                     lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft (raw, json)
Hash identifier:          jkDa06QAZc7wp+uAc0UNF7w7jxPrKVMmlxrecvwJGGA=
Subject key identifier:   E0:E4:0E:87:49:2B:2F:C8:9E:84:7F:8E:47:7E:77:E8:00:16:86:BA
Authority key identifier: 96:96:C6:59:2C:02:B5:03:F4:88:D4:43:7C:D0:AC:82:C1:76:B3:76
Certificate issuer:       /CN=A91AEDF7/serialNumber=9696C6592C02B503F488D4437CD0AC82C176B376
Certificate serial:       085F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft
Manifest number:          084D
Signing time:             Sat 04 Apr 2026 20:42:52 +0000
Manifest this update:     Sat 04 Apr 2026 20:42:51 +0000
Manifest next update:     Sat 11 Apr 2026 20:42:51 +0000
Files and hashes:         1: lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl (hash: JBBxBeqjZYHbNg8ryDLHFU1RQEHYcfdSMCvKd52ym40=)
                          2: 13901018203F11ECBE18630CC4F9AE02.roa (hash: qWStS0v5bHsp5UQ+CjZRahzRxVHNB9C2cwcqgmnOyvw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl
                          rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 20:42:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2143 (0x85f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEDF7, serialNumber=9696C6592C02B503F488D4437CD0AC82C176B376
        Validity
            Not Before: Apr  4 20:42:51 2026 GMT
            Not After : Apr 11 20:42:51 2026 GMT
        Subject: CN=69d177cc-3a8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:79:79:ea:93:57:c2:7d:f6:a0:13:cd:11:9a:
                    ca:39:eb:da:83:44:28:32:4f:0c:e2:92:8f:e3:7b:
                    7d:d8:79:f3:72:60:ab:4b:93:1a:96:34:0f:51:cd:
                    7a:4a:21:61:aa:a5:66:bc:ea:22:43:67:2f:06:c2:
                    26:45:d2:73:e9:8f:6a:54:27:b2:2a:8d:f2:f7:22:
                    07:ff:8f:eb:7c:36:45:2d:45:82:9b:0f:9e:66:f0:
                    51:7c:37:87:4b:50:c1:c8:03:55:3f:f6:c9:66:ce:
                    aa:7c:f2:e9:de:65:63:73:37:8e:35:d4:e6:eb:7a:
                    fa:03:e2:8a:42:80:22:39:d6:4a:af:7e:42:1b:a9:
                    53:b4:71:87:95:da:a5:9e:98:1f:d5:fa:1c:c7:88:
                    2c:d5:16:16:3d:db:9e:9e:09:d5:5a:85:ef:69:78:
                    ac:a1:28:b0:b9:43:0a:c1:b9:cb:5f:e8:63:fa:01:
                    73:65:17:73:45:e1:cd:a2:06:cc:78:fc:69:a3:fe:
                    59:e6:8f:f2:31:a2:b2:63:e2:6d:64:0a:9c:a2:42:
                    8a:16:43:be:89:02:ff:f0:f8:57:3b:e8:f1:90:5f:
                    92:45:e2:c3:48:e8:76:84:4d:64:a9:b8:4e:83:75:
                    b4:e9:1f:63:26:fd:0a:df:cb:73:bb:a7:57:f1:37:
                    9b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E4:0E:87:49:2B:2F:C8:9E:84:7F:8E:47:7E:77:E8:00:16:86:BA
            X509v3 Authority Key Identifier:
                keyid:96:96:C6:59:2C:02:B5:03:F4:88:D4:43:7C:D0:AC:82:C1:76:B3:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:5c:25:7a:20:8e:da:bd:0f:2f:42:8a:a0:de:8c:6e:58:31:
         9a:9b:1e:e3:59:9f:30:ba:30:c9:13:c4:a0:61:97:72:fd:ad:
         fd:f0:b6:71:8e:36:06:fa:bb:ad:a6:30:5f:0d:7a:24:6b:a8:
         bb:23:34:c2:64:49:59:4c:56:57:c1:c4:32:af:6a:44:53:25:
         a1:56:71:4d:a9:a3:f8:20:12:aa:d7:ca:a7:ed:6b:98:b1:c1:
         11:46:50:4e:67:10:a5:33:71:71:2b:37:4e:c2:24:5e:56:ab:
         56:4e:a9:c3:5f:cf:4e:70:7a:1d:06:b9:9c:37:a3:20:e0:15:
         7e:ba:fa:2c:cc:86:a6:c4:73:02:1c:3c:fc:09:4c:75:76:ab:
         0e:17:99:03:b1:a2:ee:4a:36:44:94:71:cb:04:18:c6:f6:7a:
         a5:0e:f3:6e:8f:3f:bc:a7:d4:f7:6f:c9:39:e0:27:71:9f:27:
         e2:6a:ee:e2:0b:cc:22:a7:21:b7:75:d7:b6:46:49:c5:93:51:
         05:c9:99:4a:c8:1f:d3:f5:c6:37:d6:15:68:d7:83:25:33:4c:
         08:5b:7f:7a:28:f2:96:fc:fb:01:e2:ea:07:08:e5:4e:56:e2:
         e5:e0:47:84:02:fb:f6:55:ad:bd:c5:d6:d6:1a:a3:29:de:e9:
         7c:c4:1c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:27:43 2026 by rpki-client