Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft
File:                     lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft (raw, json)
Hash identifier:          E6ra39tq2iifNWvO/81I6Bb26EV6S7vSmiPIja6WstA=
Subject key identifier:   15:DE:02:91:68:06:C4:3C:62:14:79:50:5D:A6:66:85:7B:B6:AF:BE
Authority key identifier: 96:96:C6:59:2C:02:B5:03:F4:88:D4:43:7C:D0:AC:82:C1:76:B3:76
Certificate issuer:       /CN=A91AEDF7/serialNumber=9696C6592C02B503F488D4437CD0AC82C176B376
Certificate serial:       08A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft
Manifest number:          0892
Signing time:             Tue 18 Aug 2026 21:05:49 +0000
Manifest this update:     Tue 18 Aug 2026 21:05:48 +0000
Manifest next update:     Tue 25 Aug 2026 21:05:48 +0000
Files and hashes:         1: lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl (hash: fb0PgPUsMxdX7+vpTyTb2d9S5SwxFkM/r6bHkKUtv4I=)
                          2: 13901018203F11ECBE18630CC4F9AE02.roa (hash: qWStS0v5bHsp5UQ+CjZRahzRxVHNB9C2cwcqgmnOyvw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl
                          rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 21:05:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2212 (0x8a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEDF7, serialNumber=9696C6592C02B503F488D4437CD0AC82C176B376
        Validity
            Not Before: Aug 18 21:05:48 2026 GMT
            Not After : Aug 25 21:05:48 2026 GMT
        Subject: CN=6a84c92c-d99b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1f:d2:c6:26:7e:e6:50:29:5a:fe:0f:69:e8:
                    27:c4:37:a9:10:61:10:41:63:1b:3d:e6:f5:46:20:
                    16:35:59:52:3f:af:b3:78:62:d6:ce:1c:06:1e:e1:
                    00:3a:36:06:2a:ee:e8:dc:2e:9d:d8:f6:4d:f7:1f:
                    26:e2:b6:62:71:29:dd:a4:c3:4c:f6:cc:45:1c:82:
                    44:95:9e:29:d6:81:c5:0e:6b:ed:f4:45:b7:ae:e3:
                    74:76:99:18:8d:da:ba:78:10:12:ad:69:51:57:61:
                    55:ee:23:04:03:67:ad:42:6d:79:59:e7:b3:4e:89:
                    b4:fa:88:b1:97:80:87:8a:c4:76:fb:9d:4b:de:81:
                    70:27:ca:16:66:02:8d:85:4f:8b:1c:b7:4c:a3:28:
                    0c:9d:82:30:6a:3e:7f:40:25:b4:71:a3:71:f8:cc:
                    46:b9:f8:3d:0a:19:4d:cf:aa:a7:22:04:e2:32:1d:
                    da:af:ab:1b:95:d7:02:ff:a4:89:38:25:9f:15:cf:
                    ed:19:87:e0:0c:b9:16:98:c6:03:f0:98:6a:41:17:
                    0b:a8:5f:2d:16:67:b4:b6:eb:00:d3:d8:2c:f8:7c:
                    43:d0:36:27:95:ce:dc:17:c9:23:80:d7:60:b8:a4:
                    b4:1f:d6:31:2c:ed:ef:97:b3:c8:71:b8:b6:58:59:
                    bc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:DE:02:91:68:06:C4:3C:62:14:79:50:5D:A6:66:85:7B:B6:AF:BE
            X509v3 Authority Key Identifier:
                keyid:96:96:C6:59:2C:02:B5:03:F4:88:D4:43:7C:D0:AC:82:C1:76:B3:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:ef:46:f8:a7:ea:52:61:88:b0:27:9f:ac:7f:72:26:8b:39:
         35:fb:86:fc:54:e8:f0:20:25:ad:9b:fa:32:5e:1f:0c:4b:93:
         5b:b9:e4:d5:9e:ca:39:ef:c0:8a:9e:c3:78:af:35:08:29:b4:
         e7:88:db:36:95:d2:0d:38:3f:f1:13:85:13:cb:01:95:1b:88:
         73:14:23:45:43:30:17:3c:86:66:7e:f4:90:c6:fb:5d:3d:31:
         64:c2:ab:02:61:41:65:73:e0:a0:c6:2f:c3:49:a7:c3:8c:21:
         2c:a6:b2:a6:7a:43:7e:cd:22:cc:af:f3:9b:90:d6:ba:e4:62:
         3b:8f:6f:09:41:1d:f3:20:a6:84:47:c2:f6:04:14:b9:b3:d4:
         6a:09:e5:8a:2c:ff:15:73:38:09:24:b3:20:89:e9:ac:77:bb:
         70:4d:ad:8e:6f:06:8a:e2:55:41:53:29:2a:2f:f7:1c:ab:95:
         2b:37:39:45:3b:8e:7f:96:bb:2c:02:64:20:c9:ac:4b:c8:cd:
         6d:8f:e4:5d:71:4d:24:6d:2a:5b:f8:76:a3:22:5c:eb:59:ff:
         38:3b:4b:3f:3f:ea:34:c2:ec:fa:25:d9:b1:ec:f8:74:94:88:
         b7:75:e2:c9:19:fc:8a:ce:57:64:ea:b4:25:07:59:52:f6:8f:
         cc:76:43:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:39:14 2026 by rpki-client