Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft
File:                     LsRLn8Flw7yChYEsMTzHgBmI_zE.mft (raw, json)
Hash identifier:          jpjhXKBRJjUXQKy5ty3jXXggV6VarmjvfAwgvjA9UVk=
Subject key identifier:   1B:39:61:7D:BF:A9:FD:22:FF:4D:E7:23:6A:57:AC:26:63:5A:CA:CF
Authority key identifier: 2E:C4:4B:9F:C1:65:C3:BC:82:85:81:2C:31:3C:C7:80:19:88:FF:31
Certificate issuer:       /CN=A91BA164/serialNumber=2EC44B9FC165C3BC8285812C313CC7801988FF31
Certificate serial:       12C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft
Manifest number:          12A6
Signing time:             Tue 14 Jul 2026 17:07:53 +0000
Manifest this update:     Tue 14 Jul 2026 17:07:52 +0000
Manifest next update:     Tue 21 Jul 2026 17:07:52 +0000
Files and hashes:         1: LsRLn8Flw7yChYEsMTzHgBmI_zE.crl (hash: gkRdA6/0ZRhIIzOJ9X/byEJX9ypDS5pTm/U1XQ2zVrk=)
                          2: 96D571D41FEB11F0A2AEE444C4F9AE02.roa (hash: xwp+vsBFySucNW4Yhnh8sJi71zn8ZQofjYnVbPZEHro=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.crl
                          rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Jul 2026 17:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4809 (0x12c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA164, serialNumber=2EC44B9FC165C3BC8285812C313CC7801988FF31
        Validity
            Not Before: Jul 14 17:07:52 2026 GMT
            Not After : Jul 21 17:07:52 2026 GMT
        Subject: CN=6a566ce8-0c9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:20:76:a7:b1:58:92:37:c2:9b:ec:c3:83:d8:
                    af:3c:75:46:42:ad:80:31:2c:a5:61:5f:53:80:3d:
                    cb:bb:81:e3:df:bc:c6:ac:34:72:aa:23:74:52:68:
                    d6:4d:73:af:47:48:31:c9:34:82:dc:31:25:fd:f0:
                    44:2b:5f:1c:0e:74:46:30:4e:98:a3:86:9d:6e:c4:
                    e3:37:b1:de:12:bd:e4:2d:65:f7:16:3c:6d:57:de:
                    36:18:02:ea:dd:5c:38:f8:3f:25:fa:ab:fd:09:6d:
                    ee:62:56:f7:b8:da:fa:bd:f2:46:a7:58:20:c7:66:
                    10:1d:50:b7:90:5a:b7:9a:fe:61:f8:d4:94:30:cd:
                    af:80:d7:30:6c:a8:e4:45:d8:4f:2a:2f:b5:e7:3a:
                    f8:8d:de:7a:9d:d1:0f:36:d0:02:9d:8c:1f:68:ca:
                    94:00:c2:29:77:e1:0c:68:0e:13:9a:62:65:91:04:
                    f2:bf:a4:d7:8f:2c:99:0b:74:be:78:48:6f:c0:54:
                    5b:1f:30:7f:a5:f7:92:b7:88:3b:36:b8:51:5c:30:
                    59:2e:eb:af:7e:c9:a3:2f:c5:f9:db:c1:b0:27:5d:
                    ab:6e:94:e6:f2:b5:89:da:eb:6a:a7:48:cc:4d:2a:
                    b0:e0:99:36:cc:74:90:9c:46:24:2d:ec:be:47:d3:
                    28:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:39:61:7D:BF:A9:FD:22:FF:4D:E7:23:6A:57:AC:26:63:5A:CA:CF
            X509v3 Authority Key Identifier:
                keyid:2E:C4:4B:9F:C1:65:C3:BC:82:85:81:2C:31:3C:C7:80:19:88:FF:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:19:82:31:56:ce:1f:17:1f:82:0d:a1:23:11:b3:46:5b:c5:
         0c:33:d8:59:51:57:f0:c6:32:79:c3:76:ec:95:74:55:6f:6c:
         9f:21:a3:f7:ef:54:04:c9:40:0b:b6:4f:18:95:8b:f2:29:33:
         07:d7:70:8d:17:9a:cc:9e:0a:22:9f:84:38:37:9a:2b:1f:ab:
         da:76:38:63:72:6e:fd:78:98:db:53:1e:93:87:1b:5a:13:0c:
         24:47:a8:2b:7e:ab:40:50:14:5b:09:ee:92:c4:2a:fd:17:3d:
         bd:ac:24:96:37:02:e7:39:58:c9:59:76:2c:00:17:98:d3:cb:
         e7:3e:fb:4f:96:0d:79:4e:9e:cc:22:5c:bb:07:a4:9d:dc:03:
         71:46:4e:86:ca:ed:8a:a5:9b:31:8a:5c:02:72:aa:b7:80:85:
         42:26:40:8f:31:ba:26:7b:52:15:18:78:8a:4e:e1:83:07:4c:
         c6:30:0b:b7:5f:b9:9c:c6:a5:08:4b:bd:ba:2d:8b:89:06:74:
         f4:80:35:d4:42:fb:8c:5d:c9:22:78:10:3c:f4:fe:2c:de:86:
         6c:2c:19:38:c4:b5:09:91:67:33:67:e9:e1:1d:c2:7d:80:55:
         ab:70:93:e1:4c:58:75:65:54:e2:8f:93:6a:56:b3:4c:9d:06:
         04:91:7a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 23:44:05 2026 by rpki-client