Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft
File:                     pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft (raw, json)
Hash identifier:          jyc7N5Z7Nc0cPS+1+4b6UAAtUULspiTcrblTO9IsY7o=
Subject key identifier:   C6:F7:2D:C2:65:00:0E:DE:AD:70:05:3E:F0:95:98:6E:1E:D0:F6:CE
Authority key identifier: A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18
Certificate issuer:       /CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918
Certificate serial:       0A1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft
Manifest number:          144F
Signing time:             Tue 18 Aug 2026 19:52:33 +0000
Manifest this update:     Tue 18 Aug 2026 19:52:33 +0000
Manifest next update:     Tue 25 Aug 2026 19:52:33 +0000
Files and hashes:         1: pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl (hash: 4HMcxBXYT/eFRu0GGSmzFRPNONB01U/WXIp4pSOvkOc=)
                          2: 214232EC4FD311EF90027A63C4F9AE02.roa (hash: ZdcK0Egz/cJf5v8OPJC6NHsy3ll+Zc6qF2z+CwTsBLo=)
                          3: 2921D24E067C11ED882FC127C4F9AE02.roa (hash: +8vupQ0QuPSYBYa82jxeQErq+vDZddysx6476WnaTVg=)
                          4: 32751AAE67B811F0962F0730C4F9AE02.roa (hash: 99fqD2Aad5qT3SpkHaUvCQIizH9NzhgDnPHNNitg7tE=)
                          5: F9E12AD89D0011F08C93B545C4F9AE02.roa (hash: eEmKcFndc7XvklOM2RYi47Zr8GegIbdLIWOkG5YRiBw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl
                          rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 19:52:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2587 (0xa1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0BDE, serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918
        Validity
            Not Before: Aug 18 19:52:33 2026 GMT
            Not After : Aug 25 19:52:33 2026 GMT
        Subject: CN=6a84b801-9169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:da:4a:28:06:6f:e4:9c:78:72:b6:2e:b7:b6:
                    18:2a:b8:24:28:2f:5c:71:f6:86:6b:0b:51:4c:e8:
                    cd:4b:94:ce:5d:42:cc:b2:e4:6a:90:54:69:a6:f7:
                    70:f7:23:14:b8:1a:31:57:89:e5:85:ac:ba:0c:a0:
                    fe:e5:ed:a3:55:f5:a7:05:81:d4:f7:cd:d9:6e:04:
                    a6:b7:31:57:7f:34:c9:6d:5c:a5:2c:16:25:02:f8:
                    ec:8e:04:c1:0e:88:66:69:64:56:06:3b:8d:5b:19:
                    48:34:93:73:79:d6:b0:69:49:82:0d:96:a8:84:82:
                    e5:4a:67:63:51:44:10:7f:92:90:c9:1a:f8:3f:28:
                    83:0d:d2:2d:57:af:05:1a:0b:3e:ba:65:3a:5c:5e:
                    62:32:2c:3f:26:71:9d:b5:59:23:13:1d:41:23:22:
                    70:4f:8e:a9:d5:cb:5e:22:84:1d:e1:22:25:93:05:
                    f0:e3:e4:f2:d1:1f:24:69:62:ed:ae:49:c0:c6:9a:
                    4c:e9:b1:97:d5:17:85:6e:08:d8:cd:4b:f3:1a:c2:
                    e9:15:ba:cf:55:c5:a9:3c:35:25:74:bc:1d:4b:c9:
                    42:74:4a:81:9e:3f:32:e9:f2:cf:5f:2b:74:7c:10:
                    b6:16:37:a9:0f:d0:9e:b8:60:cd:60:02:32:68:cc:
                    d9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F7:2D:C2:65:00:0E:DE:AD:70:05:3E:F0:95:98:6E:1E:D0:F6:CE
            X509v3 Authority Key Identifier:
                keyid:A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:40:c0:94:33:26:94:05:3a:89:e9:ea:a0:e0:bd:5b:e4:4f:
         6f:88:da:7d:cc:ad:79:0b:26:9a:05:4b:76:9d:b3:d4:0a:64:
         fa:07:fc:12:80:44:46:28:c1:8d:76:5f:0d:ed:93:6a:52:1b:
         3c:91:32:c9:5a:07:15:25:3a:b9:c5:5b:11:92:80:68:70:01:
         8e:33:0e:48:08:46:1c:e6:b0:bc:8c:1d:fb:f8:a0:31:df:3d:
         07:67:00:71:59:32:7b:3f:81:91:cb:24:f0:de:8f:92:ae:e3:
         80:60:94:4a:be:d5:d9:c7:12:f2:ea:f8:fc:4a:6e:52:8b:74:
         4c:81:9a:46:a3:d7:8b:d7:c4:e4:cb:61:f8:fd:3e:d9:9f:71:
         fb:cf:38:1f:03:cd:76:5f:34:7d:58:f4:d1:03:b5:43:aa:57:
         98:14:32:31:b5:d9:09:ff:cc:16:03:f1:f8:4b:6f:84:c4:fa:
         40:a8:6a:b4:d1:5e:3e:44:f0:dd:4c:be:09:e3:17:ec:a6:5e:
         20:77:51:ea:5c:6b:b4:20:84:9c:83:8b:cc:00:85:c3:74:9b:
         c0:d2:58:08:da:7f:9d:fd:5c:35:44:e6:86:81:16:95:55:f8:
         c1:8a:ef:e7:c1:0e:ae:ae:b2:30:e9:35:3d:02:a5:11:c0:65:
         1a:4f:61:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:51:29 2026 by rpki-client