Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2A10/F256CC16232C11F193A4D832A3833773/lNLPRKNppCI0T3ZXg78B6YKpxAE.mft
File:                     lNLPRKNppCI0T3ZXg78B6YKpxAE.mft (raw, json)
Hash identifier:          rlWKskBVV1NBACyb38K0CBFbzlMKseCGegB20RxXRs4=
Subject key identifier:   BD:73:2B:AA:67:B9:4C:D6:29:99:EF:D7:46:71:56:75:71:2B:E4:7D
Authority key identifier: 94:D2:CF:44:A3:69:A4:22:34:4F:76:57:83:BF:01:E9:82:A9:C4:01
Certificate issuer:       /CN=A91D2A10/serialNumber=94D2CF44A369A422344F765783BF01E982A9C401
Certificate serial:       3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNLPRKNppCI0T3ZXg78B6YKpxAE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2A10/F256CC16232C11F193A4D832A3833773/lNLPRKNppCI0T3ZXg78B6YKpxAE.mft
Manifest number:          3B
Signing time:             Tue 07 Jul 2026 09:49:27 +0000
Manifest this update:     Tue 07 Jul 2026 09:49:26 +0000
Manifest next update:     Tue 14 Jul 2026 09:49:26 +0000
Files and hashes:         1: lNLPRKNppCI0T3ZXg78B6YKpxAE.crl (hash: v7QL9kWdOoxmHhUpPi59qNv+LBXLdHsMrDAHVhGTkoE=)
                          2: A1E11254233211F193BBD607A5833773.roa (hash: yATqUA3STQ8R5PmkT2WcIp8HtIqcDGU6lhFcb0afmd4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2A10/F256CC16232C11F193A4D832A3833773/lNLPRKNppCI0T3ZXg78B6YKpxAE.crl
                          rsync://rpki.apnic.net/member_repository/A91D2A10/F256CC16232C11F193A4D832A3833773/lNLPRKNppCI0T3ZXg78B6YKpxAE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNLPRKNppCI0T3ZXg78B6YKpxAE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 09:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2A10, serialNumber=94D2CF44A369A422344F765783BF01E982A9C401
        Validity
            Not Before: Jul  7 09:49:26 2026 GMT
            Not After : Jul 14 09:49:26 2026 GMT
        Subject: CN=6a4ccba7-06a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a7:4a:ce:31:53:5f:32:8c:8d:59:5c:ff:cb:
                    14:4d:3e:fd:9d:e9:aa:03:72:3c:09:24:72:8e:22:
                    eb:99:f9:62:57:8c:0d:70:92:41:2e:77:a5:f1:7e:
                    b6:78:c3:fc:5d:a9:10:49:ee:78:a4:3f:14:27:cf:
                    32:30:f0:8d:a0:7f:f2:a0:80:85:6d:af:d0:98:41:
                    1d:9c:d1:e0:2b:37:41:33:39:64:f7:96:22:1e:6c:
                    ca:8d:d9:11:55:fa:25:17:06:7b:05:be:b6:42:5e:
                    b6:96:b7:2d:70:82:2e:9a:d4:49:04:79:52:33:89:
                    5b:6a:53:56:54:2a:66:ca:15:5a:ff:d7:ca:b5:cb:
                    40:39:54:21:46:26:ea:f6:e6:2a:cb:61:8c:dd:85:
                    8a:6e:3b:a2:45:55:60:7a:da:91:2a:80:d2:e5:4d:
                    da:db:b1:2a:77:25:cc:06:fe:cb:99:92:0c:b9:64:
                    f5:d2:65:a1:30:f0:79:d8:a5:6a:cd:04:73:e0:5b:
                    1d:6b:de:5c:1f:32:52:24:c3:cd:19:51:e0:84:fe:
                    3d:93:dd:a3:9c:02:e0:62:57:f9:95:16:42:37:cc:
                    c8:75:09:c1:5b:5a:3a:8c:d0:dc:38:a5:b1:f5:33:
                    c7:ec:ae:b0:7d:c2:f2:04:24:d5:99:2b:5d:1b:51:
                    47:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:73:2B:AA:67:B9:4C:D6:29:99:EF:D7:46:71:56:75:71:2B:E4:7D
            X509v3 Authority Key Identifier:
                keyid:94:D2:CF:44:A3:69:A4:22:34:4F:76:57:83:BF:01:E9:82:A9:C4:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2A10/F256CC16232C11F193A4D832A3833773/lNLPRKNppCI0T3ZXg78B6YKpxAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNLPRKNppCI0T3ZXg78B6YKpxAE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2A10/F256CC16232C11F193A4D832A3833773/lNLPRKNppCI0T3ZXg78B6YKpxAE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:65:76:7d:93:95:bc:fd:12:2b:07:22:b3:c3:fc:ab:d0:85:
         d1:ac:0c:a0:ad:dd:8c:3a:db:54:d9:aa:e2:8a:ba:f3:83:78:
         69:2f:0e:38:3e:fa:48:bd:b5:c7:68:f9:28:64:3e:a7:ea:54:
         1b:82:19:50:67:c6:ff:16:b1:9c:45:75:aa:12:a3:72:99:af:
         34:bc:4c:b0:79:ab:f5:df:4f:f7:14:32:38:2c:6b:b3:d5:7d:
         20:f5:d1:f3:82:42:bf:de:7b:e2:37:a7:f4:f0:70:2c:3f:3a:
         b0:53:1d:39:0d:fa:5f:03:e8:18:00:1c:eb:45:9d:5a:64:0b:
         57:5b:a8:97:26:d3:26:93:79:12:1d:56:51:b3:ff:19:c5:d4:
         5f:15:ee:0d:49:1f:19:91:38:26:d9:0e:6d:c9:bf:ec:5f:f0:
         c0:63:41:b8:05:86:71:ee:2b:62:c8:b1:fc:ef:ab:05:6f:c0:
         65:8e:c7:5b:19:10:e4:47:bb:42:78:bb:5b:08:ad:57:cc:e4:
         6d:46:83:66:ed:db:79:66:da:27:2e:d6:9e:87:8b:09:d6:18:
         c4:3b:05:f5:e8:0d:c7:43:8b:36:a6:be:82:8f:6d:0b:74:fc:
         a0:98:9a:d0:13:23:10:b1:b3:46:43:ed:fa:79:8b:23:6d:89:
         e1:68:ca:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 23:11:03 2026 by rpki-client