Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft
File:                     lQJWKPFDQQRhRqwgujJGFEYanMM.mft (raw, json)
Hash identifier:          e/dGFxCnbKBJ9GdFPrMERKhF8rmNWKQvDubMgcm6VIE=
Subject key identifier:   3A:27:9B:E7:46:D1:F5:B7:97:B3:50:04:E2:09:57:88:4E:01:7B:A4
Authority key identifier: 95:02:56:28:F1:43:41:04:61:46:AC:20:BA:32:46:14:46:1A:9C:C3
Certificate issuer:       /CN=A91E5A9F/serialNumber=95025628F14341046146AC20BA324614461A9CC3
Certificate serial:       0790
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft
Manifest number:          12C0
Signing time:             Tue 18 Aug 2026 17:13:16 +0000
Manifest this update:     Tue 18 Aug 2026 17:13:16 +0000
Manifest next update:     Tue 25 Aug 2026 17:13:16 +0000
Files and hashes:         1: lQJWKPFDQQRhRqwgujJGFEYanMM.crl (hash: bsDJ3wjyT+lc6yI7N0JK85/lr3o2XHpqWw8ZA1LO7OA=)
                          2: 9CA45412A6AB11F0AA6B453DC4F9AE02.roa (hash: Fr+3c6RpSKSYZINS3tB5kOz0vDzbNjiqKIyeQ9IGWSA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.crl
                          rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 17:13:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1936 (0x790)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5A9F, serialNumber=95025628F14341046146AC20BA324614461A9CC3
        Validity
            Not Before: Aug 18 17:13:16 2026 GMT
            Not After : Aug 25 17:13:16 2026 GMT
        Subject: CN=6a8492ac-21dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4f:19:70:bf:c0:e2:af:85:07:72:91:93:43:
                    de:06:54:cc:48:92:da:c3:13:a5:27:4c:26:89:37:
                    25:97:02:3c:f4:59:07:7f:99:a1:aa:ed:be:24:25:
                    cb:b6:9d:bb:20:f6:0f:17:df:ee:44:1e:78:f9:d2:
                    2e:6c:02:a5:f4:83:89:39:c1:ce:af:5d:35:fe:24:
                    bd:6e:29:81:a6:c7:11:5a:b4:de:12:80:82:c1:ea:
                    ea:03:00:15:0d:da:4f:75:61:1c:aa:32:63:af:b8:
                    96:67:f9:93:1d:22:66:b0:89:cc:64:95:87:3d:c5:
                    8d:c2:c2:fb:bb:3d:8b:6d:02:e1:a1:db:c4:62:01:
                    f5:aa:93:5b:43:db:04:38:33:73:e6:e1:9d:6c:8b:
                    c5:5c:af:26:5a:9b:e6:18:a4:56:38:fb:45:2a:b5:
                    62:e8:fb:72:c5:f3:77:f9:fd:0f:32:25:36:bd:dc:
                    e9:6c:36:11:3d:64:d1:70:4c:b5:63:83:77:79:e1:
                    58:c5:57:3b:48:39:f4:17:f3:78:1b:7a:1a:5a:09:
                    c1:ea:77:91:78:d2:8e:4e:b5:41:d7:bd:75:8d:64:
                    e8:10:d3:c0:37:8a:58:9b:b5:ed:78:1c:cc:22:a5:
                    d0:af:61:16:99:a7:cc:fc:6d:90:fe:0a:aa:71:a6:
                    a1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:27:9B:E7:46:D1:F5:B7:97:B3:50:04:E2:09:57:88:4E:01:7B:A4
            X509v3 Authority Key Identifier:
                keyid:95:02:56:28:F1:43:41:04:61:46:AC:20:BA:32:46:14:46:1A:9C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:18:b0:58:5f:32:86:bb:fc:57:e0:c4:d4:ee:19:49:5c:ca:
         26:4e:c1:6c:94:f2:20:e0:fd:6d:87:0a:0e:ed:05:29:aa:cf:
         1b:5f:ec:1f:f6:43:09:61:5f:3f:ad:4f:dc:e6:7c:d2:30:05:
         2d:d3:a3:86:7f:a7:73:7b:04:41:35:33:66:84:af:55:11:31:
         81:2a:8d:01:dd:a0:15:16:4f:c0:72:78:86:a0:44:75:5c:24:
         a8:c5:d6:b0:47:ec:0e:79:59:90:69:f9:dd:60:9a:ec:9a:88:
         49:0e:fe:a5:10:8c:c7:cf:1d:0b:c0:d7:58:31:f5:52:d3:d5:
         28:2a:f8:3a:5c:5e:9e:0f:c8:c2:69:0d:68:ca:57:9f:f5:98:
         d5:66:a6:0a:76:ab:aa:82:0a:45:01:14:67:30:9d:c4:d5:21:
         ec:95:c2:2c:23:f5:49:10:cf:9e:5f:fb:3f:52:3e:93:6e:57:
         0e:fa:79:87:cc:05:45:97:a6:2d:98:e8:99:7b:a1:69:34:91:
         7e:b2:ad:f1:2c:8b:43:ac:01:d8:c0:52:bd:07:09:7c:65:2e:
         62:d9:5e:54:5d:c5:8a:5b:92:dc:85:81:07:73:74:b3:42:dd:
         81:33:b0:25:3d:c6:38:ac:e4:13:87:05:96:5e:23:e8:73:c8:
         21:f0:1f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:53:37 2026 by rpki-client