Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft
File:                     lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft (raw, json)
Hash identifier:          t6SUZdFzyQHQ//kfE8tUSPHANNsoLMz7lc1jDOglyKk=
Subject key identifier:   96:06:E1:C0:3C:16:3F:E0:47:25:91:12:BC:C1:63:3F:1A:05:E0:7A
Authority key identifier: 95:06:8B:B3:0A:BC:7E:00:7F:D8:38:7E:4D:E0:A8:3E:FA:AD:D4:72
Certificate issuer:       /CN=A91E9DF8/serialNumber=95068BB30ABC7E007FD8387E4DE0A83EFAADD472
Certificate serial:       06CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQaLswq8fgB_2Dh-TeCoPvqt1HI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft
Manifest number:          06C5
Signing time:             Tue 18 Aug 2026 22:39:19 +0000
Manifest this update:     Tue 18 Aug 2026 22:39:19 +0000
Manifest next update:     Tue 25 Aug 2026 22:39:19 +0000
Files and hashes:         1: lQaLswq8fgB_2Dh-TeCoPvqt1HI.crl (hash: uvR42fLv6D936D+BSgwUvYqJaY8V78Gx8Q7S27JnlkA=)
                          2: A8086732B6DA11EBB7B67954C4F9AE02.roa (hash: 9cNeCzppQ/e103+t/5bNmmQB3XDS/R3mXfxCBYG3Y9w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.crl
                          rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQaLswq8fgB_2Dh-TeCoPvqt1HI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 22:39:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1742 (0x6ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9DF8, serialNumber=95068BB30ABC7E007FD8387E4DE0A83EFAADD472
        Validity
            Not Before: Aug 18 22:39:19 2026 GMT
            Not After : Aug 25 22:39:19 2026 GMT
        Subject: CN=6a84df17-b8a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:bf:37:a8:4f:68:1f:fd:3f:f1:4a:b8:3d:d0:
                    88:e0:20:23:83:44:c9:27:6a:47:de:63:f9:b6:f4:
                    c5:68:18:ae:f6:6f:de:cb:50:29:32:39:3c:b9:18:
                    79:be:1f:dc:2b:16:19:6b:85:53:1a:dc:26:2d:85:
                    46:3b:67:65:8c:fd:95:4e:9d:cd:35:56:da:7d:72:
                    76:a9:59:10:0c:c1:24:56:e9:ba:af:7e:47:cb:ce:
                    d8:25:17:73:f1:df:cf:8c:e0:53:d9:b0:29:3a:17:
                    35:9a:d2:6c:2c:cd:76:b6:0f:61:c3:39:b9:cc:4d:
                    76:a5:f3:90:09:b8:e6:53:0b:dd:ca:6d:1c:6b:9c:
                    51:8f:28:78:de:8c:9b:83:1d:78:af:68:1e:58:16:
                    59:e6:e1:95:98:03:a3:40:c6:ef:d6:65:61:4e:a3:
                    8d:50:79:3d:cb:d2:32:e7:20:94:8d:6e:30:a4:1a:
                    c2:28:ed:93:0e:3a:78:e5:c2:4a:28:43:0f:92:1f:
                    8a:f0:d4:bd:d6:9f:ab:c0:be:5c:95:ae:00:24:89:
                    a0:a0:34:45:48:9b:06:44:84:82:6c:9e:74:84:87:
                    47:ee:07:82:0f:b2:8a:28:15:06:4c:51:7b:b1:b0:
                    1e:f2:df:d8:44:5e:fa:c0:50:fd:75:83:e9:ff:ed:
                    3d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:06:E1:C0:3C:16:3F:E0:47:25:91:12:BC:C1:63:3F:1A:05:E0:7A
            X509v3 Authority Key Identifier:
                keyid:95:06:8B:B3:0A:BC:7E:00:7F:D8:38:7E:4D:E0:A8:3E:FA:AD:D4:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQaLswq8fgB_2Dh-TeCoPvqt1HI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:ba:1b:e4:4e:09:95:c3:f7:27:d3:13:5e:86:e0:33:1e:84:
         0b:f7:5c:c3:35:25:ec:72:a7:85:84:bb:ec:34:3d:f3:62:86:
         21:c6:0b:3b:fc:54:68:df:59:72:0e:c9:7c:19:57:a3:ae:1b:
         48:c8:6b:a8:0e:33:49:df:ad:01:6a:ad:4e:57:fc:99:18:8e:
         07:b3:6a:fd:b6:c6:68:28:7f:ae:22:c9:0d:b9:e4:19:26:03:
         1b:4c:28:25:1b:17:4a:0b:c2:41:dd:84:9d:a6:fc:78:ed:ce:
         2d:2a:26:34:71:7d:99:09:89:91:ed:61:c8:cd:86:4d:cf:b4:
         99:e8:de:3c:e8:7f:5e:fc:03:db:06:e9:9c:33:e4:c9:43:03:
         a4:6e:45:fb:5a:1d:d6:56:19:12:70:cf:8b:00:0f:f0:24:4d:
         0c:11:39:a2:61:da:c3:2d:c7:50:ef:c3:90:10:7f:45:d7:f3:
         65:cd:61:83:85:51:d6:f2:30:d0:ba:a2:ff:4f:bb:d7:c6:ca:
         d8:85:22:40:4f:fb:6a:24:f5:40:a6:7e:f8:c7:bc:62:22:ab:
         f4:e5:fa:cd:99:e0:df:9f:b1:11:e5:11:69:9f:9e:44:3f:0c:
         52:cd:4f:c9:d7:f6:b4:6f:5a:42:a4:72:8e:e7:bc:8d:c8:d1:
         69:4e:09:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:07 2026 by rpki-client