Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft
File:                     LR4Op3rKP-WX3vMZYh70DRLUwdw.mft (raw, json)
Hash identifier:          7uoy5DQpwTVVXRctwB4Uyf6LTYm/8+vrOzZqRMCf11M=
Subject key identifier:   37:51:96:33:CE:6C:3F:18:25:B7:E4:60:58:81:BE:85:52:0D:85:C7
Authority key identifier: 2D:1E:0E:A7:7A:CA:3F:E5:97:DE:F3:19:62:1E:F4:0D:12:D4:C1:DC
Certificate issuer:       /CN=A91939DA/serialNumber=2D1E0EA77ACA3FE597DEF319621EF40D12D4C1DC
Certificate serial:       0196
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft
Manifest number:          018E
Signing time:             Mon 27 Jul 2026 06:12:51 +0000
Manifest this update:     Mon 27 Jul 2026 06:12:51 +0000
Manifest next update:     Mon 03 Aug 2026 06:12:51 +0000
Files and hashes:         1: LR4Op3rKP-WX3vMZYh70DRLUwdw.crl (hash: 1eXMAKKVzy/a8UrhRmYFcvls0c5KaTOcRlSUsHAaiFk=)
                          2: 056F0FFA2FAC11EFA4D45C6BC4F9AE02.roa (hash: lYBNMPIGwdmg3hahCp/0TuyobmaHK3vnQLBxguRZNCc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.crl
                          rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:12:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406 (0x196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91939DA, serialNumber=2D1E0EA77ACA3FE597DEF319621EF40D12D4C1DC
        Validity
            Not Before: Jul 27 06:12:51 2026 GMT
            Not After : Aug  3 06:12:51 2026 GMT
        Subject: CN=6a66f6e3-b28e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d2:c3:b1:d5:0d:25:34:5f:25:dc:5f:15:a1:
                    36:83:d0:d3:46:4c:2e:5a:d7:ba:4a:c4:3d:33:69:
                    e0:6c:c5:31:e5:7e:a2:97:b4:2a:df:a6:95:c5:0c:
                    1e:a5:75:35:0a:99:78:8f:eb:a3:58:4d:23:47:c2:
                    13:88:89:14:ff:5f:8e:a3:dc:8d:58:b8:cc:b9:2c:
                    cd:6a:50:27:84:f2:d4:b4:7f:dd:db:f3:c1:4f:57:
                    7b:dc:31:60:96:0b:4e:87:3d:05:38:c5:e3:79:24:
                    fe:a9:90:02:67:d2:f5:e6:3e:ae:64:0c:2f:ab:21:
                    8b:54:e1:ee:19:49:dc:50:54:79:d2:27:de:bf:28:
                    48:fe:09:e1:ef:78:d0:5b:09:0a:e0:1d:ae:2c:74:
                    a9:d0:c6:73:91:cc:80:48:51:ba:35:96:6a:87:ff:
                    ea:47:4d:8f:46:fd:ab:63:cc:42:5b:b2:58:7c:6b:
                    c6:30:8f:3a:64:a2:62:d2:e4:52:e2:28:0e:91:6e:
                    92:f2:f1:7a:c1:c5:f2:2a:77:42:9c:69:34:bb:bc:
                    b2:2a:71:cc:6c:c2:94:87:0d:f0:ed:82:9b:12:ce:
                    80:85:93:88:1a:3a:c0:0d:b0:4c:c7:94:81:57:02:
                    dd:53:c2:a7:c0:51:c5:1e:7b:89:11:8a:68:17:00:
                    45:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:51:96:33:CE:6C:3F:18:25:B7:E4:60:58:81:BE:85:52:0D:85:C7
            X509v3 Authority Key Identifier:
                keyid:2D:1E:0E:A7:7A:CA:3F:E5:97:DE:F3:19:62:1E:F4:0D:12:D4:C1:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:e6:2d:f8:4b:90:e8:55:d8:07:e6:4a:63:16:b9:53:8b:a3:
         a2:fd:d3:b8:c2:41:98:86:01:2b:52:1c:f5:b5:39:f4:83:f5:
         ec:d2:a2:5f:d7:7a:c9:c6:61:89:aa:8d:17:3c:c3:34:61:1f:
         38:6b:08:64:e4:b1:62:5f:4c:f5:42:8a:48:11:68:ee:a5:6a:
         27:10:65:10:ad:75:2c:61:6a:90:14:bf:04:5e:3a:14:f8:c9:
         43:80:69:89:d8:ac:bf:ad:3e:27:28:34:e5:e1:50:a8:ea:a9:
         f6:2f:6e:3a:93:60:01:c7:2d:f9:39:f2:70:4a:38:6e:df:48:
         fd:8c:1a:9e:f4:15:5c:b3:b1:e6:30:96:e2:97:a0:47:7f:df:
         9e:ae:94:23:6f:0c:f2:af:13:9d:43:57:8f:57:c5:1f:46:17:
         d5:27:33:11:eb:22:20:75:99:a4:6c:9b:4e:68:84:98:a8:ac:
         c3:8d:c4:88:e1:47:10:4a:bd:71:c7:2c:58:c0:ee:1a:d6:f7:
         11:e9:e3:76:ac:44:fb:77:84:29:f2:c0:6a:d4:1e:83:9f:9b:
         1b:76:10:96:07:7d:35:e7:49:5e:de:dd:ca:f3:08:af:60:8d:
         ec:84:fa:7e:fc:f6:6d:98:fc:c5:a4:26:7e:34:96:0d:d4:af:
         d1:89:b6:16
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTM5REExMTAvBgNVBAUTKDJEMUUwRUE3N0FDQTNGRTU5N0RFRjMxOTYyMUVGNDBE
MTJENEMxREMwHhcNMjYwNzI3MDYxMjUxWhcNMjYwODAzMDYxMjUxWjAYMRYwFAYD
VQQDEw02YTY2ZjZlMy1iMjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk9LDsdUNJTRfJdxfFaE2g9DTRkwuWte6SsQ9M2ngbMUx5X6il7Qq36aVxQwe
pXU1Cpl4j+ujWE0jR8ITiIkU/1+Oo9yNWLjMuSzNalAnhPLUtH/d2/PBT1d73DFg
lgtOhz0FOMXjeST+qZACZ9L15j6uZAwvqyGLVOHuGUncUFR50ifevyhI/gnh73jQ
WwkK4B2uLHSp0MZzkcyASFG6NZZqh//qR02PRv2rY8xCW7JYfGvGMI86ZKJi0uRS
4igOkW6S8vF6wcXyKndCnGk0u7yyKnHMbMKUhw3w7YKbEs6AhZOIGjrADbBMx5SB
VwLdU8KnwFHFHnuJEYpoFwBFbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDdRljPO
bD8YJbfkYFiBvoVSDYXHMB8GA1UdIwQYMBaAFC0eDqd6yj/ll97zGWIe9A0S1MHc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzlEQS82Q0I5RDBBNjJG
QUIxMUVGQkVEOTY3NkFDNEY5QUUwMi9MUjRPcDNyS1AtV1gzdk1aWWg3MERSTFV3
ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xSNE9wM3JLUC1XWDN2TVpZaDcwRFJMVXdkdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MzlEQS82Q0I5RDBBNjJGQUIxMUVGQkVEOTY3NkFDNEY5QUUwMi9MUjRPcDNyS1At
V1gzdk1aWWg3MERSTFV3ZHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhOYt+EuQ6FXYB+ZKYxa5U4ujov3TuMJBmIYBK1Ic9bU59IP17NKiX9d6ycZh
iaqNFzzDNGEfOGsIZOSxYl9M9UKKSBFo7qVqJxBlEK11LGFqkBS/BF46FPjJQ4Bp
idisv60+Jyg05eFQqOqp9i9uOpNgAcct+TnycEo4bt9I/YwanvQVXLOx5jCW4peg
R3/fnq6UI28M8q8TnUNXj1fFH0YX1SczEesiIHWZpGybTmiEmKisw43EiOFHEEq9
cccsWMDuGtb3EenjdqxE+3eEKfLAatQeg5+bG3YQlgd9NedJXt7dyvMIr2CN7IT6
fvz2bZj8xaQmfjSWDdSv0Ym2Fg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:11:48 2026 by rpki-client