Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft
File:                     lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft (raw, json)
Hash identifier:          EaBGdp89qgevdPxwLDesaw8DBuUtG4fjX4dGGf1njhw=
Subject key identifier:   D1:8A:D3:3B:9C:F5:CE:DD:6B:12:A1:92:81:1F:35:A3:F8:02:2C:6E
Authority key identifier: 96:73:B5:CC:F0:A8:EA:5C:E4:1A:2E:47:63:11:F3:75:CD:83:C0:D2
Certificate issuer:       /CN=A91A58AA/serialNumber=9673B5CCF0A8EA5CE41A2E476311F375CD83C0D2
Certificate serial:       E8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnO1zPCo6lzkGi5HYxHzdc2DwNI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft
Manifest number:          E8
Signing time:             Mon 27 Jul 2026 08:31:30 +0000
Manifest this update:     Mon 27 Jul 2026 08:31:29 +0000
Manifest next update:     Mon 03 Aug 2026 08:31:29 +0000
Files and hashes:         1: lnO1zPCo6lzkGi5HYxHzdc2DwNI.crl (hash: WLFazxzr9SFNLxMwk0p0afqR/lso7PKAX3gL4oZMtag=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.crl
                          rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnO1zPCo6lzkGi5HYxHzdc2DwNI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:31:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232 (0xe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A58AA, serialNumber=9673B5CCF0A8EA5CE41A2E476311F375CD83C0D2
        Validity
            Not Before: Jul 27 08:31:29 2026 GMT
            Not After : Aug  3 08:31:29 2026 GMT
        Subject: CN=6a671762-fa57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:30:bc:02:42:b8:ef:48:b9:d8:36:77:ae:af:
                    8f:83:6d:a0:ee:7b:73:d5:af:de:96:7a:a9:d0:df:
                    96:d7:a0:d2:fb:45:da:9a:47:18:9b:e5:90:f0:ec:
                    97:78:6a:1f:5e:27:7b:cb:2c:87:2f:29:56:cb:75:
                    44:7f:39:de:56:1f:d0:2d:4f:cd:00:34:bd:e1:5b:
                    d3:46:89:29:e7:b4:aa:f1:6c:74:9e:41:f5:4c:97:
                    dc:be:c8:3a:e3:b1:26:bc:97:60:e9:b2:5f:7b:c5:
                    7f:0a:b7:5b:f2:90:f5:b1:b5:a0:fe:97:30:d7:36:
                    0c:e5:9e:eb:31:76:4f:d1:a0:6a:87:d3:27:91:bc:
                    19:dd:6f:43:5d:ca:5f:36:82:76:c9:59:f1:8c:0c:
                    02:72:61:68:fe:08:19:54:70:6e:e1:55:96:69:e2:
                    e2:70:73:dd:9f:5c:98:7b:05:32:f5:29:b7:fa:2b:
                    f2:53:a3:8d:0b:5a:73:97:21:ba:d3:c8:84:0f:60:
                    6c:bd:54:bd:6d:74:fe:c7:57:62:25:91:bd:00:9d:
                    60:84:6c:08:2c:79:11:73:15:28:3d:ce:27:b1:e8:
                    51:23:7b:08:65:bc:6c:46:ea:b9:b9:0b:64:7f:e9:
                    64:71:1e:24:b2:fa:f6:68:1d:cf:c8:af:f4:38:8a:
                    d9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:8A:D3:3B:9C:F5:CE:DD:6B:12:A1:92:81:1F:35:A3:F8:02:2C:6E
            X509v3 Authority Key Identifier:
                keyid:96:73:B5:CC:F0:A8:EA:5C:E4:1A:2E:47:63:11:F3:75:CD:83:C0:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnO1zPCo6lzkGi5HYxHzdc2DwNI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:b6:50:0a:03:6d:60:28:4d:d7:1c:45:71:65:28:3e:88:5b:
         a4:bb:2d:f1:d1:cb:d6:c9:68:c8:8f:52:ce:a7:8b:58:8c:0a:
         42:7a:77:6f:4a:28:e2:f7:37:d2:30:b8:52:47:bc:6c:85:ac:
         bd:90:1c:b0:a4:0c:ea:06:79:24:23:5e:d9:52:fc:f9:04:a5:
         cc:ab:d0:75:a6:6d:d5:91:ec:52:7e:b7:8a:64:b1:6f:6a:98:
         92:85:ce:60:38:f7:7a:2b:d8:71:d0:3c:a1:05:ba:fe:e2:55:
         e1:5f:d0:74:e7:cc:6b:bb:0c:d0:bc:30:b3:a8:1f:6e:6d:15:
         c2:ad:fe:e0:73:4e:fd:d8:70:ff:0c:f5:6e:e9:4a:ef:57:91:
         e5:d2:44:57:4b:7c:43:16:31:9e:f3:1c:f5:4c:77:02:28:43:
         dc:a4:8f:bc:f2:e9:25:37:e3:9b:4f:0b:e3:7d:b9:ef:e8:1b:
         1c:c0:b0:76:1b:24:18:76:4d:4e:23:0e:78:af:f9:d6:55:f9:
         f7:28:01:03:a1:d4:58:63:ce:bf:9b:0e:bc:61:7b:24:42:85:
         70:d1:ef:55:20:86:ae:4d:8a:fd:b8:fc:5d:d6:00:db:e6:b3:
         87:a8:94:a9:d5:4d:0b:c8:d5:9a:b8:92:c6:a8:49:85:c7:71:
         4e:b0:6f:58
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU4QUExMTAvBgNVBAUTKDk2NzNCNUNDRjBBOEVBNUNFNDFBMkU0NzYzMTFGMzc1
Q0Q4M0MwRDIwHhcNMjYwNzI3MDgzMTI5WhcNMjYwODAzMDgzMTI5WjAYMRYwFAYD
VQQDEw02YTY3MTc2Mi1mYTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxDC8AkK470i52DZ3rq+Pg22g7ntz1a/elnqp0N+W16DS+0XamkcYm+WQ8OyX
eGofXid7yyyHLylWy3VEfzneVh/QLU/NADS94VvTRokp57Sq8Wx0nkH1TJfcvsg6
47EmvJdg6bJfe8V/Crdb8pD1sbWg/pcw1zYM5Z7rMXZP0aBqh9MnkbwZ3W9DXcpf
NoJ2yVnxjAwCcmFo/ggZVHBu4VWWaeLicHPdn1yYewUy9Sm3+ivyU6ONC1pzlyG6
08iED2BsvVS9bXT+x1diJZG9AJ1ghGwILHkRcxUoPc4nsehRI3sIZbxsRuq5uQtk
f+lkcR4ksvr2aB3PyK/0OIrZ+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNGK0zuc
9c7daxKhkoEfNaP4AixuMB8GA1UdIwQYMBaAFJZztczwqOpc5BouR2MR83XNg8DS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNThBQS9DMTkzOUNFNjI0
MDIxMUYwOTYxQjY0NkRDNEY5QUUwMi9sbk8xelBDbzZsemtHaTVIWXhIemRjMkR3
TkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2xuTzF6UENvNmx6a0dpNUhZeEh6ZGMyRHdOSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NThBQS9DMTkzOUNFNjI0MDIxMUYwOTYxQjY0NkRDNEY5QUUwMi9sbk8xelBDbzZs
emtHaTVIWXhIemRjMkR3TkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAp7ZQCgNtYChN1xxFcWUoPohbpLst8dHL1sloyI9SzqeLWIwKQnp3b0oo4vc3
0jC4Uke8bIWsvZAcsKQM6gZ5JCNe2VL8+QSlzKvQdaZt1ZHsUn63imSxb2qYkoXO
YDj3eivYcdA8oQW6/uJV4V/QdOfMa7sM0Lwws6gfbm0Vwq3+4HNO/dhw/wz1bulK
71eR5dJEV0t8QxYxnvMc9Ux3AihD3KSPvPLpJTfjm08L43257+gbHMCwdhskGHZN
TiMOeK/51lX59ygBA6HUWGPOv5sOvGF7JEKFcNHvVSCGrk2K/bj8XdYA2+azh6iU
qdVNC8jVmriSxqhJhcdxTrBvWA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:52:29 2026 by rpki-client