Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft
File:                     lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft (raw, json)
Hash identifier:          bQbPVTBP1qlGJnASU1xX7f56Pt7qJVQuDM2yDPM66Ow=
Subject key identifier:   E0:CD:2E:D0:31:43:D5:36:40:CE:AD:BD:6E:7F:AD:E3:EF:0A:A5:C0
Authority key identifier: 96:96:C6:59:2C:02:B5:03:F4:88:D4:43:7C:D0:AC:82:C1:76:B3:76
Certificate issuer:       /CN=A91AEDF7/serialNumber=9696C6592C02B503F488D4437CD0AC82C176B376
Certificate serial:       0865
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft
Manifest number:          0853
Signing time:             Thu 16 Apr 2026 20:48:40 +0000
Manifest this update:     Thu 16 Apr 2026 20:48:39 +0000
Manifest next update:     Thu 23 Apr 2026 20:48:39 +0000
Files and hashes:         1: lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl (hash: KXsBWPBSSm6iPYEdNI7Mb541Xq8ri+zn74msMgJuzIo=)
                          2: 13901018203F11ECBE18630CC4F9AE02.roa (hash: qWStS0v5bHsp5UQ+CjZRahzRxVHNB9C2cwcqgmnOyvw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl
                          rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2149 (0x865)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEDF7, serialNumber=9696C6592C02B503F488D4437CD0AC82C176B376
        Validity
            Not Before: Apr 16 20:48:39 2026 GMT
            Not After : Apr 23 20:48:39 2026 GMT
        Subject: CN=69e14b28-ff72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:70:21:9d:9f:13:27:09:58:02:b7:28:04:b6:
                    85:b9:c9:62:d1:7a:31:6a:c9:5c:b8:ef:d3:80:73:
                    30:57:f7:4a:df:75:c1:bf:28:2d:b9:5a:b4:be:65:
                    5b:36:8c:c5:44:8c:90:02:2b:70:23:3f:ee:78:76:
                    d3:84:0f:a2:b2:12:0d:82:1d:12:27:98:ac:4a:02:
                    d0:3d:21:8d:85:8a:06:49:d1:ce:07:b4:7b:d7:cc:
                    f4:0b:8e:34:af:6c:b3:65:47:cd:7b:4b:27:3b:36:
                    a1:e1:73:b9:d2:4a:b6:e7:3e:eb:20:47:a1:60:a0:
                    89:ae:d1:14:74:b0:10:4a:6b:36:26:1a:f8:3b:a7:
                    17:f0:54:40:b2:17:9c:c7:c7:b5:20:a3:6c:fa:8e:
                    88:1a:0f:10:a2:85:8f:74:80:b2:01:af:bf:e7:bc:
                    1a:f1:41:81:05:85:4b:e8:2f:b1:95:ae:9e:de:d7:
                    ce:ef:12:4c:0c:a0:14:9c:49:e8:e6:d5:0b:bc:c0:
                    79:89:64:77:11:e4:5c:a0:fd:8d:6f:cd:3c:19:e9:
                    98:f6:14:8a:a7:f0:ad:eb:2b:d6:73:e3:64:e4:19:
                    6e:10:b9:26:10:37:1f:fe:09:80:19:1f:2c:40:cf:
                    aa:df:50:de:1b:e1:e3:2c:4b:ec:6b:62:0f:df:d5:
                    6d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:CD:2E:D0:31:43:D5:36:40:CE:AD:BD:6E:7F:AD:E3:EF:0A:A5:C0
            X509v3 Authority Key Identifier:
                keyid:96:96:C6:59:2C:02:B5:03:F4:88:D4:43:7C:D0:AC:82:C1:76:B3:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:ae:e8:49:f4:39:00:fe:28:8c:1e:f2:39:ad:a9:3b:30:4c:
         d2:08:03:5c:d7:3e:41:00:05:38:91:9b:01:08:98:b4:93:4c:
         60:e8:5f:b2:d5:03:c3:e3:25:da:1f:82:95:6e:76:6b:11:ba:
         b2:f8:a2:9e:9f:c1:ad:8b:71:f0:1b:27:cb:a3:0a:d3:37:e9:
         44:84:10:84:13:30:a8:5e:fc:37:03:bd:f5:75:30:4e:fd:26:
         ca:12:a1:95:4c:96:97:23:e6:2c:d4:88:8d:8f:70:5b:50:4a:
         4b:eb:c7:1d:9e:52:fa:31:50:46:c8:d6:05:7b:89:c7:5a:de:
         c6:da:87:4b:90:fd:cb:33:e2:90:a3:f7:b6:e2:62:49:cd:e3:
         8d:a2:5c:3d:46:4c:32:2a:82:17:cd:d9:43:2f:c8:ae:a0:02:
         03:7c:92:b3:0a:34:91:1e:57:e2:a5:72:0f:b5:50:df:29:76:
         5e:f0:c5:01:1f:81:3c:ae:1d:54:15:43:26:60:f0:2c:c7:82:
         9f:6d:99:69:14:bd:37:d0:29:05:61:89:aa:dc:bc:ca:4f:33:
         32:08:11:76:2f:5d:c5:6d:4a:9e:f9:a3:be:c8:9e:16:f1:74:
         f8:11:be:50:72:5e:aa:62:13:e3:20:2c:56:45:ca:57:2a:3c:
         27:8a:1b:28
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUVERjcxMTAvBgNVBAUTKDk2OTZDNjU5MkMwMkI1MDNGNDg4RDQ0MzdDRDBBQzgy
QzE3NkIzNzYwHhcNMjYwNDE2MjA0ODM5WhcNMjYwNDIzMjA0ODM5WjAYMRYwFAYD
VQQDEw02OWUxNGIyOC1mZjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuHAhnZ8TJwlYArcoBLaFucli0XoxaslcuO/TgHMwV/dK33XBvygtuVq0vmVb
NozFRIyQAitwIz/ueHbThA+ishINgh0SJ5isSgLQPSGNhYoGSdHOB7R718z0C440
r2yzZUfNe0snOzah4XO50kq25z7rIEehYKCJrtEUdLAQSms2Jhr4O6cX8FRAshec
x8e1IKNs+o6IGg8QooWPdICyAa+/57wa8UGBBYVL6C+xla6e3tfO7xJMDKAUnEno
5tULvMB5iWR3EeRcoP2Nb808GemY9hSKp/Ct6yvWc+Nk5BluELkmEDcf/gmAGR8s
QM+q31DeG+HjLEvsa2IP39Vt5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFODNLtAx
Q9U2QM6tvW5/rePvCqXAMB8GA1UdIwQYMBaAFJaWxlksArUD9IjUQ3zQrILBdrN2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRURGNy9ERUUyRDA3QzA5
MDAxMUVCODUyMzE2NUNDNEY5QUUwMi9scGJHV1N3Q3RRUDBpTlJEZk5Dc2dzRjJz
M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xwYkdXU3dDdFFQMGlOUkRmTkNzZ3NGMnMzWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RURGNy9ERUUyRDA3QzA5MDAxMUVCODUyMzE2NUNDNEY5QUUwMi9scGJHV1N3Q3RR
UDBpTlJEZk5Dc2dzRjJzM1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqq7oSfQ5AP4ojB7yOa2pOzBM0ggDXNc+QQAFOJGbAQiYtJNMYOhfstUDw+Ml
2h+ClW52axG6sviinp/BrYtx8Bsny6MK0zfpRIQQhBMwqF78NwO99XUwTv0myhKh
lUyWlyPmLNSIjY9wW1BKS+vHHZ5S+jFQRsjWBXuJx1rextqHS5D9yzPikKP3tuJi
Sc3jjaJcPUZMMiqCF83ZQy/IrqACA3ySswo0kR5X4qVyD7VQ3yl2XvDFAR+BPK4d
VBVDJmDwLMeCn22ZaRS9N9ApBWGJqty8yk8zMggRdi9dxW1KnvmjvsieFvF0+BG+
UHJeqmIT4yAsVkXKVyo8J4obKA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:36:27 2026 by rpki-client