Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft
File:                     lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft (raw, json)
Hash identifier:          Q0gTx38355ApBkKiq59KVVuD/AsYfJk0hyj3ek2KSys=
Subject key identifier:   BF:54:F2:48:00:EA:7F:BF:E7:DB:32:0F:69:F3:12:CE:DF:1D:38:F6
Authority key identifier: 96:96:C6:59:2C:02:B5:03:F4:88:D4:43:7C:D0:AC:82:C1:76:B3:76
Certificate issuer:       /CN=A91AEDF7/serialNumber=9696C6592C02B503F488D4437CD0AC82C176B376
Certificate serial:       0849
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft
Manifest number:          0839
Signing time:             Sat 28 Feb 2026 21:21:01 +0000
Manifest this update:     Sat 28 Feb 2026 21:21:01 +0000
Manifest next update:     Sat 07 Mar 2026 21:21:01 +0000
Files and hashes:         1: lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl (hash: tBCMJlJrJx32Ln9BmxD+CP8AxmD3/W78UUk7D1PZtag=)
                          2: 13901018203F11ECBE18630CC4F9AE02.roa (hash: wUskAPPCVqddjYoGg4G+0vc+bWX4QO8IFjl2zG0udOM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl
                          rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 21:21:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2121 (0x849)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEDF7, serialNumber=9696C6592C02B503F488D4437CD0AC82C176B376
        Validity
            Not Before: Feb 28 21:21:01 2026 GMT
            Not After : Mar  7 21:21:01 2026 GMT
        Subject: CN=69a35c3d-c3ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5e:59:72:1e:af:91:d5:dc:53:9d:f0:10:1d:
                    1b:5a:aa:72:cd:bc:9b:2f:6a:14:93:eb:f5:11:0a:
                    19:af:82:55:e1:5c:b7:e3:11:59:39:df:73:e5:e9:
                    86:46:18:67:70:5f:d4:d2:7c:74:12:82:6d:00:ad:
                    ed:42:fb:cc:24:a8:10:06:23:be:51:0f:3b:13:66:
                    2a:f3:31:f9:fc:03:33:84:cd:ff:7d:48:d0:57:b0:
                    93:8e:52:ac:ff:75:84:10:59:01:10:09:7e:27:60:
                    10:56:ce:ae:75:94:15:9a:60:d0:94:0e:4a:78:1f:
                    8f:05:c1:ce:80:51:b9:5e:32:65:1b:d9:df:34:da:
                    ab:2f:46:8d:70:05:0b:e7:73:cf:d2:40:7f:0b:60:
                    93:d5:e8:2b:44:03:24:f0:e4:e8:aa:07:3a:67:df:
                    fe:08:5b:99:f4:76:c8:e4:ae:b0:07:d2:57:9f:5d:
                    7b:58:ea:11:4d:45:8a:66:9f:7d:1e:b4:ad:86:d2:
                    f3:5e:ac:68:50:48:02:fe:c9:78:a1:b0:40:43:41:
                    a4:16:f6:b5:f4:da:b7:9c:57:e8:3f:09:57:9a:10:
                    dc:ff:3d:e5:e9:4f:fd:12:e1:83:e7:8c:23:78:f9:
                    21:f5:9e:32:cf:66:91:ca:a5:0d:cc:7d:60:ce:39:
                    06:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:54:F2:48:00:EA:7F:BF:E7:DB:32:0F:69:F3:12:CE:DF:1D:38:F6
            X509v3 Authority Key Identifier:
                keyid:96:96:C6:59:2C:02:B5:03:F4:88:D4:43:7C:D0:AC:82:C1:76:B3:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:db:a8:27:17:cc:1e:30:67:4a:ac:43:23:b5:f6:56:88:32:
         52:7c:8c:1f:d5:aa:db:0b:b0:fb:95:4d:49:f3:4b:c9:37:e7:
         24:90:d7:23:78:55:66:a0:98:82:ab:61:63:2d:c2:47:9e:be:
         9e:ee:80:31:52:2d:f8:2a:41:f2:66:bf:69:dc:16:92:87:d7:
         03:6f:c6:06:54:bc:b8:6c:f0:24:48:f4:e0:66:cf:51:55:44:
         95:bd:93:a3:88:a0:55:ca:3d:b4:52:03:6c:59:f1:36:8e:12:
         d4:4d:01:0b:e1:0b:69:c5:a4:83:00:b5:f2:68:94:1a:1c:f2:
         5b:4c:07:df:90:4f:68:76:43:ae:de:d6:52:7d:84:5a:6e:96:
         d2:f3:6b:9f:bb:c4:0d:81:be:1c:65:86:4e:34:66:6d:8e:ba:
         be:c1:c2:c7:79:cf:78:e6:93:f6:a3:70:58:67:9b:66:d3:39:
         ce:e1:2a:c7:05:92:74:2b:9d:c1:52:cb:e7:f8:b5:2c:57:d6:
         1b:12:3a:86:3a:6f:18:98:66:96:75:51:2c:20:fe:8a:81:45:
         71:83:49:23:ff:93:7f:a6:1c:d8:db:27:77:a0:9b:03:2a:56:
         ce:4b:d5:73:ce:c9:9e:23:4e:ad:cd:43:4c:0b:9d:c1:b7:04:
         93:9f:3a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:22:46 2026 by rpki-client