Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.mft
File:                     lpDF1gn85ELDW5kW1WP58Ye2itQ.mft (raw, json)
Hash identifier:          sgzam2Ae+tHizv5zmIKyxvPiJzMd9gTr6ccPuhT3LX0=
Subject key identifier:   F9:82:78:F4:72:62:B0:01:FC:A2:7E:D8:21:A7:82:16:E3:EF:83:8C
Authority key identifier: 96:90:C5:D6:09:FC:E4:42:C3:5B:99:16:D5:63:F9:F1:87:B6:8A:D4
Certificate issuer:       /CN=A91D8E2C/serialNumber=9690C5D609FCE442C35B9916D563F9F187B68AD4
Certificate serial:       0F39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpDF1gn85ELDW5kW1WP58Ye2itQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.mft
Manifest number:          0F2E
Signing time:             Sun 20 Sep 2026 17:33:23 +0000
Manifest this update:     Sun 20 Sep 2026 17:33:22 +0000
Manifest next update:     Sun 27 Sep 2026 17:33:22 +0000
Files and hashes:         1: lpDF1gn85ELDW5kW1WP58Ye2itQ.crl (hash: EDk0oH2WotJrXAtTdSDiBWUw/KtR7rPEyuWm0ofJMto=)
                          2: 6C153768CE5511EB9DD80C30C4F9AE02.roa (hash: ZmHOd8xk6wRXLnwUjYLjV1O4C/0XpnWVR3Qg13Vt0IM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpDF1gn85ELDW5kW1WP58Ye2itQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 17:33:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3897 (0xf39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8E2C, serialNumber=9690C5D609FCE442C35B9916D563F9F187B68AD4
        Validity
            Not Before: Sep 20 17:33:22 2026 GMT
            Not After : Sep 27 17:33:22 2026 GMT
        Subject: CN=6ab018e3-e279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:45:1a:f0:81:6c:de:f9:d3:4e:54:21:9b:22:
                    26:02:4a:25:d9:82:04:7c:33:30:9d:d5:bb:e1:c9:
                    5d:83:c5:22:82:1c:8a:74:aa:05:58:eb:50:36:0e:
                    b8:34:aa:c8:f4:ce:ed:6a:61:aa:f7:fa:0c:a7:e5:
                    3e:63:66:2a:e7:f5:88:71:fc:3d:94:cf:4f:ac:99:
                    6c:ca:c5:88:72:95:c3:fa:fb:3d:8e:a8:c4:2d:d7:
                    ce:fa:3c:7e:d2:00:d3:a6:9f:e3:06:69:56:fd:65:
                    56:6b:8f:95:26:23:67:ab:08:96:56:8b:88:40:56:
                    77:1b:3d:7c:42:36:87:fd:ea:ae:d1:ec:f7:a4:91:
                    5a:88:65:4f:92:34:fd:80:34:68:21:4f:28:2d:07:
                    46:c8:1f:81:fa:2e:f9:0d:8c:74:3e:88:d0:35:c3:
                    58:59:64:79:7c:c9:f0:ac:3f:d0:0b:a9:e0:76:6d:
                    88:de:06:f3:ef:d7:8c:0e:8a:0b:2d:54:47:20:7c:
                    08:95:11:85:9d:70:87:33:02:1b:02:5a:6c:fc:9d:
                    62:61:44:6e:49:09:6c:bb:ae:30:19:dc:93:03:ff:
                    df:10:e6:e8:76:75:ec:14:ae:7f:c3:c0:a8:5b:13:
                    b4:7d:80:fa:9d:89:d5:47:5b:fc:74:ba:e6:2d:fb:
                    50:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:82:78:F4:72:62:B0:01:FC:A2:7E:D8:21:A7:82:16:E3:EF:83:8C
            X509v3 Authority Key Identifier:
                keyid:96:90:C5:D6:09:FC:E4:42:C3:5B:99:16:D5:63:F9:F1:87:B6:8A:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpDF1gn85ELDW5kW1WP58Ye2itQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:8b:5a:3e:f4:77:36:1a:2e:6a:06:82:0f:ad:bf:b3:8f:04:
         1b:e3:8d:00:7b:a4:35:66:37:36:52:a8:d5:f4:a6:9a:86:7f:
         c6:34:a4:c0:a8:b5:cd:d3:ce:0b:a0:e0:86:12:0f:b8:de:e7:
         9b:01:eb:96:17:b0:cc:f8:cc:8a:30:f4:23:dc:56:d2:1d:83:
         e3:e6:90:83:10:48:93:a7:3a:82:33:a0:b2:c3:9b:5f:7c:86:
         ea:e4:96:17:09:75:de:7b:a6:94:2d:0a:af:fb:19:86:94:d1:
         c4:c0:7a:23:02:14:70:92:ff:9f:f9:e9:64:e3:69:75:d2:c4:
         1f:f1:ee:c8:4d:bd:5b:f5:ca:06:8e:32:57:da:e7:6a:b3:e2:
         e3:97:d4:16:ca:89:7e:80:c5:e0:58:c3:83:d4:0d:53:62:52:
         01:e9:12:f1:43:8b:e4:37:dd:bb:52:01:be:b1:db:7b:e4:06:
         64:b3:76:56:58:c2:61:b7:52:e5:da:b0:7f:52:14:52:c4:53:
         f5:0c:ec:86:0d:bd:5c:03:fe:a9:d3:17:6a:3d:d5:50:c4:3b:
         24:4a:66:70:39:1c:6f:fa:3c:d7:f2:c8:6c:ab:2e:54:0f:11:
         35:a9:b1:2e:3c:f4:e6:c2:63:ac:71:3d:de:cf:57:6f:e4:50:
         ba:2b:4e:26
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDhFMkMxMTAvBgNVBAUTKDk2OTBDNUQ2MDlGQ0U0NDJDMzVCOTkxNkQ1NjNGOUYx
ODdCNjhBRDQwHhcNMjYwOTIwMTczMzIyWhcNMjYwOTI3MTczMzIyWjAYMRYwFAYD
VQQDEw02YWIwMThlMy1lMjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq0Ua8IFs3vnTTlQhmyImAkol2YIEfDMwndW74cldg8UighyKdKoFWOtQNg64
NKrI9M7tamGq9/oMp+U+Y2Yq5/WIcfw9lM9PrJlsysWIcpXD+vs9jqjELdfO+jx+
0gDTpp/jBmlW/WVWa4+VJiNnqwiWVouIQFZ3Gz18QjaH/equ0ez3pJFaiGVPkjT9
gDRoIU8oLQdGyB+B+i75DYx0PojQNcNYWWR5fMnwrD/QC6ngdm2I3gbz79eMDooL
LVRHIHwIlRGFnXCHMwIbAlps/J1iYURuSQlsu64wGdyTA//fEObodnXsFK5/w8Co
WxO0fYD6nYnVR1v8dLrmLftQ9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPmCePRy
YrAB/KJ+2CGnghbj74OMMB8GA1UdIwQYMBaAFJaQxdYJ/ORCw1uZFtVj+fGHtorU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEUyQy8wRkUxRUQwNkEy
RkIxMUU5QTUyNkE1N0VDNEY5QUUwMi9scERGMWduODVFTERXNWtXMVdQNThZZTJp
dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xwREYxZ244NUVMRFc1a1cxV1A1OFllMml0US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OEUyQy8wRkUxRUQwNkEyRkIxMUU5QTUyNkE1N0VDNEY5QUUwMi9scERGMWduODVF
TERXNWtXMVdQNThZZTJpdFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkYtaPvR3NhouagaCD62/s48EG+ONAHukNWY3NlKo1fSmmoZ/xjSkwKi1zdPO
C6DghhIPuN7nmwHrlhewzPjMijD0I9xW0h2D4+aQgxBIk6c6gjOgssObX3yG6uSW
Fwl13numlC0Kr/sZhpTRxMB6IwIUcJL/n/npZONpddLEH/HuyE29W/XKBo4yV9rn
arPi45fUFsqJfoDF4FjDg9QNU2JSAekS8UOL5Dfdu1IBvrHbe+QGZLN2VljCYbdS
5dqwf1IUUsRT9Qzshg29XAP+qdMXaj3VUMQ7JEpmcDkcb/o81/LIbKsuVA8RNamx
Ljz05sJjrHE93s9Xb+RQuitOJg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 06:37:34 2026 by rpki-client