Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.mft
File:                     lpDF1gn85ELDW5kW1WP58Ye2itQ.mft (raw, json)
Hash identifier:          ULMMKY+I9p4Gcm6hi6Zj30U+j2SBRlNTiczmmeJMwTM=
Subject key identifier:   71:B3:7C:1C:6A:CC:D0:CB:C5:C0:01:E4:70:FC:E0:E4:16:2A:F6:AC
Authority key identifier: 96:90:C5:D6:09:FC:E4:42:C3:5B:99:16:D5:63:F9:F1:87:B6:8A:D4
Certificate issuer:       /CN=A91D8E2C/serialNumber=9690C5D609FCE442C35B9916D563F9F187B68AD4
Certificate serial:       0F03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpDF1gn85ELDW5kW1WP58Ye2itQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.mft
Manifest number:          0EF9
Signing time:             Fri 12 Jun 2026 17:35:52 +0000
Manifest this update:     Fri 12 Jun 2026 17:35:52 +0000
Manifest next update:     Fri 19 Jun 2026 17:35:52 +0000
Files and hashes:         1: lpDF1gn85ELDW5kW1WP58Ye2itQ.crl (hash: D6Rb7C6ubDk6pCYK2oWTQgkYZxITHBo2J2bttei7YN4=)
                          2: 6C153768CE5511EB9DD80C30C4F9AE02.roa (hash: 8GXHkMu5QhzxhDcgK/hTob055OzXskK4SzGbgPUovhg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpDF1gn85ELDW5kW1WP58Ye2itQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:35:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3843 (0xf03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8E2C, serialNumber=9690C5D609FCE442C35B9916D563F9F187B68AD4
        Validity
            Not Before: Jun 12 17:35:52 2026 GMT
            Not After : Jun 19 17:35:52 2026 GMT
        Subject: CN=6a2c4378-6168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ba:58:1a:50:20:47:a3:44:37:29:0d:14:f4:
                    f5:2b:e1:2e:38:5b:33:12:5d:a2:13:95:cc:a8:fd:
                    da:5e:43:ef:c1:ac:d6:4a:4d:ad:5a:46:4b:7e:ad:
                    e0:fc:ef:ff:01:3f:0f:b0:49:03:bc:7b:49:19:e8:
                    aa:49:e1:0f:e6:20:ad:6b:7e:c9:aa:6a:8f:2f:2e:
                    fc:f7:80:f6:1b:0b:5c:0d:12:7c:03:6d:15:0e:8a:
                    80:e7:19:1c:f9:ad:67:26:5c:2f:14:b5:e3:ed:b4:
                    1f:7a:20:6f:8d:09:e7:92:a1:08:f3:a7:68:a3:53:
                    ac:0c:14:94:ed:18:50:68:0f:40:c9:9a:e7:42:bb:
                    14:2e:f5:9a:71:54:3a:04:50:79:fe:a7:45:57:f8:
                    12:f8:47:89:13:2e:9c:07:9b:6f:ce:67:48:cb:e7:
                    26:4c:b6:9d:d5:aa:d2:5d:48:aa:63:a7:6a:90:fe:
                    c0:9e:f0:42:1b:e9:03:74:00:f8:11:ba:db:c8:58:
                    28:0b:2d:b3:9f:db:af:0c:7a:11:6a:94:70:89:e0:
                    b7:47:0b:bd:1c:89:57:6c:c0:bd:2d:ac:c6:37:28:
                    92:14:48:9b:6f:ef:9e:b8:2f:6d:06:f2:6c:ed:03:
                    f5:bf:8b:d3:43:30:04:fc:3a:ad:2a:82:ab:36:97:
                    02:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B3:7C:1C:6A:CC:D0:CB:C5:C0:01:E4:70:FC:E0:E4:16:2A:F6:AC
            X509v3 Authority Key Identifier:
                keyid:96:90:C5:D6:09:FC:E4:42:C3:5B:99:16:D5:63:F9:F1:87:B6:8A:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpDF1gn85ELDW5kW1WP58Ye2itQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:13:e0:96:01:5d:33:e3:ef:b8:63:96:04:bd:4a:7b:ed:e4:
         75:1f:b3:1e:67:df:eb:91:42:fc:ab:03:28:d6:aa:5d:9f:42:
         89:24:e8:eb:52:d5:57:0d:ee:18:50:99:86:71:4a:7d:0b:c0:
         2a:bf:a9:d9:7f:07:ce:22:0e:3a:c8:51:cd:61:9a:43:e3:43:
         e9:3c:03:d2:04:a3:d4:51:96:1b:9f:9a:c5:a7:91:6e:09:e0:
         76:bf:d9:a1:c6:42:01:31:af:4a:11:48:c8:d8:fa:a9:1a:02:
         8d:18:bd:8e:8d:62:98:0a:22:53:b3:8d:a2:1e:68:d2:ef:50:
         50:5d:03:09:15:95:03:9b:93:5c:01:c7:f8:49:01:28:c4:f4:
         bf:b2:0d:f1:5b:3c:05:a5:df:f3:8f:37:07:76:d2:b1:a6:bb:
         15:d7:4e:bf:2f:54:cf:1b:3f:fb:3a:bd:46:63:dc:39:8b:86:
         3f:60:4e:16:24:f8:fc:64:80:31:68:47:f7:af:b8:40:22:97:
         f5:82:a1:8c:6e:8a:b2:07:54:ef:a2:1f:dc:5a:74:7f:60:fe:
         a0:ad:5d:1d:f3:36:cc:26:f8:b9:cc:5c:5e:df:c1:ca:df:49:
         68:cc:75:eb:5f:8e:27:13:11:8c:31:b3:5a:19:dd:d3:b3:3e:
         c9:8a:7c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:16:43 2026 by rpki-client