Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
File:                     LnKDqP3Vzws9n6or6XQogZiRk6U.mft (raw, json)
Hash identifier:          +3dD2LwMqmwvjnbFH/SwRGaT8ivgSL6WQEbJoycur7M=
Subject key identifier:   BB:86:89:BE:6D:3C:75:CD:67:D3:92:48:A2:75:F3:CE:52:26:2A:64
Authority key identifier: 2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5
Certificate issuer:       /CN=A91DFADF/serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5
Certificate serial:       0A93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
Manifest number:          0A7F
Signing time:             Tue 28 Jul 2026 19:56:32 +0000
Manifest this update:     Tue 28 Jul 2026 19:56:31 +0000
Manifest next update:     Tue 04 Aug 2026 19:56:31 +0000
Files and hashes:         1: LnKDqP3Vzws9n6or6XQogZiRk6U.crl (hash: aBayCbMGgcHSPAtgGrOQrKIeahwj/G9ojcyqg6crjMc=)
                          2: 651384A6766811EF96E4115EC4F9AE02.roa (hash: 4tvOJ0DlZvwroxMkIv2YzecHFGQeqL4hT/QTBep3keQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl
                          rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:56:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2707 (0xa93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFADF, serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5
        Validity
            Not Before: Jul 28 19:56:31 2026 GMT
            Not After : Aug  4 19:56:31 2026 GMT
        Subject: CN=6a69096f-4e94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:11:a5:4b:70:aa:e6:cb:30:b8:5c:14:e8:74:
                    7c:10:45:ea:3d:60:80:ff:9e:60:bb:e7:5c:0f:3a:
                    91:70:72:a6:28:4b:13:26:6f:5b:8d:95:ba:84:44:
                    0c:67:0e:19:a8:fb:bd:8f:3f:63:7d:aa:aa:a5:38:
                    b1:58:57:a5:9d:4f:0a:4d:4b:87:06:50:41:88:71:
                    15:3f:7a:35:8e:dd:14:c8:e5:50:45:da:af:b2:3e:
                    b6:74:76:e6:9d:d4:8a:fc:97:ca:0c:f9:90:7b:99:
                    50:3d:32:3f:a0:f7:c6:63:eb:81:8f:d8:0b:57:09:
                    27:ee:1f:12:ca:af:a4:7e:78:11:e3:58:b5:c8:a6:
                    b1:f2:64:b1:d0:bb:45:23:d8:d7:d1:48:e5:91:5e:
                    5f:3e:24:eb:ac:69:0b:17:ec:53:e1:f2:d3:49:df:
                    22:dc:d1:07:40:01:cd:f5:df:98:8c:34:5a:49:71:
                    a6:8a:e3:ac:27:c5:c2:fb:ca:3f:33:e1:f8:87:5d:
                    c5:4a:af:c4:05:40:c9:64:ff:54:1f:be:2c:fa:2d:
                    66:4a:fb:d2:19:04:24:d1:3e:a8:cc:37:3b:2e:bb:
                    b4:3e:be:e8:37:d7:a3:d5:29:2a:cb:ad:e3:16:76:
                    51:b0:f1:f5:4b:b2:bd:73:c1:be:ac:8a:c9:c4:07:
                    69:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:86:89:BE:6D:3C:75:CD:67:D3:92:48:A2:75:F3:CE:52:26:2A:64
            X509v3 Authority Key Identifier:
                keyid:2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:8e:99:45:c0:5c:fa:a0:a2:f1:c7:7b:f3:83:7b:58:46:8e:
         65:15:6c:07:08:53:51:43:0e:88:d2:d6:ba:96:a7:84:34:33:
         cc:70:52:da:87:9b:d5:6b:a7:9c:18:ed:28:60:36:14:5e:30:
         79:8e:4b:b3:10:1c:68:92:73:d1:07:9d:2f:0b:3f:91:61:1c:
         31:e9:d2:0b:1f:d9:40:55:16:5a:14:fd:7d:b7:e6:94:0a:f6:
         2f:28:99:ca:53:6f:fb:d3:1a:37:4b:ca:b0:75:60:0f:06:23:
         26:f2:53:20:51:0b:eb:23:5f:40:9b:74:74:5f:07:3b:d2:bb:
         e5:53:51:0c:91:1c:2e:ed:d8:f1:05:32:94:b5:68:b4:3e:74:
         46:8d:57:b6:d9:25:c5:21:ef:67:c2:b8:52:b2:3b:00:d1:ab:
         8f:9c:78:b1:84:5a:13:1b:52:f4:9d:e7:f6:f9:61:6f:ed:16:
         bd:73:14:a8:c8:46:da:e5:d3:d1:26:36:50:4b:d5:90:f8:b5:
         f8:ee:ec:b6:e6:5b:87:f9:5e:17:2d:51:6c:31:d9:a1:0e:ff:
         cc:a1:a6:6d:3c:04:92:48:42:c2:b5:1a:eb:af:56:c5:bd:75:
         37:d0:4b:87:76:0e:e5:3c:89:6a:25:7b:34:a5:a0:7f:77:96:
         b1:80:97:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:54:45 2026 by rpki-client