Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft
File:                     LRhptz6h6I6xK-afHA1OfCGWoz4.mft (raw, json)
Hash identifier:          HqutZysqycWeoxX8hIpSWtNlEGlCkq3Nxz3VRF6L1vk=
Subject key identifier:   09:34:B5:79:5F:B1:97:7B:69:0D:29:50:49:A5:44:66:5C:06:DD:27
Authority key identifier: 2D:18:69:B7:3E:A1:E8:8E:B1:2B:E6:9F:1C:0D:4E:7C:21:96:A3:3E
Certificate issuer:       /CN=A91E8FFF/serialNumber=2D1869B73EA1E88EB12BE69F1C0D4E7C2196A33E
Certificate serial:       69
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LRhptz6h6I6xK-afHA1OfCGWoz4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft
Manifest number:          67
Signing time:             Mon 27 Jul 2026 10:15:39 +0000
Manifest this update:     Mon 27 Jul 2026 10:15:39 +0000
Manifest next update:     Mon 03 Aug 2026 10:15:39 +0000
Files and hashes:         1: LRhptz6h6I6xK-afHA1OfCGWoz4.crl (hash: 3gTpTmdWybPegnE+zxJ717GrNNmvlrhyJRRSX4C2DXU=)
                          2: DB2D63A4EED111F0AB3DEEA1736F56BC.roa (hash: gmdE3N51alm8HvqkCut4cR91VTINLTaVDY/NZdbNc/0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.crl
                          rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LRhptz6h6I6xK-afHA1OfCGWoz4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8FFF, serialNumber=2D1869B73EA1E88EB12BE69F1C0D4E7C2196A33E
        Validity
            Not Before: Jul 27 10:15:39 2026 GMT
            Not After : Aug  3 10:15:39 2026 GMT
        Subject: CN=6a672fcb-28f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f1:df:27:86:ec:9c:a3:a0:9c:bc:98:de:ea:
                    fb:89:40:ea:96:ad:25:df:cf:b1:ab:eb:5d:e7:74:
                    e5:de:b8:02:6d:ac:25:9b:47:0b:34:28:78:bc:6c:
                    43:4d:1f:33:8a:76:54:6f:ac:11:f8:9c:da:ef:26:
                    f3:63:c4:5c:71:b7:df:56:99:71:20:41:2e:b4:de:
                    9f:ea:ce:14:96:95:32:8e:9b:81:34:d4:ee:d7:52:
                    f3:0e:aa:46:66:96:45:f5:cf:cc:25:fa:9b:af:c4:
                    22:03:d6:51:59:17:74:14:e8:8d:01:c6:58:20:c9:
                    7f:0f:42:ed:b5:04:11:ec:6c:92:8a:ef:f6:1c:bb:
                    db:54:d5:e8:61:42:f3:e9:0d:72:e0:d9:3d:20:6b:
                    9e:ff:69:77:91:c6:5f:ae:bc:ba:fc:4f:41:07:d8:
                    87:cc:3f:0d:06:d8:42:d8:5e:07:7e:ca:db:7f:09:
                    db:fe:a0:43:ad:3a:65:ad:a2:a7:42:02:dc:cd:80:
                    43:20:46:55:ee:95:a6:98:be:fc:f5:6e:9d:34:d8:
                    97:56:51:28:6e:1d:bc:77:e4:d3:cd:2b:e2:d8:43:
                    e1:5c:e1:84:7a:8a:5b:15:6c:05:45:c8:25:74:ef:
                    9a:d9:e3:20:99:54:f3:c2:e8:82:f4:36:d1:f2:c5:
                    ad:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:34:B5:79:5F:B1:97:7B:69:0D:29:50:49:A5:44:66:5C:06:DD:27
            X509v3 Authority Key Identifier:
                keyid:2D:18:69:B7:3E:A1:E8:8E:B1:2B:E6:9F:1C:0D:4E:7C:21:96:A3:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LRhptz6h6I6xK-afHA1OfCGWoz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:06:4c:16:54:5b:78:06:a5:d0:8c:f7:a9:61:ba:64:12:c6:
         95:ff:2a:68:6b:9c:21:a1:e8:40:00:42:5c:15:5e:a0:41:e3:
         32:9b:ba:33:4a:ca:4b:b5:ff:53:2a:cf:af:1b:e2:70:72:b0:
         9a:42:a6:f1:64:fe:13:b8:96:93:2e:dc:f4:28:e4:b2:98:a6:
         3c:8d:9a:27:72:8e:b8:9d:4a:d1:79:cb:17:d1:2f:b1:2b:c0:
         d9:bb:c9:42:d0:a7:92:7e:6c:a5:95:b5:ae:04:47:6d:5d:07:
         9e:cf:a6:58:4f:48:ba:01:56:24:7f:4f:7d:07:6e:8e:74:b9:
         93:34:4c:c7:f0:86:fe:f4:94:1f:d6:8d:6a:50:c2:a3:5a:5f:
         a7:19:b8:ea:9d:c8:3e:c5:b5:43:c7:42:6f:e7:56:7f:41:fb:
         08:be:87:60:cd:cb:1b:e6:3f:63:cd:39:2c:50:ca:59:ed:a0:
         92:76:16:b3:8d:1c:92:d1:c1:8f:2a:7e:80:d8:70:b0:b7:b7:
         e0:d9:74:11:ed:d6:d9:43:d8:c0:3d:56:69:89:3b:ea:a8:dc:
         c2:18:4e:39:8a:0b:81:91:ab:61:5c:94:7b:46:05:c4:dc:d0:
         5f:cb:68:54:b7:08:ac:50:b3:32:ca:14:52:9c:55:c4:66:3b:
         b1:94:e6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:06:42 2026 by rpki-client