Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
File:                     liwsnV7f2s79sTh-ML7D_776XNA.mft (raw, json)
Hash identifier:          M3TuGVSXL7sO743pQqNjS8UDBTkgQcvG4+8+YZ0IVkc=
Subject key identifier:   96:F4:EB:30:9A:C9:37:F5:D2:3C:24:E9:D5:FC:22:91:C5:EF:0D:B1
Authority key identifier: 96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0
Certificate issuer:       /CN=A91EDA20/serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0
Certificate serial:       02A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
Manifest number:          028B
Signing time:             Mon 27 Jul 2026 03:14:56 +0000
Manifest this update:     Mon 27 Jul 2026 03:14:55 +0000
Manifest next update:     Mon 03 Aug 2026 03:14:55 +0000
Files and hashes:         1: liwsnV7f2s79sTh-ML7D_776XNA.crl (hash: xBCJP0C163JGkaTz+3aCep+3OXkxxl6umgwAeBMOjcc=)
                          2: 94E348AE300C11EE8D3CE611C4F9AE02.roa (hash: olArFcM1PUtHpMUsUbFSqGqQtjy1wHpvrbRn0NFqaZs=)
                          3: 81BA905AB5E811EDA7091163C4F9AE02.roa (hash: XCU9CEh5JfWyfgXD9tBMgbhcrtxpGC1QtyGffV0ujNk=)
                          4: 5CA025DE300C11EE903A6211C4F9AE02.roa (hash: nLmRRkvPmyWIllTJe9Zouh2k0tm12CDZu9M1JMdFVeo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl
                          rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 03:14:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 676 (0x2a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDA20, serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0
        Validity
            Not Before: Jul 27 03:14:55 2026 GMT
            Not After : Aug  3 03:14:55 2026 GMT
        Subject: CN=6a66cd2f-87e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:89:9e:5e:8d:37:ec:49:69:e0:8e:f8:f7:5c:
                    b5:ab:01:d4:b8:4c:fe:fc:92:d9:60:4c:0a:56:5b:
                    35:bb:8e:30:ab:83:77:36:6e:1e:0b:00:a4:13:04:
                    6c:3f:df:7c:53:97:bd:6d:f9:77:81:81:b7:db:57:
                    05:66:3d:a0:27:7d:42:9d:af:36:72:76:7f:79:bc:
                    24:da:53:90:8e:13:f3:8c:e3:52:e6:cd:e8:ca:a4:
                    fd:5d:bb:e5:e5:d2:6f:cd:f6:17:ae:cd:70:d0:de:
                    8e:37:1c:e3:bf:dc:01:84:d9:02:77:81:60:9f:3d:
                    50:fc:0a:5d:99:95:8d:0f:15:fa:9f:da:58:9f:c4:
                    57:2d:a6:b8:8a:23:68:23:b7:45:d5:67:09:72:d0:
                    5f:c5:03:39:a5:e4:85:8c:cd:bd:cd:5e:f9:18:6c:
                    1b:49:f5:5d:ed:79:e1:ab:89:99:c8:65:ea:21:f0:
                    e3:18:82:83:7d:bd:42:2d:4f:ec:d0:f4:85:51:fd:
                    e6:82:b8:7d:31:12:93:19:ae:b6:60:e8:a9:46:ca:
                    91:7b:23:15:aa:87:a7:9e:81:e2:10:a1:98:b5:e2:
                    96:f2:97:04:eb:d7:9b:61:12:5c:53:bd:3e:94:90:
                    95:8f:de:6f:03:34:9b:81:29:f8:9e:fe:90:58:9c:
                    bf:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F4:EB:30:9A:C9:37:F5:D2:3C:24:E9:D5:FC:22:91:C5:EF:0D:B1
            X509v3 Authority Key Identifier:
                keyid:96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:16:17:b4:5c:ae:9c:f6:31:4e:9c:01:ad:85:e1:42:12:fc:
         9d:1d:9a:52:fa:7f:7b:d0:04:a1:8f:9e:45:46:56:f6:6e:17:
         27:0a:4a:b8:e9:89:93:20:16:c7:fd:72:0a:fd:a7:40:f7:e5:
         68:f2:ff:6e:0e:94:b9:19:0f:96:04:50:9e:e5:90:30:03:2d:
         fa:cb:f1:d5:c7:20:7b:65:b3:f4:c9:8a:3a:f8:57:49:b4:4c:
         8d:21:48:29:6c:8c:a4:0c:cc:95:cb:1b:72:18:03:89:2f:5a:
         05:57:91:9e:c0:08:bb:77:a2:2e:02:18:9b:80:d3:ae:3c:cc:
         d2:71:c7:57:ef:fe:18:dc:6e:ef:32:56:e3:3e:b7:92:f8:0e:
         3f:dc:09:f4:6e:68:22:94:6d:f6:e6:71:d1:e8:39:f8:93:ad:
         f3:a0:ed:c9:e1:0e:93:29:87:3f:2d:23:10:23:38:13:db:bb:
         dd:6b:b1:f9:ce:62:bb:25:0d:8b:0d:de:06:8c:99:92:23:5c:
         ef:75:71:cd:cb:3f:49:18:fc:81:ef:56:5a:37:34:46:93:f8:
         10:ae:8b:38:35:7d:c2:2c:06:bb:56:07:bf:0c:48:c5:3a:ef:
         44:9a:fc:81:9e:13:88:78:f1:6e:40:e4:3c:48:da:f1:94:1e:
         f4:2f:04:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:41:55 2026 by rpki-client