Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft
File:                     lQfxHRNjrFs5Lzb17zgixc_NaPk.mft (raw, json)
Hash identifier:          bvLwfm2fbmf/Nv7EJk7kzIPWtAcsaeS9xXgFrsvUQ/s=
Subject key identifier:   FA:2F:A7:A6:A6:D7:01:24:A0:CA:9E:25:1B:AA:44:A2:7A:67:06:ED
Authority key identifier: 95:07:F1:1D:13:63:AC:5B:39:2F:36:F5:EF:38:22:C5:CF:CD:68:F9
Certificate issuer:       /CN=A91EE8AC/serialNumber=9507F11D1363AC5B392F36F5EF3822C5CFCD68F9
Certificate serial:       02AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQfxHRNjrFs5Lzb17zgixc_NaPk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft
Manifest number:          045F
Signing time:             Mon 27 Jul 2026 02:55:03 +0000
Manifest this update:     Mon 27 Jul 2026 02:55:03 +0000
Manifest next update:     Mon 03 Aug 2026 02:55:03 +0000
Files and hashes:         1: lQfxHRNjrFs5Lzb17zgixc_NaPk.crl (hash: q/hex14tQEv9wfEhdWirio+wvXI5BMGbizUZrP/zPts=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.crl
                          rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQfxHRNjrFs5Lzb17zgixc_NaPk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:55:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 682 (0x2aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE8AC, serialNumber=9507F11D1363AC5B392F36F5EF3822C5CFCD68F9
        Validity
            Not Before: Jul 27 02:55:03 2026 GMT
            Not After : Aug  3 02:55:03 2026 GMT
        Subject: CN=6a66c887-c097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c5:ec:d7:72:18:70:ba:df:a1:83:8d:24:18:
                    21:c4:c0:4b:65:e9:48:22:b6:9e:79:e7:d9:0e:42:
                    24:1d:21:97:43:63:26:bc:67:6f:0a:bb:c3:a4:73:
                    d2:58:1a:c1:38:28:d9:9e:bf:c1:ed:a5:55:0b:c4:
                    fd:01:7b:8b:22:3d:bb:32:7d:9b:b7:ed:8c:e6:61:
                    6b:34:60:13:2e:b8:4d:0e:5f:41:20:ea:21:ad:e7:
                    03:41:93:3a:f2:c8:f2:e5:bb:f6:33:c8:b6:62:cf:
                    db:82:0b:8a:bf:45:91:88:37:e5:5c:74:e7:6e:75:
                    2b:75:7b:cb:1d:af:cf:87:fe:92:1e:80:cf:04:38:
                    d1:40:37:5d:71:f1:76:c4:f2:37:56:9a:38:67:ed:
                    aa:85:c3:33:a4:52:59:f8:59:14:0f:27:0c:43:ff:
                    04:7d:06:3b:44:63:12:40:63:7f:18:4b:7f:8c:9f:
                    85:36:ef:f6:85:32:f1:61:c5:49:45:3e:ef:d4:8a:
                    3c:10:66:cb:54:97:4d:d9:46:c1:97:4d:fb:fa:25:
                    04:50:58:62:f0:eb:34:d6:c9:b3:cf:15:6a:b3:e9:
                    68:23:be:1c:c9:4d:85:58:f0:40:98:d3:92:9e:b9:
                    2f:6c:33:45:b8:b8:b9:f3:3f:f7:00:48:b1:a0:c9:
                    69:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:2F:A7:A6:A6:D7:01:24:A0:CA:9E:25:1B:AA:44:A2:7A:67:06:ED
            X509v3 Authority Key Identifier:
                keyid:95:07:F1:1D:13:63:AC:5B:39:2F:36:F5:EF:38:22:C5:CF:CD:68:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQfxHRNjrFs5Lzb17zgixc_NaPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:63:5e:1c:4e:5d:eb:47:19:e1:e8:a3:e7:b6:92:3c:2e:7e:
         78:71:62:2b:91:61:d6:fc:f6:d4:68:47:85:c4:14:21:8f:f0:
         1c:9a:1c:77:2c:c4:ec:df:5b:57:6b:bc:5e:71:84:80:a9:e8:
         20:a5:ac:91:4d:b4:ab:bc:9f:f9:60:12:ca:03:15:64:18:fa:
         c6:f8:1f:2e:96:2b:29:32:b9:90:ed:2e:4c:28:54:a8:aa:6c:
         58:b3:49:e2:66:ff:22:24:6e:c3:be:a7:03:a0:01:ba:7b:e5:
         16:37:6f:a7:cf:06:bb:b2:13:3d:72:b9:dd:6a:8b:08:50:df:
         a0:b3:0e:07:75:13:af:37:79:98:29:eb:eb:b4:c9:b8:57:8e:
         a3:5c:3a:ec:08:0d:2c:d4:e4:07:05:ef:e1:dc:32:79:52:ee:
         ad:d8:ac:3d:d8:41:6b:c7:46:0d:39:b6:0a:e6:28:18:55:a5:
         75:34:01:96:d3:87:52:a5:ca:8e:fd:82:b5:9d:3f:c0:f5:c8:
         6b:e2:62:f3:b0:5a:06:a0:07:0b:53:20:75:d4:9b:6d:45:5d:
         18:57:d7:44:42:ad:b3:80:0e:ff:9a:9f:16:fa:7b:b1:ab:77:
         31:fd:60:2c:56:a1:c1:1c:9e:fd:a7:c9:9b:d5:be:39:eb:17:
         e0:59:d3:cf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUU4QUMxMTAvBgNVBAUTKDk1MDdGMTFEMTM2M0FDNUIzOTJGMzZGNUVGMzgyMkM1
Q0ZDRDY4RjkwHhcNMjYwNzI3MDI1NTAzWhcNMjYwODAzMDI1NTAzWjAYMRYwFAYD
VQQDEw02YTY2Yzg4Ny1jMDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAocXs13IYcLrfoYONJBghxMBLZelIIraeeefZDkIkHSGXQ2MmvGdvCrvDpHPS
WBrBOCjZnr/B7aVVC8T9AXuLIj27Mn2bt+2M5mFrNGATLrhNDl9BIOohrecDQZM6
8sjy5bv2M8i2Ys/bgguKv0WRiDflXHTnbnUrdXvLHa/Ph/6SHoDPBDjRQDddcfF2
xPI3Vpo4Z+2qhcMzpFJZ+FkUDycMQ/8EfQY7RGMSQGN/GEt/jJ+FNu/2hTLxYcVJ
RT7v1Io8EGbLVJdN2UbBl037+iUEUFhi8Os01smzzxVqs+loI74cyU2FWPBAmNOS
nrkvbDNFuLi58z/3AEixoMlpvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPovp6am
1wEkoMqeJRuqRKJ6ZwbtMB8GA1UdIwQYMBaAFJUH8R0TY6xbOS829e84IsXPzWj5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRThBQy81MDM4RUM4QzdE
RUIxMUVEQTdDQTRBN0VDNEY5QUUwMi9sUWZ4SFJOanJGczVMemIxN3pnaXhjX05h
UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xRZnhIUk5qckZzNUx6YjE3emdpeGNfTmFQay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RThBQy81MDM4RUM4QzdERUIxMUVEQTdDQTRBN0VDNEY5QUUwMi9sUWZ4SFJOanJG
czVMemIxN3pnaXhjX05hUGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJGNeHE5d60cZ4eij57aSPC5+eHFiK5Fh1vz21GhHhcQUIY/wHJocdyzE7N9b
V2u8XnGEgKnoIKWskU20q7yf+WASygMVZBj6xvgfLpYrKTK5kO0uTChUqKpsWLNJ
4mb/IiRuw76nA6ABunvlFjdvp88Gu7ITPXK53WqLCFDfoLMOB3UTrzd5mCnr67TJ
uFeOo1w67AgNLNTkBwXv4dwyeVLurdisPdhBa8dGDTm2CuYoGFWldTQBltOHUqXK
jv2CtZ0/wPXIa+Ji87BaBqAHC1MgddSbbUVdGFfXREKts4AO/5qfFvp7sat3Mf1g
LFahwRye/afJm9W+OesX4FnTzw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:21:10 2026 by rpki-client