Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft
File:                     LPF-aFt4j16uSgHViDUmG18LLqQ.mft (raw, json)
Hash identifier:          mPO2/qmjzMAqisJH+VrN5M8S/TFOfYewWcKylaidt+8=
Subject key identifier:   8D:72:78:59:CF:6C:7E:0D:58:73:B6:B9:8A:8E:1B:0A:F0:1A:34:B3
Authority key identifier: 2C:F1:7E:68:5B:78:8F:5E:AE:4A:01:D5:88:35:26:1B:5F:0B:2E:A4
Certificate issuer:       /CN=A91FABEF/serialNumber=2CF17E685B788F5EAE4A01D58835261B5F0B2EA4
Certificate serial:       017B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPF-aFt4j16uSgHViDUmG18LLqQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft
Manifest number:          017B
Signing time:             Sun 01 Mar 2026 05:34:11 +0000
Manifest this update:     Sun 01 Mar 2026 05:34:11 +0000
Manifest next update:     Sun 08 Mar 2026 05:34:11 +0000
Files and hashes:         1: LPF-aFt4j16uSgHViDUmG18LLqQ.crl (hash: Jy6qU6yRKjQGnRPdiCzwSAAHte2oVQXpT3OPaCJVtiY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.crl
                          rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPF-aFt4j16uSgHViDUmG18LLqQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 379 (0x17b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FABEF, serialNumber=2CF17E685B788F5EAE4A01D58835261B5F0B2EA4
        Validity
            Not Before: Mar  1 05:34:11 2026 GMT
            Not After : Mar  8 05:34:11 2026 GMT
        Subject: CN=69a3cfd3-a8e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:32:0e:1e:7e:3b:ad:87:37:51:15:0e:6d:6b:
                    27:b9:d5:95:51:9c:b7:a1:bd:a7:bf:54:b8:43:16:
                    78:93:f6:14:29:0d:cc:36:3e:f7:21:cf:d1:cd:cf:
                    88:4c:59:26:b7:de:ef:e0:1a:2a:53:c7:c1:5c:ea:
                    4c:bb:b1:4f:73:eb:57:b1:0e:62:18:6a:93:ab:08:
                    0c:30:4b:9e:cb:d6:f5:ba:5e:3a:a5:65:4d:a0:a4:
                    70:e0:ec:22:fb:d9:5c:df:e3:0b:f1:e8:8d:36:fd:
                    8f:f3:4c:fb:95:c0:cb:96:c9:b3:8e:cf:89:7f:95:
                    e1:86:40:ad:2d:b7:1a:ce:4d:1d:54:df:5d:62:47:
                    e8:fe:7f:d0:57:a5:83:65:69:ce:9a:68:b5:73:ed:
                    c9:59:e8:c3:f9:5b:4a:b1:f2:7f:f2:bb:e3:9b:27:
                    c5:4f:bd:87:98:09:de:fc:66:16:53:b3:58:90:90:
                    b7:78:d5:8e:43:bb:d2:ec:a9:67:07:e0:dd:ef:a4:
                    e2:eb:51:6f:8a:24:ca:3e:be:da:04:6c:49:63:c2:
                    58:5a:aa:7f:6a:64:b0:2e:e0:6c:2f:6a:00:41:54:
                    73:84:42:fb:76:f3:14:48:aa:63:94:06:1e:ef:54:
                    a0:88:d2:cd:b9:ef:66:86:48:85:c7:9d:39:63:db:
                    8f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:72:78:59:CF:6C:7E:0D:58:73:B6:B9:8A:8E:1B:0A:F0:1A:34:B3
            X509v3 Authority Key Identifier:
                keyid:2C:F1:7E:68:5B:78:8F:5E:AE:4A:01:D5:88:35:26:1B:5F:0B:2E:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPF-aFt4j16uSgHViDUmG18LLqQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:cb:d6:2a:f1:4b:cc:42:c1:e9:a4:70:5b:d0:c5:42:6c:e6:
         cf:ad:64:01:55:3e:f6:d7:bf:76:c9:ae:89:12:f9:cf:73:1f:
         c7:12:26:4f:8c:ce:c9:85:bf:c8:d9:bb:45:1a:18:79:b1:01:
         af:7d:56:07:b2:9e:cc:20:20:a2:34:01:de:d8:83:fe:fa:66:
         e9:0e:65:db:d4:eb:cb:a5:4e:34:a6:05:5f:c6:36:39:36:ee:
         1a:9f:59:c0:85:8a:75:9a:0a:7d:65:72:d8:1a:f1:97:66:e3:
         27:bb:d3:f7:c0:df:c1:cb:90:c5:9d:9b:e1:0a:1c:37:5f:02:
         35:d4:5e:71:7d:c2:44:c5:11:34:14:a6:9a:57:3d:53:cc:56:
         66:c0:02:c7:c6:30:39:67:58:3c:3c:cd:6d:8d:af:12:a6:cf:
         36:e1:f8:31:6e:1d:64:26:6b:9a:25:bb:d2:94:46:60:12:cc:
         4a:cf:a8:d5:ca:b3:e9:64:c7:04:51:ca:9f:18:ce:21:c0:23:
         a5:99:58:19:80:ce:d8:40:d2:5a:09:00:74:9e:5a:3e:4c:ef:
         52:7d:bd:92:c9:36:61:4e:9e:ae:3d:eb:bc:99:2d:dc:16:da:
         ea:25:e5:4b:25:63:3b:83:de:30:22:ea:dc:5d:9b:b4:4e:4e:
         79:46:a1:89
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkFCRUYxMTAvBgNVBAUTKDJDRjE3RTY4NUI3ODhGNUVBRTRBMDFENTg4MzUyNjFC
NUYwQjJFQTQwHhcNMjYwMzAxMDUzNDExWhcNMjYwMzA4MDUzNDExWjAYMRYwFAYD
VQQDEw02OWEzY2ZkMy1hOGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxTIOHn47rYc3URUObWsnudWVUZy3ob2nv1S4QxZ4k/YUKQ3MNj73Ic/Rzc+I
TFkmt97v4BoqU8fBXOpMu7FPc+tXsQ5iGGqTqwgMMEuey9b1ul46pWVNoKRw4Owi
+9lc3+ML8eiNNv2P80z7lcDLlsmzjs+Jf5XhhkCtLbcazk0dVN9dYkfo/n/QV6WD
ZWnOmmi1c+3JWejD+VtKsfJ/8rvjmyfFT72HmAne/GYWU7NYkJC3eNWOQ7vS7Kln
B+Dd76Ti61FviiTKPr7aBGxJY8JYWqp/amSwLuBsL2oAQVRzhEL7dvMUSKpjlAYe
71SgiNLNue9mhkiFx505Y9uPdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI1yeFnP
bH4NWHO2uYqOGwrwGjSzMB8GA1UdIwQYMBaAFCzxfmhbeI9erkoB1Yg1JhtfCy6k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUJFRi9DOUFGNUQyQ0NC
MTkxMUVFODE1RkFCNjhDNEY5QUUwMi9MUEYtYUZ0NGoxNnVTZ0hWaURVbUcxOExM
cVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xQRi1hRnQ0ajE2dVNnSFZpRFVtRzE4TExxUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QUJFRi9DOUFGNUQyQ0NCMTkxMUVFODE1RkFCNjhDNEY5QUUwMi9MUEYtYUZ0NGox
NnVTZ0hWaURVbUcxOExMcVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAS8vWKvFLzELB6aRwW9DFQmzmz61kAVU+9te/dsmuiRL5z3MfxxImT4zOyYW/
yNm7RRoYebEBr31WB7KezCAgojQB3tiD/vpm6Q5l29Try6VONKYFX8Y2OTbuGp9Z
wIWKdZoKfWVy2Brxl2bjJ7vT98DfwcuQxZ2b4QocN18CNdRecX3CRMURNBSmmlc9
U8xWZsACx8YwOWdYPDzNbY2vEqbPNuH4MW4dZCZrmiW70pRGYBLMSs+o1cqz6WTH
BFHKnxjOIcAjpZlYGYDO2EDSWgkAdJ5aPkzvUn29ksk2YU6erj3rvJkt3Bba6iXl
SyVjO4PeMCLq3F2btE5OeUahiQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:11:56 2026 by rpki-client