Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft
File:                     LPF-aFt4j16uSgHViDUmG18LLqQ.mft (raw, json)
Hash identifier:          vXBw2LOB3V1BiOu8fdb166sK6DqIOA77+44lEcFbBCE=
Subject key identifier:   A2:28:3D:C0:1B:75:5E:05:21:E1:2B:1C:74:B0:BF:FE:95:D0:4B:A9
Authority key identifier: 2C:F1:7E:68:5B:78:8F:5E:AE:4A:01:D5:88:35:26:1B:5F:0B:2E:A4
Certificate issuer:       /CN=A91FABEF/serialNumber=2CF17E685B788F5EAE4A01D58835261B5F0B2EA4
Certificate serial:       0196
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPF-aFt4j16uSgHViDUmG18LLqQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft
Manifest number:          0196
Signing time:             Fri 17 Apr 2026 04:01:26 +0000
Manifest this update:     Fri 17 Apr 2026 04:01:25 +0000
Manifest next update:     Fri 24 Apr 2026 04:01:25 +0000
Files and hashes:         1: LPF-aFt4j16uSgHViDUmG18LLqQ.crl (hash: MiWQ2jGOamzgk6lV/H+hXP3Pn+XJXJkdhhwjgX4WFms=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.crl
                          rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPF-aFt4j16uSgHViDUmG18LLqQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406 (0x196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FABEF, serialNumber=2CF17E685B788F5EAE4A01D58835261B5F0B2EA4
        Validity
            Not Before: Apr 17 04:01:25 2026 GMT
            Not After : Apr 24 04:01:25 2026 GMT
        Subject: CN=69e1b095-0e7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:43:c1:02:3a:3d:c7:d8:73:b8:8d:3d:1e:75:
                    ec:40:0c:72:35:13:e3:d8:e7:f7:82:56:53:41:54:
                    f3:bd:1b:8d:e4:dd:52:f6:30:3e:e0:0b:87:70:12:
                    50:48:e6:7b:7e:e8:06:42:ee:d4:d6:7d:57:ad:33:
                    a6:8e:28:1c:f8:01:fd:2d:3a:e8:31:89:f6:f5:b2:
                    7b:71:ae:71:9a:96:f0:17:65:10:bd:9d:be:65:d5:
                    e4:a1:fa:3f:73:af:01:8f:9f:95:dd:54:20:b0:96:
                    ff:e0:63:da:14:17:9c:67:7b:f4:22:96:09:68:0a:
                    de:cd:48:b5:7d:ad:34:ac:12:40:93:44:b5:5a:43:
                    34:37:5f:42:ab:ad:8d:08:e3:14:7e:f5:3e:46:1f:
                    1a:76:c1:fe:e1:d0:65:e2:cd:67:f4:08:83:96:21:
                    86:e9:1b:fa:ae:fe:b2:54:c6:b4:5a:4d:33:39:f8:
                    35:cf:c3:38:b3:d8:c5:6b:a9:9e:b2:09:f2:56:dc:
                    3b:f1:5e:ca:2e:da:e8:69:a4:71:53:b5:1b:e1:07:
                    1a:a4:aa:a8:09:96:0e:d2:25:10:24:a9:45:60:5f:
                    e1:08:05:bd:bf:b9:2a:d0:26:3c:84:4d:6e:7e:87:
                    28:04:a6:1e:13:aa:b3:83:24:15:ab:61:6c:72:02:
                    fc:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:28:3D:C0:1B:75:5E:05:21:E1:2B:1C:74:B0:BF:FE:95:D0:4B:A9
            X509v3 Authority Key Identifier:
                keyid:2C:F1:7E:68:5B:78:8F:5E:AE:4A:01:D5:88:35:26:1B:5F:0B:2E:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPF-aFt4j16uSgHViDUmG18LLqQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:04:5b:23:26:85:d7:fc:c6:e8:12:d8:5a:7b:c9:e7:3c:99:
         77:12:95:d9:1f:8c:a4:ff:67:dc:fb:9e:b2:d5:f9:7c:02:76:
         1f:85:c1:6c:fc:8e:9b:4f:9d:b1:7b:73:5e:e9:37:40:59:b4:
         c9:72:d8:4d:4e:5c:79:24:49:b0:ad:6a:93:4f:74:cf:ed:2c:
         4b:7d:c8:90:e2:13:9f:16:d5:ec:30:e8:b3:6b:eb:6b:0b:6f:
         e3:c6:d4:b2:7b:8d:63:ab:a4:e3:69:13:ba:45:87:cd:48:8a:
         14:93:bb:5f:e4:a2:37:0e:dc:fe:43:a5:10:88:5f:35:b2:f9:
         14:79:ca:f3:db:65:53:32:05:34:36:c5:36:cd:47:67:aa:de:
         e5:79:7d:71:1f:7d:2b:c5:a2:e1:eb:81:2d:27:22:39:e5:c0:
         d7:64:ed:0d:ce:98:2f:28:88:61:62:6a:d5:90:74:c0:27:5d:
         63:b8:0f:f2:92:8b:a7:41:cd:d6:a2:e1:10:90:82:44:3f:29:
         ea:71:f7:cb:59:da:c0:3a:1d:7f:9e:1f:c4:5f:b7:86:f5:85:
         1c:9a:e2:3a:9d:09:07:2a:51:06:1a:43:e6:65:63:55:e5:39:
         e6:20:7d:ea:74:f2:f6:84:4c:f0:b4:0e:6a:9a:22:19:60:b5:
         48:6a:23:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:53:51 2026 by rpki-client