Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft
File:                     lrZQExL54S6xmmT2IuF81Ced8M8.mft (raw, json)
Hash identifier:          p5kUt3VRhsVwESM5YljOp7pIh9B9PPnr6R9bgiOvEIM=
Subject key identifier:   FA:89:35:A1:FF:93:6E:A6:45:9F:25:31:9A:91:8E:C5:28:3B:D2:F9
Authority key identifier: 96:B6:50:13:12:F9:E1:2E:B1:9A:64:F6:22:E1:7C:D4:27:9D:F0:CF
Certificate issuer:       /CN=A91FBE5E/serialNumber=96B6501312F9E12EB19A64F622E17CD4279DF0CF
Certificate serial:       01A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft
Manifest number:          0198
Signing time:             Sun 21 Jun 2026 04:23:10 +0000
Manifest this update:     Sun 21 Jun 2026 04:23:09 +0000
Manifest next update:     Sun 28 Jun 2026 04:23:09 +0000
Files and hashes:         1: lrZQExL54S6xmmT2IuF81Ced8M8.crl (hash: NL8BJVjlIqgRSrhcS+PrHsNrWado05xs1l6wALZuirA=)
                          2: 78A6163A03A111EF8B02B62AC4F9AE02.roa (hash: 47l1ln9Nx13HUurVSbC4jY0jHYfX9Vb/9u1t5wwZQzk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.crl
                          rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Jun 2026 04:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 416 (0x1a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBE5E, serialNumber=96B6501312F9E12EB19A64F622E17CD4279DF0CF
        Validity
            Not Before: Jun 21 04:23:09 2026 GMT
            Not After : Jun 28 04:23:09 2026 GMT
        Subject: CN=6a37672e-4988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a2:8c:e8:d8:bc:0c:cc:9f:67:29:c0:ec:f7:
                    26:92:48:36:6c:bd:c7:f9:a3:d3:9d:fc:8f:fb:b5:
                    ab:46:87:9f:e6:d8:24:f0:a7:a0:26:fe:8f:4d:65:
                    9f:a0:f7:21:c3:de:25:05:f3:d4:9f:f5:75:16:07:
                    1e:0a:e0:b9:20:c9:6d:e0:67:47:be:be:d2:ea:85:
                    c7:eb:7e:1c:73:47:48:ce:19:cc:29:06:c4:db:e5:
                    5b:93:a5:bf:b5:86:73:99:88:b9:66:6a:3d:27:ef:
                    65:34:c7:8a:77:45:47:98:d1:1b:d7:9f:fc:b1:bf:
                    88:af:bf:5a:48:29:21:04:bd:4c:94:aa:09:89:07:
                    c6:da:58:c5:9a:30:4b:ca:d0:9c:7f:10:39:d1:e6:
                    80:a4:7a:35:12:ee:fb:df:ef:40:d2:95:eb:17:ae:
                    6e:82:e4:cb:84:16:67:9b:2c:18:ff:d2:af:38:d9:
                    de:19:ea:fe:eb:09:cd:69:08:ad:02:b7:43:a2:4b:
                    01:f6:5f:93:fb:1d:62:ac:62:51:0a:09:c4:8f:9e:
                    53:5e:19:7c:5b:3e:ad:82:60:21:0d:e4:14:89:c9:
                    e7:e3:c6:be:51:75:1c:89:fb:b1:bf:fd:8b:cc:24:
                    6f:27:41:ef:85:80:63:e0:3b:9a:80:01:72:13:de:
                    a1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:89:35:A1:FF:93:6E:A6:45:9F:25:31:9A:91:8E:C5:28:3B:D2:F9
            X509v3 Authority Key Identifier:
                keyid:96:B6:50:13:12:F9:E1:2E:B1:9A:64:F6:22:E1:7C:D4:27:9D:F0:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:aa:42:76:e1:18:4c:14:a4:af:f0:1c:56:89:96:5b:ba:ee:
         2d:94:06:2a:36:86:b3:a9:5f:4f:b9:fe:28:21:18:3f:7b:03:
         50:fe:49:af:78:cd:97:ae:4e:25:ad:4c:f6:30:89:db:aa:d3:
         33:d8:4e:82:a6:1b:e7:3b:af:34:2f:f4:62:9e:60:48:37:1e:
         22:cb:8b:23:12:5c:af:56:a0:9b:72:0f:b2:c1:72:2e:eb:89:
         56:33:be:ac:c1:a5:91:4c:5c:81:41:6d:8c:df:2d:2c:75:23:
         a0:e3:2e:9c:5b:21:74:2b:b2:53:ff:e9:f3:7d:69:50:7b:ea:
         cd:6a:a6:4e:3c:2c:f5:3c:70:82:99:5d:44:35:21:6c:57:12:
         3f:8e:e6:11:62:18:6f:e0:f6:88:7d:b2:f2:e0:8a:5a:98:68:
         26:f9:93:c0:9e:04:cf:18:72:79:d5:11:37:4b:86:ff:96:66:
         02:ce:54:21:c1:b8:f4:80:b0:5f:a9:4a:8e:9f:61:6c:7f:a2:
         f1:2e:51:87:51:ad:ae:1b:e3:be:13:e6:cf:36:11:e5:1d:19:
         c2:ec:56:70:2f:4d:e8:15:ae:96:8e:5c:5d:ae:59:23:27:d4:
         d7:ec:f9:5c:39:d4:73:3a:ab:6a:98:84:67:60:64:b1:16:dc:
         02:60:cb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 09:59:01 2026 by rpki-client