Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
File:                     LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft (raw, json)
Hash identifier:          +u2BQfRrAbqzsyRQa66WmDWwS8eIuOL1pcWiRWk4BWE=
Subject key identifier:   BB:25:1C:0A:0E:47:C4:F8:7F:DB:25:43:F4:65:4F:E7:2B:34:46:C2
Authority key identifier: 2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77
Certificate issuer:       /CN=A91356BB/serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677
Certificate serial:       061F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
Manifest number:          05F9
Signing time:             Tue 22 Sep 2026 22:40:14 +0000
Manifest this update:     Tue 22 Sep 2026 22:40:13 +0000
Manifest next update:     Tue 29 Sep 2026 22:40:13 +0000
Files and hashes:         1: LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl (hash: kjcY+YJqO7+Bck/WouHl68p5As2FFB+Sd35Olt+Cxq8=)
                          2: D8CA5BF0D91811EFA4F02F4EC4F9AE02.roa (hash: XBM3DlKoBDVofgPqbooQZ6dKrRlGCNt1SrNFpBQtq4Y=)
                          3: F0F715D8D91811EFAD9B2462C4F9AE02.roa (hash: TXS7m8u3jpVNxcKVei/wIBnu/kzPeAazyZKz1QHbBUQ=)
                          4: 1347AA9019FE11ECB459B141C4F9AE02.roa (hash: hotXzorhi8h9NpRGm5y/zSj3yKUgfqnoMA89+EWdFIw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl
                          rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 22:40:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1567 (0x61f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91356BB, serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677
        Validity
            Not Before: Sep 22 22:40:13 2026 GMT
            Not After : Sep 29 22:40:13 2026 GMT
        Subject: CN=6ab303cd-8a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:db:e8:26:5d:84:c4:8e:28:a4:c4:df:2a:69:
                    25:20:d4:8d:b0:64:99:c8:eb:63:5f:2a:0a:c1:a4:
                    17:15:fb:c3:53:a7:3a:5d:e8:41:88:5d:d4:80:43:
                    3e:bf:88:ee:fa:2e:59:23:28:c8:e8:cf:ff:82:5b:
                    f5:fe:1f:99:02:eb:bb:c4:04:7a:d0:39:ef:6b:9e:
                    9c:d2:1f:ca:a1:a0:4d:db:83:e0:1f:9f:e1:e7:00:
                    e9:5b:74:ff:51:bb:35:f5:94:29:3f:90:5d:82:4d:
                    c9:a1:b5:8e:09:ec:c2:2b:48:6a:bb:14:13:51:82:
                    1c:d4:78:a3:94:0d:67:38:54:5c:7b:32:cb:25:c6:
                    7f:49:fb:92:39:1c:18:e5:02:e6:f4:06:10:f5:3d:
                    32:75:94:87:29:4e:be:b6:5e:84:56:41:c8:b1:8a:
                    fc:0e:19:bf:6e:db:b3:53:44:e7:cd:36:27:2d:41:
                    e1:f1:c2:86:50:a0:bf:bf:48:31:e3:19:21:43:76:
                    44:b3:75:a0:02:e7:bf:c2:e5:ec:4c:03:6c:71:41:
                    9a:17:38:b9:a9:16:47:12:b2:b7:61:dc:33:ea:d8:
                    d1:ce:16:dc:6d:e5:a7:2d:0d:79:f5:26:2a:86:49:
                    34:cd:e5:76:8b:a8:77:c2:51:fc:ae:af:a5:04:16:
                    3a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:25:1C:0A:0E:47:C4:F8:7F:DB:25:43:F4:65:4F:E7:2B:34:46:C2
            X509v3 Authority Key Identifier:
                keyid:2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:92:29:c9:23:c0:19:bb:1e:b2:75:77:08:08:ec:d9:32:05:
         41:73:3f:1d:be:74:72:ba:4c:4d:40:d4:6e:8a:b5:a7:56:b3:
         54:3f:42:4a:48:55:44:ce:36:2a:bb:8d:e7:a9:75:97:57:48:
         07:1f:5c:c1:88:bf:40:3f:73:61:5d:87:2d:87:45:97:e4:12:
         89:76:5e:52:21:18:2c:79:cb:3d:b3:9d:ff:2f:7a:49:64:5f:
         54:2e:1a:96:b4:11:52:7b:e9:ea:a0:e3:5c:4b:21:90:b7:a4:
         31:82:f5:74:d8:68:69:94:40:be:ce:e1:da:bf:df:cb:2e:77:
         8a:e1:35:92:35:ab:e8:d6:9e:47:3e:2a:a1:b5:23:e2:09:53:
         4d:be:4e:62:c7:22:52:e3:47:71:81:5e:52:9e:b8:bd:3a:8b:
         68:88:de:20:40:ad:d9:69:e8:0a:93:bc:c9:66:46:8c:ba:2a:
         3f:bf:bc:a5:52:55:2c:db:7d:0f:9a:ce:0c:43:87:a0:30:54:
         41:31:92:aa:8c:b3:c0:0a:f6:f0:f7:dd:1c:ec:f6:29:a2:a6:
         77:3c:ec:2e:93:07:b9:79:d0:52:30:0a:6c:8b:24:5e:e1:26:
         30:08:77:4f:8e:af:a2:f5:02:9e:80:ba:6e:0f:12:48:bb:74:
         1b:5d:58:42
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzU2QkIxMTAvBgNVBAUTKDJDQ0ExMzU0MEYwMTNCOTNCMjNDOURGMTREOTYxN0RB
NDBDQjI2NzcwHhcNMjYwOTIyMjI0MDEzWhcNMjYwOTI5MjI0MDEzWjAYMRYwFAYD
VQQDEw02YWIzMDNjZC04YTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtNvoJl2ExI4opMTfKmklINSNsGSZyOtjXyoKwaQXFfvDU6c6XehBiF3UgEM+
v4ju+i5ZIyjI6M//glv1/h+ZAuu7xAR60Dnva56c0h/KoaBN24PgH5/h5wDpW3T/
Ubs19ZQpP5Bdgk3JobWOCezCK0hquxQTUYIc1HijlA1nOFRcezLLJcZ/SfuSORwY
5QLm9AYQ9T0ydZSHKU6+tl6EVkHIsYr8Dhm/btuzU0TnzTYnLUHh8cKGUKC/v0gx
4xkhQ3ZEs3WgAue/wuXsTANscUGaFzi5qRZHErK3Ydwz6tjRzhbcbeWnLQ159SYq
hkk0zeV2i6h3wlH8rq+lBBY6NwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLslHAoO
R8T4f9slQ/RlT+crNEbCMB8GA1UdIwQYMBaAFCzKE1QPATuTsjyd8U2WF9pAyyZ3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTZCQi81Q0VBNTQ5NDE2
RDUxMUVDQTdGM0Y0NkFDNEY5QUUwMi9MTW9UVkE4Qk81T3lQSjN4VFpZWDJrRExK
bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xNb1RWQThCTzVPeVBKM3hUWllYMmtETEpuYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NTZCQi81Q0VBNTQ5NDE2RDUxMUVDQTdGM0Y0NkFDNEY5QUUwMi9MTW9UVkE4Qk81
T3lQSjN4VFpZWDJrRExKbmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvpIpySPAGbsesnV3CAjs2TIFQXM/Hb50crpMTUDUboq1p1azVD9CSkhVRM42
KruN56l1l1dIBx9cwYi/QD9zYV2HLYdFl+QSiXZeUiEYLHnLPbOd/y96SWRfVC4a
lrQRUnvp6qDjXEshkLekMYL1dNhoaZRAvs7h2r/fyy53iuE1kjWr6NaeRz4qobUj
4glTTb5OYsciUuNHcYFeUp64vTqLaIjeIECt2WnoCpO8yWZGjLoqP7+8pVJVLNt9
D5rODEOHoDBUQTGSqoyzwAr28PfdHOz2KaKmdzzsLpMHuXnQUjAKbIskXuEmMAh3
T46vovUCnoC6bg8SSLt0G11YQg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:56:31 2026 by rpki-client