Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.mft
File:                     LlZ8tNZla-4M-dworw3nIVt_Z-g.mft (raw, json)
Hash identifier:          pYSyCHKqnyKrZ4kO93QZxEMln70x36lGdImCqaqUTHw=
Subject key identifier:   4D:6B:5F:C2:BD:68:73:98:06:D4:E6:AD:27:FB:09:E2:1B:85:4F:6C
Authority key identifier: 2E:56:7C:B4:D6:65:6B:EE:0C:F9:DC:28:AF:0D:E7:21:5B:7F:67:E8
Certificate issuer:       /CN=A917049A/serialNumber=2E567CB4D6656BEE0CF9DC28AF0DE7215B7F67E8
Certificate serial:       82
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LlZ8tNZla-4M-dworw3nIVt_Z-g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.mft
Manifest number:          81
Signing time:             Fri 09 Oct 2026 08:28:16 +0000
Manifest this update:     Fri 09 Oct 2026 08:28:16 +0000
Manifest next update:     Fri 16 Oct 2026 08:28:16 +0000
Files and hashes:         1: LlZ8tNZla-4M-dworw3nIVt_Z-g.crl (hash: dFb0pb7bJQ7L7f7MHHo5tM6WyiTggzDn8qFxoe6xp/c=)
                          2: F7C02BF6885911F1B22A50DC5811F970.roa (hash: /wR6FGdhOPqF6g3hYPb/kar7/EqNQG1KP1NPSwyZHb0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.crl
                          rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LlZ8tNZla-4M-dworw3nIVt_Z-g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 08:28:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917049A, serialNumber=2E567CB4D6656BEE0CF9DC28AF0DE7215B7F67E8
        Validity
            Not Before: Oct  9 08:28:16 2026 GMT
            Not After : Oct 16 08:28:16 2026 GMT
        Subject: CN=6ac8a5a0-2f72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:62:0b:14:09:55:6a:5c:83:bc:ca:fe:bd:4d:
                    ce:95:0c:91:16:91:97:55:82:b0:4d:82:53:9a:bd:
                    78:49:bc:3a:76:b0:33:84:05:f9:f9:98:c7:fc:65:
                    62:90:1e:eb:66:a9:da:aa:87:09:19:7b:72:2e:5d:
                    33:ae:8f:b0:f0:11:6a:8a:c0:3b:8b:ce:bc:ff:0e:
                    4e:da:9e:3c:2d:52:c1:a7:2a:79:d6:6a:25:f4:7d:
                    dc:fd:46:84:0e:c1:55:ae:09:ba:c4:2d:05:ae:9e:
                    e0:ba:b0:d8:5e:69:16:1f:f6:99:d3:fa:ed:2a:4e:
                    a8:96:82:c9:2b:37:f5:24:9f:9b:38:fc:15:83:1d:
                    82:c8:bc:af:3b:08:be:e6:2a:31:6b:56:ae:72:3a:
                    e6:15:26:40:05:8c:ae:6c:d9:21:d3:d1:a2:60:46:
                    95:78:df:1d:3e:29:40:53:33:d8:d5:e1:a4:f3:19:
                    1b:63:04:de:68:7e:57:fe:e0:bf:d5:7f:63:06:97:
                    a5:4f:f1:f4:a6:41:a7:5c:d7:04:a9:48:07:90:79:
                    95:d7:8b:15:7b:b0:57:9e:51:4b:7d:d1:37:4a:1a:
                    56:68:70:52:6c:99:03:df:3b:4b:1a:74:b8:91:db:
                    3b:ae:9c:a2:1e:fc:d6:d5:44:4f:c2:e5:f0:13:1a:
                    8d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:6B:5F:C2:BD:68:73:98:06:D4:E6:AD:27:FB:09:E2:1B:85:4F:6C
            X509v3 Authority Key Identifier:
                keyid:2E:56:7C:B4:D6:65:6B:EE:0C:F9:DC:28:AF:0D:E7:21:5B:7F:67:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LlZ8tNZla-4M-dworw3nIVt_Z-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:08:db:e6:4a:1d:e4:b4:91:ee:e8:4c:43:51:01:1d:9d:71:
         d6:95:7a:b2:17:32:54:62:01:0a:54:f7:12:2b:8f:1e:19:d1:
         1f:e1:3c:36:2b:0b:aa:85:29:26:38:cd:62:f8:29:ac:eb:5f:
         50:69:62:b1:5d:71:18:56:f6:ab:ce:56:42:25:c0:54:4b:4a:
         15:26:50:be:25:32:30:43:4f:b4:3e:f5:17:3b:5d:b4:a6:fa:
         70:e0:3d:99:1a:85:fb:ba:a8:ba:10:9a:a6:ac:f7:f0:3b:c9:
         fa:4f:27:c2:af:ac:c5:b8:b2:0a:90:33:fc:ea:fd:39:94:a8:
         21:2d:47:e2:54:55:5c:9f:0c:31:a0:da:76:f4:6c:eb:08:e1:
         1f:c7:ff:20:b8:9c:5e:4f:17:5d:89:1d:d9:44:0f:00:1f:5e:
         62:a4:28:f0:6c:be:ef:96:fb:88:f9:e7:1f:70:f3:d0:73:3b:
         db:c7:e6:cb:11:cc:6d:d7:7c:87:57:ce:0a:c7:2c:09:ff:a4:
         f7:c3:d7:c6:e7:3e:95:46:53:e3:5a:6c:f8:0a:3b:7f:23:81:
         19:8f:97:f3:6e:f1:3d:53:98:d6:be:7d:ea:76:dc:c3:e8:df:
         29:16:2b:4d:e2:8f:49:8a:d2:95:d6:cb:0f:cf:4d:4b:7e:4e:
         b5:79:b0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:26:27 2026 by rpki-client