Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91725C6/18179D3E3E2811F1ADB49AA5B5833773/LoOe7nGb1Gh6Cacnvn-b8Ft30wk.mft
File:                     LoOe7nGb1Gh6Cacnvn-b8Ft30wk.mft (raw, json)
Hash identifier:          FcysKYqrnQSVsLFWvhVPt+eqM0qFP99bRt/SUFqGzI8=
Subject key identifier:   EA:92:CB:CF:E1:6E:47:95:41:8B:E1:2C:41:85:B1:13:B3:81:92:70
Authority key identifier: 2E:83:9E:EE:71:9B:D4:68:7A:09:A7:27:BE:7F:9B:F0:5B:77:D3:09
Certificate issuer:       /CN=A91725C6/serialNumber=2E839EEE719BD4687A09A727BE7F9BF05B77D309
Certificate serial:       5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoOe7nGb1Gh6Cacnvn-b8Ft30wk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91725C6/18179D3E3E2811F1ADB49AA5B5833773/LoOe7nGb1Gh6Cacnvn-b8Ft30wk.mft
Manifest number:          5A
Signing time:             Thu 15 Oct 2026 09:17:23 +0000
Manifest this update:     Thu 15 Oct 2026 09:17:22 +0000
Manifest next update:     Thu 22 Oct 2026 09:17:22 +0000
Files and hashes:         1: LoOe7nGb1Gh6Cacnvn-b8Ft30wk.crl (hash: oUNNvugAfNfIv9ucCsWGIztWsO967BKLBJb71zE1ymo=)
                          2: 428700243E2C11F19BA0533EB7833773.roa (hash: peDY8F0WHq4mxcVTJNp8uV75KSLhKdxZSY/nBtZGs+0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91725C6/18179D3E3E2811F1ADB49AA5B5833773/LoOe7nGb1Gh6Cacnvn-b8Ft30wk.crl
                          rsync://rpki.apnic.net/member_repository/A91725C6/18179D3E3E2811F1ADB49AA5B5833773/LoOe7nGb1Gh6Cacnvn-b8Ft30wk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoOe7nGb1Gh6Cacnvn-b8Ft30wk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 Oct 2026 09:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91725C6, serialNumber=2E839EEE719BD4687A09A727BE7F9BF05B77D309
        Validity
            Not Before: Oct 15 09:17:22 2026 GMT
            Not After : Oct 22 09:17:22 2026 GMT
        Subject: CN=6ad09a23-1a97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:75:5e:87:28:b7:e6:43:c0:f9:46:0d:e0:9a:
                    da:ce:4f:6e:77:4a:2a:11:62:74:d7:3a:9d:ea:e9:
                    a2:25:14:28:77:9d:74:71:66:28:fc:c0:17:86:19:
                    2c:b7:3e:86:a1:c2:1d:1b:18:77:2c:2f:6a:d0:55:
                    b7:cd:5f:63:b4:51:82:bb:02:88:36:a1:e8:b3:68:
                    a7:72:3e:0f:34:77:2b:eb:4b:91:7c:85:5a:22:26:
                    81:55:09:69:9b:b3:51:d4:1a:35:a9:ac:e9:f5:b2:
                    1d:9e:58:d5:2e:f0:29:f0:e5:f1:d1:f4:fb:80:05:
                    04:b7:a6:cf:75:70:58:76:97:0a:ac:79:cf:c8:cf:
                    e1:2f:26:76:af:68:b9:ba:7d:4c:76:b2:40:76:92:
                    61:69:97:51:7d:26:6c:a4:93:16:2f:fe:c7:8f:b4:
                    7e:13:67:36:75:0a:d0:77:3a:41:ab:9d:b3:23:6c:
                    9d:cf:de:e9:20:df:6d:85:8b:44:2d:52:fd:26:de:
                    b5:89:6f:59:97:d0:18:f3:96:7c:55:3d:6e:4a:85:
                    a8:6c:81:99:71:73:f9:e1:6e:32:2b:6d:85:a8:da:
                    e1:14:31:e8:f2:ef:2c:22:31:ed:b9:08:8d:0c:50:
                    89:79:55:fc:aa:2a:1b:20:9b:ae:6f:bd:32:e7:d3:
                    35:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:92:CB:CF:E1:6E:47:95:41:8B:E1:2C:41:85:B1:13:B3:81:92:70
            X509v3 Authority Key Identifier:
                keyid:2E:83:9E:EE:71:9B:D4:68:7A:09:A7:27:BE:7F:9B:F0:5B:77:D3:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91725C6/18179D3E3E2811F1ADB49AA5B5833773/LoOe7nGb1Gh6Cacnvn-b8Ft30wk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoOe7nGb1Gh6Cacnvn-b8Ft30wk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91725C6/18179D3E3E2811F1ADB49AA5B5833773/LoOe7nGb1Gh6Cacnvn-b8Ft30wk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:5c:1d:a4:07:94:45:d5:07:f9:5e:0e:7d:41:78:e2:22:76:
         0f:02:45:0a:8a:20:8d:49:d2:91:6d:33:30:51:7f:41:aa:39:
         92:86:10:6a:d5:3f:92:6f:f2:87:8b:16:32:a9:72:da:7e:5b:
         ba:5d:4f:c4:5b:ae:eb:a4:bf:ba:2c:82:d9:b6:14:ed:b4:dd:
         24:1d:05:09:ef:38:eb:87:8e:89:65:35:0e:5d:5e:78:68:69:
         f5:a6:30:1d:52:fc:8a:6f:d6:43:5d:a3:6b:d8:1f:b0:f4:a6:
         74:0d:ea:13:e2:fb:f1:d3:c2:4e:06:f2:89:c7:99:39:47:bc:
         0f:6a:60:31:1a:8c:29:98:d8:10:5a:e1:49:6b:8b:57:24:0e:
         17:97:8c:a5:ea:e8:7c:aa:3f:6e:9a:58:6b:b3:55:1f:8e:af:
         f9:b4:5f:90:b3:ea:60:ef:07:db:a0:48:61:5d:90:6a:32:cb:
         7b:a4:46:66:d5:5e:d7:7f:a0:58:af:2c:42:ed:d6:77:e2:c9:
         de:61:a0:23:67:0a:15:b9:3f:2d:e4:c5:41:a6:e1:af:f8:68:
         9c:cb:ef:66:f0:86:6c:00:5d:79:1a:90:d0:82:1a:cd:7e:fa:
         88:35:6b:cc:a2:77:6c:29:23:6f:5b:44:be:27:b4:3d:b7:17:
         55:e1:d8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 12:33:51 2026 by rpki-client