Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft
File:                     lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft (raw, json)
Hash identifier:          a4+osypwjYF58Sqt1EAxXqWHJv1h7EVI8hLRLg+U8aA=
Subject key identifier:   C6:08:69:99:B4:ED:5C:B6:CD:CB:2E:2B:26:0A:71:6A:E4:E5:88:AF
Authority key identifier: 97:37:71:30:04:81:9B:6B:66:FC:56:E6:EC:86:BE:4D:C2:E2:8E:17
Certificate issuer:       /CN=A91A1C06/serialNumber=9737713004819B6B66FC56E6EC86BE4DC2E28E17
Certificate serial:       35B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft
Manifest number:          35A4
Signing time:             Fri 02 Oct 2026 15:01:11 +0000
Manifest this update:     Fri 02 Oct 2026 15:01:11 +0000
Manifest next update:     Fri 09 Oct 2026 15:01:11 +0000
Files and hashes:         1: lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl (hash: 2XsrOcLbjhcY/AIWZXeymHkNhlfFHa1KNrhAVyI5AdU=)
                          2: F3E1B79CB8F811F08ABED010C4F9AE02.roa (hash: tS4RWCL5pxa5UjyzIdHh2QDGb2clP9SaVI3vEhg55R8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl
                          rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 15:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13751 (0x35b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1C06, serialNumber=9737713004819B6B66FC56E6EC86BE4DC2E28E17
        Validity
            Not Before: Oct  2 15:01:11 2026 GMT
            Not After : Oct  9 15:01:11 2026 GMT
        Subject: CN=6abfc737-af46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3f:7e:ee:73:f1:94:ab:46:70:38:b3:f2:45:
                    73:a8:7f:35:8a:a3:5b:00:66:9a:09:ec:d2:36:c9:
                    d1:8f:b4:94:de:f0:82:ff:62:b6:37:54:f1:00:20:
                    9f:36:68:62:68:5d:50:9d:8b:02:db:74:dd:92:05:
                    78:65:c6:1b:b8:3b:91:a2:ec:ff:3e:cb:e8:a4:c2:
                    2a:b5:f0:86:ae:c8:cf:55:39:d8:b3:29:dc:cf:75:
                    b7:9e:a3:33:2b:10:da:29:cb:96:95:e4:15:49:46:
                    43:82:98:2e:1c:52:ec:28:a5:73:43:5b:8c:c7:20:
                    5e:e2:24:c5:a2:a7:6d:21:5b:d0:a8:5a:5d:07:bb:
                    69:6a:bd:63:7c:0a:84:93:15:07:ed:3f:3d:35:33:
                    27:51:60:88:0f:6f:fe:d9:8c:b3:95:04:5e:8b:a1:
                    25:4e:15:08:06:02:eb:e3:30:bb:6d:5e:b4:cf:7d:
                    e6:f7:58:e3:4e:fe:bf:d7:50:f0:b6:d1:6a:6e:13:
                    85:32:6a:80:8f:53:40:de:4c:4b:c3:6d:7f:68:e7:
                    d8:4f:38:f3:f8:02:d8:fe:ac:a0:e5:10:b6:cf:19:
                    62:fe:e9:80:d6:c6:06:db:ce:c0:41:14:86:12:34:
                    8b:0e:68:e9:5a:5c:4b:5c:4f:c4:28:fb:dd:ce:ad:
                    e0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:08:69:99:B4:ED:5C:B6:CD:CB:2E:2B:26:0A:71:6A:E4:E5:88:AF
            X509v3 Authority Key Identifier:
                keyid:97:37:71:30:04:81:9B:6B:66:FC:56:E6:EC:86:BE:4D:C2:E2:8E:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ec:93:3d:26:21:e3:c5:00:a4:b1:78:b2:23:dc:9f:ca:70:fe:
         9a:33:ec:2f:92:4f:30:45:34:b2:32:5a:b9:e2:82:cd:5a:07:
         11:37:c0:26:a3:a9:d9:e2:28:f4:7f:99:ff:6f:2d:b0:8e:dd:
         fc:23:7b:41:4e:a5:93:c6:da:5e:85:21:b2:02:1f:99:93:f5:
         28:95:19:4d:70:78:43:bc:25:fa:40:91:50:a7:b6:ee:e2:b2:
         9f:09:86:0b:f4:ac:1d:2f:ff:99:8a:31:98:b7:98:3a:36:dc:
         94:fa:1b:bf:2b:e1:1c:0c:b3:95:48:68:5c:5d:ce:4d:8d:83:
         92:20:ff:6b:be:d6:f5:33:32:55:90:12:71:fb:bd:65:d7:25:
         12:0b:c0:b4:27:c6:68:9e:de:18:aa:6d:5e:04:11:6f:f8:ba:
         de:a2:02:dd:78:84:75:80:cd:59:93:24:99:07:0d:02:5f:f1:
         12:ab:a7:83:82:e0:4f:b3:24:76:62:af:68:e8:a9:fb:b7:b0:
         af:ef:f5:da:44:68:f6:ec:dd:0e:c9:4a:74:d9:cd:1a:2a:10:
         36:7f:84:08:55:fa:9d:6e:48:42:3d:bb:e6:90:4a:c6:87:84:
         a5:8c:07:23:f6:05:b4:4d:80:69:78:5c:a7:56:3c:2d:d3:7a:
         89:66:a6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 05:43:26 2026 by rpki-client