Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft
File:                     LhWWOMt5D3lFFyLlKs602oBfi5c.mft (raw, json)
Hash identifier:          /l/4XIP/OtGguFL/50r85RpvcXv6+4VseLG66Vn4sdk=
Subject key identifier:   7A:B4:CE:86:C9:A4:70:FA:2F:3C:95:3E:B0:79:38:3B:AA:66:0B:A3
Authority key identifier: 2E:15:96:38:CB:79:0F:79:45:17:22:E5:2A:CE:B4:DA:80:5F:8B:97
Certificate issuer:       /CN=A91A1E13/serialNumber=2E159638CB790F79451722E52ACEB4DA805F8B97
Certificate serial:       074F
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft
Manifest number:          074B
Signing time:             Tue 22 Sep 2026 21:33:01 +0000
Manifest this update:     Tue 22 Sep 2026 21:33:00 +0000
Manifest next update:     Tue 29 Sep 2026 21:33:00 +0000
Files and hashes:         1: LhWWOMt5D3lFFyLlKs602oBfi5c.crl (hash: t4UBFkE0LmyUDAY2+eLBytsvPzH9Fil75kXk/iyc8kE=)
                          2: 6981A2B8879A11F0A06BE519C4F9AE02.roa (hash: OSyNy6yrXARat2n5akNd+2J6LgAr7BjhgFaIdVAJXcY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.crl
                          rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 21:32:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1871 (0x74f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1E13, serialNumber=2E159638CB790F79451722E52ACEB4DA805F8B97
        Validity
            Not Before: Sep 22 21:33:00 2026 GMT
            Not After : Sep 29 21:33:00 2026 GMT
        Subject: CN=6ab2f40d-1e16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:22:06:04:75:8b:22:31:54:f9:fe:64:92:9f:
                    03:a1:dc:a5:4b:c9:2c:65:ee:9a:e7:02:07:86:c7:
                    a1:0f:d9:91:94:4a:38:c2:7d:e4:8b:54:5d:64:cf:
                    5c:17:c9:f9:1d:e6:64:7b:94:7e:48:72:2b:b1:63:
                    df:bb:db:23:3d:3f:d5:91:45:6c:5d:1b:97:a9:8a:
                    d9:fa:30:23:b1:6e:bf:aa:a5:a0:45:01:56:dd:af:
                    0b:4a:89:22:db:2d:16:68:ee:ac:3c:5c:90:4e:3c:
                    9f:07:b7:8b:57:50:eb:c6:7d:6e:3f:9b:bc:ae:d2:
                    6f:fc:01:96:1b:0a:a4:4c:c5:fd:7d:66:c7:a6:e2:
                    5f:f1:47:be:08:1d:3a:8b:a5:2d:25:b8:57:05:8e:
                    3a:3b:1c:69:04:45:4e:96:e5:6b:bb:4e:53:ae:3c:
                    0c:22:cf:51:23:dd:e6:07:a3:0c:16:c9:b8:a5:f3:
                    df:67:ff:d4:e4:d1:73:fd:74:80:fb:12:59:cf:89:
                    ea:92:4e:c6:79:79:b5:81:b4:fd:41:ce:c4:0b:6b:
                    5f:fd:70:ca:2e:6b:0e:2a:de:97:fe:0a:3d:66:65:
                    af:b5:02:1c:5b:88:4b:13:cd:93:dd:5d:d6:04:c5:
                    9f:33:75:9e:c8:50:b6:3c:79:9d:8b:e2:64:77:45:
                    a1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B4:CE:86:C9:A4:70:FA:2F:3C:95:3E:B0:79:38:3B:AA:66:0B:A3
            X509v3 Authority Key Identifier:
                keyid:2E:15:96:38:CB:79:0F:79:45:17:22:E5:2A:CE:B4:DA:80:5F:8B:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:2e:e3:2e:47:93:5c:ed:ee:d6:6e:72:cd:c8:72:f6:e2:f9:
         77:ba:5f:51:2f:3a:b2:a5:7c:16:c6:ad:f4:e7:0c:b3:7e:21:
         17:a2:62:af:45:ff:b1:2e:f3:38:b9:cb:38:41:15:8b:ef:58:
         f9:fc:f4:a2:3a:76:00:6b:46:f9:92:b2:80:0e:7f:94:29:64:
         90:bc:94:d5:3a:2c:74:ac:23:a7:c7:9b:56:30:58:bc:d1:99:
         43:4c:20:dc:41:1b:b1:c0:84:9a:df:f3:4d:eb:f1:fd:97:23:
         d7:0b:aa:6b:53:ab:6e:03:e1:c7:19:53:2b:56:be:fc:15:0e:
         ca:92:bf:87:0d:ec:ec:d3:7f:eb:df:c7:a3:7e:51:5b:ee:57:
         de:a6:6f:5c:2f:a0:8b:6c:b9:8a:17:56:40:c0:d3:41:49:17:
         ce:1b:9b:89:aa:67:11:00:32:b5:08:7f:32:e0:2c:e2:e4:8d:
         27:56:87:91:54:29:12:b1:37:d8:41:18:d3:8b:43:5e:96:5b:
         55:fc:00:b3:49:33:27:dd:61:55:0b:b8:e8:bd:53:db:2e:b0:
         b8:4e:60:86:07:f7:f3:20:99:44:69:4b:7a:cd:eb:d2:0e:21:
         47:28:bf:d1:6e:29:52:71:43:1f:6c:26:c5:4b:38:bb:63:b1:
         f5:87:c6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:27:56 2026 by rpki-client