Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
File:                     Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft (raw, json)
Hash identifier:          Xs95R6BIiFvI18heHn0MGXKSYdj8xL1sBrtlMMlQNe0=
Subject key identifier:   F5:64:EB:F7:47:C6:1E:52:63:A3:FA:F0:EA:87:99:40:C9:E6:24:AD
Authority key identifier: 2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2
Certificate issuer:       /CN=A91A8A85/serialNumber=2EAF60095334E7F0BAA065A92F653F5C744895C2
Certificate serial:       07ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
Manifest number:          07DA
Signing time:             Thu 24 Sep 2026 21:17:56 +0000
Manifest this update:     Thu 24 Sep 2026 21:17:55 +0000
Manifest next update:     Thu 01 Oct 2026 21:17:55 +0000
Files and hashes:         1: Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl (hash: +yD5ZdyoKc7wPt5pW7wtgW9FXsbL1VvVmqTSLasm8dU=)
                          2: 6FBFD196C3B811EF82B40031C4F9AE02.roa (hash: r2E33zBN68DzdFBxJzHPWNCremEV/5Gpjhm3sPaTCEM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl
                          rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 21:17:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2029 (0x7ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8A85, serialNumber=2EAF60095334E7F0BAA065A92F653F5C744895C2
        Validity
            Not Before: Sep 24 21:17:55 2026 GMT
            Not After : Oct  1 21:17:55 2026 GMT
        Subject: CN=6ab59384-3956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e6:02:d2:4b:f8:73:70:e9:05:bb:d9:f9:b6:
                    fe:90:0b:d9:f1:bb:30:48:1a:44:0e:e3:82:2a:39:
                    de:2b:90:8a:b6:1d:c7:26:26:45:33:24:76:fa:3e:
                    d0:b5:b0:6d:cd:d0:6d:12:d1:c1:c1:2f:fa:93:c0:
                    bb:bb:d3:ed:e0:3b:c4:12:e8:cb:55:9f:04:66:de:
                    e5:48:0b:aa:c9:88:f2:cd:2b:08:4a:31:e5:b2:e6:
                    67:92:1a:43:3a:5d:dc:e3:48:80:7b:fb:72:c2:22:
                    1e:f8:27:60:b5:eb:e2:24:c1:80:f0:51:b4:23:fe:
                    cb:9f:2b:4e:58:03:0b:fa:5a:06:cc:ce:5e:d5:0b:
                    76:24:11:d1:e1:fa:c7:6d:d1:a1:c6:13:f6:8d:97:
                    96:e2:f4:0e:66:31:d6:20:ee:c5:32:ba:b0:59:ec:
                    2c:42:83:16:87:9c:76:63:37:cd:3c:22:76:ac:f3:
                    18:2d:96:fb:f0:ce:d1:03:c5:e2:e1:d9:7b:83:40:
                    40:07:33:72:f5:3a:2c:f3:7f:d0:84:2b:98:af:b4:
                    b1:f7:80:9e:d3:fc:28:af:3d:7e:68:e1:c7:1c:32:
                    33:7c:58:3e:3f:ab:d3:9e:1c:8d:68:b9:01:7a:cc:
                    90:bf:5b:5a:57:cb:ef:33:a8:78:b6:88:c3:8b:cb:
                    06:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:64:EB:F7:47:C6:1E:52:63:A3:FA:F0:EA:87:99:40:C9:E6:24:AD
            X509v3 Authority Key Identifier:
                keyid:2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:11:ea:e9:8c:4a:10:32:4b:f0:d0:52:d8:70:a4:f0:35:f2:
         b5:14:e7:96:d7:4e:dc:4d:c3:aa:b5:8d:b4:f3:cc:48:81:ef:
         c0:da:27:f2:0c:42:b8:de:1e:fb:f7:a3:7f:80:c1:62:b1:91:
         7c:40:65:d4:25:92:2c:e3:5a:f7:40:cb:e9:08:fe:25:86:ae:
         71:f6:16:d0:05:12:62:a5:5f:e1:bf:9b:fb:6f:4c:c7:1b:3f:
         3d:d2:5a:a5:de:4e:83:50:c9:9f:30:36:2d:47:31:9e:a1:28:
         a6:87:47:0a:64:ba:c7:5b:e7:04:bb:d9:24:c1:85:45:ad:5a:
         14:05:dd:0a:d0:b4:b7:5f:4b:52:51:4d:f5:f5:48:eb:48:32:
         bf:37:b0:0d:01:58:2a:ae:3c:19:93:99:95:67:cb:24:6b:7f:
         d0:59:8b:04:5e:fa:ab:47:cd:cc:cb:ab:93:50:19:d6:fd:91:
         b7:97:dc:fb:b1:5e:4c:da:e2:50:bb:80:8d:c5:8b:d3:59:6c:
         e5:5f:53:ea:ba:91:79:b0:e3:68:c0:21:83:dd:dc:7f:6d:51:
         f9:04:6d:29:76:de:30:e1:25:b3:ab:bb:08:ab:83:4b:1f:f5:
         7f:fc:6d:b0:57:83:b1:a9:72:c0:9d:62:9e:a1:c2:cf:33:9b:
         d9:b4:29:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:27:54 2026 by rpki-client