Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft
File:                     lziO_EXUlu7urpSEfaYKzOXRF_k.mft (raw, json)
Hash identifier:          B7n7hvWYMEc2kipziPOTNbtCzoEZaUNh8FknJHYtlI8=
Subject key identifier:   EE:02:75:AD:3C:A1:2F:CB:FB:25:9E:B4:C8:EA:80:D4:24:D6:6A:4C
Authority key identifier: 97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9
Certificate issuer:       /CN=A91B0D39/serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9
Certificate serial:       06F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft
Manifest number:          06D4
Signing time:             Thu 24 Sep 2026 22:18:30 +0000
Manifest this update:     Thu 24 Sep 2026 22:18:30 +0000
Manifest next update:     Thu 01 Oct 2026 22:18:30 +0000
Files and hashes:         1: lziO_EXUlu7urpSEfaYKzOXRF_k.crl (hash: 7ULmgGeqZiGz4EiLeawbVGaP4XP5oRQkLeMXzkmoYyA=)
                          2: ECD21166AB8411F1A790DC444511F970.roa (hash: ExjgxAT7/41xhDKMAdd+90Z1vz5zXbsrx5cyjWeI5wk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl
                          rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 21:49:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1781 (0x6f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0D39, serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9
        Validity
            Not Before: Sep 24 22:18:30 2026 GMT
            Not After : Oct  1 22:18:30 2026 GMT
        Subject: CN=6ab5a1b6-823d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:51:80:ad:96:a7:a0:16:db:3c:19:cd:6f:34:
                    ab:6d:ae:11:ce:8c:78:77:44:60:ab:c0:5f:83:6f:
                    a9:93:91:71:fa:65:90:da:13:63:21:12:43:56:5e:
                    18:a8:fb:0c:3c:99:1c:20:41:ee:f6:ef:ae:7c:a4:
                    96:3d:fe:11:ca:ee:9a:61:d0:34:9e:9a:e4:e8:39:
                    5e:03:57:0d:d5:12:ce:ca:75:72:ff:e0:ec:41:66:
                    55:46:d8:d9:90:51:e5:1b:14:1b:d9:03:d5:23:7d:
                    9c:16:6c:01:ec:24:6f:94:ba:fa:32:87:11:09:9e:
                    ac:41:3c:ac:fb:38:8a:9d:3e:f4:0c:8e:8e:ad:b4:
                    de:9f:d3:b0:9c:66:40:b4:e8:d4:e7:cc:a0:92:eb:
                    08:46:5f:a1:45:27:83:67:35:a0:a8:0f:7f:26:41:
                    b7:ff:2f:04:96:53:b7:dd:52:98:b4:8e:56:64:9a:
                    4f:82:c9:5f:ad:66:8c:68:79:60:a4:93:16:cc:10:
                    0c:86:c2:70:25:46:b1:c7:34:e0:bb:81:17:68:4f:
                    2e:42:f7:e9:7c:d1:8e:3a:34:29:27:bd:24:bd:ff:
                    30:30:69:d1:a7:9f:b7:24:17:12:65:4c:04:10:ad:
                    03:e3:4e:79:3c:2d:ca:d2:4c:31:6c:30:96:07:85:
                    a5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:02:75:AD:3C:A1:2F:CB:FB:25:9E:B4:C8:EA:80:D4:24:D6:6A:4C
            X509v3 Authority Key Identifier:
                keyid:97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:34:e7:de:f7:af:97:67:d3:68:dc:05:25:09:4a:f2:71:78:
         36:5e:38:50:8d:71:c2:13:73:10:5f:bc:9e:7b:54:38:a3:9c:
         c1:33:33:1c:7e:26:04:da:25:a5:75:e6:8e:dc:d1:2a:1c:88:
         0b:65:52:b8:b4:b4:66:2a:4b:a7:34:f5:ba:f7:52:22:c7:77:
         4e:44:13:fc:eb:f1:5d:61:13:5f:2c:de:61:04:91:28:4b:8d:
         6e:91:50:88:c6:f2:39:d7:4f:9b:1e:7c:d3:2b:21:54:83:a0:
         cf:62:f9:22:63:e2:2e:8b:ae:d6:2b:e7:df:c7:6b:de:51:3e:
         bc:e2:66:b3:ad:c2:84:f9:3a:30:9a:b6:b7:f2:48:16:d3:5c:
         a8:8b:c2:44:d1:c9:19:66:83:2f:a7:ac:22:9d:ee:60:24:bc:
         2d:e7:36:eb:c6:99:3c:71:12:5e:55:ba:9f:df:1f:d5:3b:eb:
         0f:8d:5c:16:12:2a:e6:af:d9:2d:35:d2:9d:4e:6d:71:6b:78:
         c8:76:e3:cc:b9:d6:29:94:42:99:36:ff:6b:a0:04:6b:c1:0e:
         85:8d:08:f7:d9:97:d4:9d:94:f2:37:c7:b5:a0:cd:ea:fb:b6:
         75:91:b2:e9:85:50:fe:fa:d2:20:65:b9:ff:d7:91:bb:7f:47:
         e3:87:1f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:37:31 2026 by rpki-client