Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft
File:                     lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft (raw, json)
Hash identifier:          KsBYabfuRNLGpNZtqq9KekVuOAlyRXrlCqO3zpWbWF8=
Subject key identifier:   FC:A1:29:CD:5A:85:4B:7E:D2:0C:AD:AB:E1:2B:DF:BB:7B:B6:54:D0
Authority key identifier: 96:C1:BC:98:7A:D6:64:39:13:F6:5E:05:D1:A6:63:F6:4C:4A:E1:B6
Certificate issuer:       /CN=A91C6A87/serialNumber=96C1BC987AD6643913F65E05D1A663F64C4AE1B6
Certificate serial:       66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsG8mHrWZDkT9l4F0aZj9kxK4bY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft
Manifest number:          64
Signing time:             Sun 27 Sep 2026 08:37:38 +0000
Manifest this update:     Sun 27 Sep 2026 08:37:38 +0000
Manifest next update:     Sun 04 Oct 2026 08:37:38 +0000
Files and hashes:         1: lsG8mHrWZDkT9l4F0aZj9kxK4bY.crl (hash: 9x63PeUE5TqUhdFDSrOOkW7rx9RBZGby+aoqdG4Rwns=)
                          2: 0190D9DAB27811F1901667443511F970.roa (hash: FYWhAcq7Avqujd9P2u3A9dXiOLrYNlsp2Zn1y3CZTn8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.crl
                          rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsG8mHrWZDkT9l4F0aZj9kxK4bY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 08:37:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6A87, serialNumber=96C1BC987AD6643913F65E05D1A663F64C4AE1B6
        Validity
            Not Before: Sep 27 08:37:38 2026 GMT
            Not After : Oct  4 08:37:38 2026 GMT
        Subject: CN=6ab8d5d2-e135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d6:4c:8c:a5:03:a2:f3:6d:6c:9d:0f:11:86:
                    d9:a4:03:6b:73:72:e2:05:45:39:40:0c:6e:35:70:
                    1f:ae:e4:10:e7:e6:d5:13:0a:7c:21:ae:57:c8:c7:
                    cb:0c:a3:91:ae:72:d9:8d:c0:d8:ac:c6:77:77:bd:
                    9c:ae:8a:a0:fe:8d:86:93:1a:87:8c:b3:f3:aa:0b:
                    6c:fd:a1:78:40:65:16:75:5a:33:8e:db:f9:71:f5:
                    9b:df:50:a9:5b:13:4b:de:40:cc:76:a0:68:e5:9b:
                    6c:98:b9:e8:e9:4a:2e:7a:ed:00:2b:fa:f3:19:37:
                    84:db:af:ff:9d:20:84:07:09:98:3e:28:78:9a:67:
                    f9:a1:3c:4e:90:44:7d:e8:db:f9:16:9f:f2:70:d3:
                    22:fb:e8:25:4b:c8:97:82:0d:36:8a:47:09:b6:17:
                    c0:a0:eb:73:b8:a4:b4:98:8c:34:fd:b2:19:eb:d9:
                    a5:8a:dd:61:7d:8e:ea:d3:a4:26:36:1d:2e:c4:4b:
                    8f:fc:ab:82:82:a1:d6:6f:71:c2:e6:87:e9:12:9a:
                    30:37:db:65:a6:47:71:dd:cf:5f:24:75:b7:42:ff:
                    12:c6:74:70:43:6d:1b:de:90:dc:58:5d:94:74:28:
                    09:42:fa:69:b9:f6:24:f6:fe:9c:8c:48:c3:8d:bd:
                    a1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A1:29:CD:5A:85:4B:7E:D2:0C:AD:AB:E1:2B:DF:BB:7B:B6:54:D0
            X509v3 Authority Key Identifier:
                keyid:96:C1:BC:98:7A:D6:64:39:13:F6:5E:05:D1:A6:63:F6:4C:4A:E1:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsG8mHrWZDkT9l4F0aZj9kxK4bY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:52:94:d8:4f:51:2e:b6:aa:a6:f8:31:70:b2:4b:df:8e:8e:
         9d:b6:17:fd:1d:1a:e7:74:a7:8e:cd:b6:30:da:60:0c:14:9f:
         bc:6e:23:9c:e4:0d:1b:7a:5f:0d:47:3c:f4:ad:83:e8:0a:13:
         25:a1:4a:5f:06:44:67:47:5b:3e:3f:2a:09:70:e6:39:a5:fb:
         f4:41:20:62:d0:23:2f:d4:d2:70:7a:1c:10:1c:29:3a:8c:ea:
         f7:ec:75:59:39:86:fb:8d:2b:af:0a:8f:28:20:3b:c4:d1:23:
         58:82:ef:a2:ff:69:43:5f:03:4c:88:e3:e0:d2:9b:a8:91:af:
         e6:2b:3f:f0:3d:e8:6a:91:63:b3:58:19:77:dd:05:39:34:4a:
         60:03:b9:52:4f:62:b7:c1:0a:64:75:68:75:8c:1f:de:60:51:
         b2:c3:b1:72:08:17:b3:dc:e1:fb:de:a9:93:a7:d2:53:8c:1a:
         a8:57:fd:d7:bb:69:ba:b2:dc:c1:41:d4:9e:f2:c2:62:db:98:
         d8:1a:d3:c0:5b:81:a9:31:0d:05:65:5d:06:e0:fd:a4:18:d3:
         8d:6f:87:2a:bb:98:45:fa:6c:0d:86:96:5e:1d:27:50:b6:2b:
         0b:f3:62:12:2a:21:20:b4:50:79:b3:92:34:7d:73:dc:a1:e1:
         4f:73:45:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:03:19 2026 by rpki-client