Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft
File:                     L8Qw8eIVy9fgjyZDiDcDUALeMak.mft (raw, json)
Hash identifier:          Wd2sRHR/JupRfdhCWOOgbcY6dPt8n69TYtytR74zZ7U=
Subject key identifier:   A1:1A:66:EA:F3:47:EC:27:09:3A:C7:70:4C:12:AD:BC:3A:F2:62:32
Authority key identifier: 2F:C4:30:F1:E2:15:CB:D7:E0:8F:26:43:88:37:03:50:02:DE:31:A9
Certificate issuer:       /CN=A91CB8A3/serialNumber=2FC430F1E215CBD7E08F26438837035002DE31A9
Certificate serial:       03BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft
Manifest number:          03A8
Signing time:             Tue 29 Sep 2026 00:47:20 +0000
Manifest this update:     Tue 29 Sep 2026 00:47:19 +0000
Manifest next update:     Tue 06 Oct 2026 00:47:19 +0000
Files and hashes:         1: L8Qw8eIVy9fgjyZDiDcDUALeMak.crl (hash: qyaedLFMF3f6MuOnIaLhJ+Z9YAO0hLn0EjlgTJSiU9g=)
                          2: 36B29DDC841711F0AB46F416C4F9AE02.roa (hash: wfGSp7+JsmcD0oEs9KhJM3F6ykDJOKd65jRk6d+1FZA=)
                          3: 93853096971D11F18F01422E6D11F970.roa (hash: 5yF1DXbnlSpTxNu8XT0SUNre3PW558XfVHldm3s72uM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.crl
                          rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 00:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 957 (0x3bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB8A3, serialNumber=2FC430F1E215CBD7E08F26438837035002DE31A9
        Validity
            Not Before: Sep 29 00:47:19 2026 GMT
            Not After : Oct  6 00:47:19 2026 GMT
        Subject: CN=6abb0a98-407a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:82:21:e0:1a:b3:ac:74:14:6f:b2:20:6a:e2:
                    33:d1:10:e9:3a:f7:be:2f:92:44:fc:19:a6:08:42:
                    5f:50:0b:34:3c:06:c5:d1:e7:c2:b9:7f:5e:4e:c8:
                    ae:da:c2:e0:2a:1f:94:fb:54:ea:8c:24:5f:e2:cf:
                    b6:80:67:85:bb:5f:ab:5a:26:1d:be:4a:f7:5a:f8:
                    0e:41:b2:47:a1:ae:88:a9:47:f7:af:6e:af:7a:6c:
                    8d:5c:f5:f9:db:62:48:61:af:a6:83:9c:c8:1e:83:
                    7e:4b:1b:fe:c7:bd:4d:a8:e5:b1:87:12:e3:72:63:
                    23:b6:25:9e:2e:69:a2:e1:1b:fb:6b:14:fc:ac:1e:
                    ca:38:84:c9:4b:25:c5:fe:18:21:a2:a3:b2:1b:cb:
                    8a:25:43:15:46:00:60:35:aa:70:ee:8e:52:8e:58:
                    37:69:26:88:c8:0b:8b:5f:c1:e9:f2:84:bc:69:85:
                    d3:00:3b:69:bb:89:d2:9e:9f:fa:7f:8c:bf:9b:12:
                    e5:e2:75:fe:2d:e8:17:52:80:dd:79:77:49:b5:23:
                    4c:58:ac:c0:ce:89:c5:0d:e5:4e:03:73:88:eb:b2:
                    aa:46:99:dc:c0:18:fa:66:5f:57:9d:99:33:bd:61:
                    ea:83:9d:d0:44:8a:63:5a:ff:78:92:40:74:42:9f:
                    ee:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:1A:66:EA:F3:47:EC:27:09:3A:C7:70:4C:12:AD:BC:3A:F2:62:32
            X509v3 Authority Key Identifier:
                keyid:2F:C4:30:F1:E2:15:CB:D7:E0:8F:26:43:88:37:03:50:02:DE:31:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:3b:45:54:fa:13:74:bf:ad:29:27:69:49:ce:7d:72:8f:6b:
         e3:fc:fb:ee:fa:66:76:8b:82:fc:82:df:06:02:51:bb:fb:2e:
         d8:ad:81:10:4d:4e:15:be:a0:7f:97:80:da:c3:bb:2e:a7:9f:
         71:ad:20:60:fb:cc:83:ae:03:fb:83:e9:d4:bf:e8:5a:38:7c:
         71:d0:15:fb:df:5c:66:4b:69:e2:4d:c5:04:05:23:78:e5:37:
         e2:6f:c7:3b:98:b2:d1:0e:1a:7a:51:73:2d:0b:9c:a1:34:d3:
         62:84:7e:a2:f0:80:b0:79:b2:2f:15:38:9b:f1:c1:3b:90:35:
         de:07:f3:09:7c:64:22:69:4f:e8:17:af:13:a1:bf:01:a5:2f:
         12:94:55:f8:16:d6:6a:33:64:db:b0:78:f4:86:98:48:d2:12:
         50:23:81:8e:a1:ef:a3:98:04:b4:af:b6:6c:e3:4b:12:13:da:
         23:e7:de:be:29:e9:d6:c8:6d:7b:a3:08:1e:13:25:d2:6b:c9:
         4e:66:dc:e6:81:06:aa:b0:e7:38:dc:9a:28:95:3a:36:be:29:
         50:2c:53:7b:63:c3:5e:b3:e6:d2:8d:1f:d3:9e:23:09:2f:58:
         1b:ce:94:87:1d:5d:71:9c:4f:ed:91:43:bf:78:f5:0f:a0:b2:
         3b:02:d7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:16:54 2026 by rpki-client