Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.mft
File:                     LZqjsNhdis2WNSgFXHSHpmkEyHk.mft (raw, json)
Hash identifier:          WzCtPRGlGZTFky8kqooqTeOok8+OrKLu1kCHW77JFLQ=
Subject key identifier:   AF:26:53:9D:FC:7E:03:C6:15:F9:DB:AE:07:84:F1:3E:8E:BB:C4:A9
Authority key identifier: 2D:9A:A3:B0:D8:5D:8A:CD:96:35:28:05:5C:74:87:A6:69:04:C8:79
Certificate issuer:       /CN=A91CD883/serialNumber=2D9AA3B0D85D8ACD963528055C7487A66904C879
Certificate serial:       51
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LZqjsNhdis2WNSgFXHSHpmkEyHk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.mft
Manifest number:          50
Signing time:             Wed 23 Sep 2026 08:00:10 +0000
Manifest this update:     Wed 23 Sep 2026 08:00:10 +0000
Manifest next update:     Wed 30 Sep 2026 08:00:10 +0000
Files and hashes:         1: LZqjsNhdis2WNSgFXHSHpmkEyHk.crl (hash: 8kbJHM90mFbaVeTIE0FDV3++QUQJP+uBCYMJaI+9k58=)
                          2: FFF0486A3D7C11F1AE97A9BABA833773.roa (hash: 8PBVOn5rHRwK4EpJUtLvYRy9A1Nxp+wwyWqks95ix4w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.crl
                          rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LZqjsNhdis2WNSgFXHSHpmkEyHk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 08:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD883, serialNumber=2D9AA3B0D85D8ACD963528055C7487A66904C879
        Validity
            Not Before: Sep 23 08:00:10 2026 GMT
            Not After : Sep 30 08:00:10 2026 GMT
        Subject: CN=6ab3870a-8661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:da:34:71:e2:df:de:92:11:14:0c:8e:75:a4:
                    b3:1c:39:ec:c2:3b:e1:c3:09:3c:05:ff:76:0f:38:
                    c4:61:e4:73:53:da:16:da:83:19:00:42:e9:df:95:
                    b6:30:8d:f7:32:26:ca:f2:1f:2b:dc:1c:90:d4:cc:
                    0c:76:52:c3:9c:c2:b1:e0:8f:7f:32:0d:1b:f4:cf:
                    5a:45:6e:e2:ce:e9:6c:35:3a:18:ee:0e:8b:04:04:
                    6e:59:ff:a0:ed:57:01:46:bf:6c:1b:f1:6f:62:84:
                    d0:7f:d2:c4:8c:92:4a:b3:3d:5a:79:1b:c7:63:02:
                    98:1d:46:9b:21:b1:a5:d7:96:6a:e9:72:de:60:be:
                    b2:6f:88:0e:92:eb:ae:d6:15:9e:ab:26:f0:67:ba:
                    4b:68:be:24:fa:1b:6e:83:15:fc:1f:e3:f9:74:7a:
                    cb:fa:92:c7:03:ee:60:97:6c:88:97:f4:58:30:38:
                    9a:7d:f5:82:fc:a2:3e:36:63:94:a1:e0:45:38:dc:
                    91:96:b3:ab:ee:1e:ab:3a:75:48:bb:d6:4a:d8:42:
                    8c:ab:47:37:d5:69:3b:52:d1:9f:d2:0f:cc:0d:7a:
                    0d:02:0d:70:d7:24:ac:50:d2:2c:c7:32:b4:57:f3:
                    f3:99:ce:9b:79:9c:b1:12:9e:6e:40:80:81:38:17:
                    f5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:26:53:9D:FC:7E:03:C6:15:F9:DB:AE:07:84:F1:3E:8E:BB:C4:A9
            X509v3 Authority Key Identifier:
                keyid:2D:9A:A3:B0:D8:5D:8A:CD:96:35:28:05:5C:74:87:A6:69:04:C8:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LZqjsNhdis2WNSgFXHSHpmkEyHk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD883/7AE4140C3D5A11F1A8C898C8A8833773/LZqjsNhdis2WNSgFXHSHpmkEyHk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:82:4c:9b:00:58:84:54:3d:13:b9:32:55:fc:a0:14:e8:6b:
         41:80:57:3b:57:9c:0f:91:b5:c6:f5:6f:5f:c7:88:84:95:a5:
         35:1a:ac:0f:99:9d:e2:eb:d4:c3:72:3b:ff:1b:d6:46:2b:b3:
         97:9f:ae:cc:23:29:ea:2e:eb:2c:03:d1:4f:93:64:3f:6e:1f:
         20:3a:d0:ce:8f:74:b8:f9:8d:f9:e0:d1:14:17:cb:e7:14:34:
         3c:d4:bb:eb:59:a0:4b:d7:38:3d:f3:d1:3f:3c:ae:df:76:dc:
         1a:df:2f:8f:c4:7e:a0:17:c7:76:1a:fa:35:da:d1:8c:a3:85:
         15:67:f7:bd:75:f0:03:44:87:86:0c:05:60:ef:c3:5a:7f:4f:
         50:1a:94:08:5f:c7:d7:32:b5:a5:26:28:68:95:76:dc:bb:2e:
         2c:96:35:d7:90:82:eb:14:a8:73:c6:7f:88:e9:73:77:6d:ff:
         e9:28:f1:c5:60:6e:c6:a6:14:49:5c:38:21:55:c0:5c:fd:43:
         4d:65:88:4b:10:77:df:70:1f:d3:60:e6:4b:b7:3a:d6:98:da:
         e3:c8:d4:d9:aa:5b:08:a0:46:04:0a:0a:c9:c3:fe:2a:a3:f1:
         1d:e1:15:9a:77:54:d5:d3:d0:5e:36:2b:e0:05:3c:58:7e:75:
         dc:45:19:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:38:02 2026 by rpki-client