Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/laNNlXWF4FXwNo5HTaPR-bvPqN8.mft
File:                     laNNlXWF4FXwNo5HTaPR-bvPqN8.mft (raw, json)
Hash identifier:          nTDVi2fO3BsinxB3xHOtzTQeYQGX8GBcE4BLAiuZXOY=
Subject key identifier:   93:9A:B3:2F:25:5E:0E:D0:9F:76:0C:DC:64:A5:49:B0:14:FF:20:7F
Authority key identifier: 95:A3:4D:95:75:85:E0:55:F0:36:8E:47:4D:A3:D1:F9:BB:CF:A8:DF
Certificate issuer:       /CN=A91D2B56/serialNumber=95A34D957585E055F0368E474DA3D1F9BBCFA8DF
Certificate serial:       54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/laNNlXWF4FXwNo5HTaPR-bvPqN8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/laNNlXWF4FXwNo5HTaPR-bvPqN8.mft
Manifest number:          52
Signing time:             Fri 25 Sep 2026 08:22:53 +0000
Manifest this update:     Fri 25 Sep 2026 08:22:52 +0000
Manifest next update:     Fri 02 Oct 2026 08:22:52 +0000
Files and hashes:         1: laNNlXWF4FXwNo5HTaPR-bvPqN8.crl (hash: Zpe/qyoSc9cO4NkPbImvY5daI7fQTMLgvNUOyor04qQ=)
                          2: 04EDE6343E2B11F1B4A6C6E4B6833773.roa (hash: LMy6VYgTcsTBcx2OItSEyTKYKnkkDiO7uEs+0s8aooQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/laNNlXWF4FXwNo5HTaPR-bvPqN8.crl
                          rsync://rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/laNNlXWF4FXwNo5HTaPR-bvPqN8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/laNNlXWF4FXwNo5HTaPR-bvPqN8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 08:22:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2B56, serialNumber=95A34D957585E055F0368E474DA3D1F9BBCFA8DF
        Validity
            Not Before: Sep 25 08:22:52 2026 GMT
            Not After : Oct  2 08:22:52 2026 GMT
        Subject: CN=6ab62f5d-c9f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:15:0a:2c:f5:12:c2:28:81:fa:94:c6:64:54:
                    b8:a3:d0:53:1f:20:13:83:ba:51:3e:3a:75:12:75:
                    16:01:66:7a:ea:51:4f:2c:62:98:f7:b5:cc:57:25:
                    da:72:f0:62:c4:ae:4e:7e:ec:b5:eb:de:0e:28:cf:
                    53:31:7e:d4:6b:2d:06:20:c2:2d:46:55:c7:c2:5a:
                    1d:01:1f:c7:96:24:dc:8a:59:12:e7:a1:5d:53:a3:
                    1c:9d:75:85:49:63:7a:57:0d:4a:b8:0d:42:e8:b1:
                    75:ff:73:1d:37:58:56:21:13:c2:1d:5e:a5:6a:e5:
                    b3:bf:b6:f1:40:7b:09:c1:05:87:f3:60:c1:26:b4:
                    cd:ae:62:2c:92:cc:5f:f7:d8:0e:c3:09:c4:54:98:
                    42:0b:89:c6:86:b5:01:e3:62:24:68:47:b8:e9:1c:
                    47:d4:0c:54:88:93:fb:df:e4:d3:1f:31:08:4e:92:
                    d9:ef:8d:f2:e2:d5:2d:74:77:04:64:6b:16:54:f9:
                    64:71:ce:b2:3d:ea:93:ce:82:be:b3:51:5d:23:b9:
                    35:be:84:c6:65:3f:13:a9:8a:3a:a0:2e:a3:59:73:
                    01:2d:e1:fc:d4:c3:36:6a:ef:61:81:0d:a6:eb:2d:
                    8c:91:9a:ce:76:7a:5e:f2:df:05:42:e7:e7:d7:a9:
                    78:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:9A:B3:2F:25:5E:0E:D0:9F:76:0C:DC:64:A5:49:B0:14:FF:20:7F
            X509v3 Authority Key Identifier:
                keyid:95:A3:4D:95:75:85:E0:55:F0:36:8E:47:4D:A3:D1:F9:BB:CF:A8:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/laNNlXWF4FXwNo5HTaPR-bvPqN8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/laNNlXWF4FXwNo5HTaPR-bvPqN8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B56/38C1E9AA3E2711F1BA24C59DB5833773/laNNlXWF4FXwNo5HTaPR-bvPqN8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:5b:1c:58:76:f9:23:66:c4:fb:f1:ca:08:f4:70:e5:d8:78:
         2f:9a:4e:2e:b8:f1:be:18:2c:38:11:c6:7d:e7:16:ac:bc:15:
         d8:33:4b:47:5b:64:d9:1f:f9:e0:72:0e:cf:32:4b:03:91:63:
         22:f0:12:74:b2:17:6d:f1:48:09:3a:80:87:31:c6:fe:84:2e:
         83:44:26:73:b8:a5:2a:52:e2:ed:56:c9:d3:b4:31:c7:0d:12:
         16:01:32:7c:e6:d7:1b:a9:dc:93:7a:d4:4a:34:27:79:af:dd:
         d2:84:c3:bc:69:0b:5a:ae:25:4c:0f:98:b9:3c:b9:0e:25:75:
         28:b5:3b:d0:5f:90:27:e4:8b:55:c7:34:21:7b:f1:6f:ba:76:
         cd:3b:52:98:cc:5d:53:fc:c6:f7:2d:6e:7b:11:12:c5:aa:b3:
         f7:cc:91:b8:e5:f4:08:73:a0:01:c0:1a:42:1e:8c:39:16:d2:
         50:1f:78:6f:3e:59:9b:89:e9:27:46:42:05:ec:9f:19:e5:3c:
         e9:32:5f:fb:38:92:c7:a3:84:e8:c8:25:5e:ac:fa:86:87:c6:
         ff:4e:8a:34:52:d4:2c:d5:6a:e6:6d:c3:e7:ff:8b:32:c4:77:
         fc:36:9c:0e:4f:dc:cd:86:bf:1b:65:c7:31:cc:95:63:26:13:
         01:ea:bd:0e
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
MkI1NjExMC8GA1UEBRMoOTVBMzREOTU3NTg1RTA1NUYwMzY4RTQ3NERBM0QxRjlC
QkNGQThERjAeFw0yNjA5MjUwODIyNTJaFw0yNjEwMDIwODIyNTJaMBgxFjAUBgNV
BAMTDTZhYjYyZjVkLWM5ZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDxFQos9RLCKIH6lMZkVLij0FMfIBODulE+OnUSdRYBZnrqUU8sYpj3tcxXJdpy
8GLErk5+7LXr3g4oz1MxftRrLQYgwi1GVcfCWh0BH8eWJNyKWRLnoV1ToxyddYVJ
Y3pXDUq4DULosXX/cx03WFYhE8IdXqVq5bO/tvFAewnBBYfzYMEmtM2uYiySzF/3
2A7DCcRUmEILicaGtQHjYiRoR7jpHEfUDFSIk/vf5NMfMQhOktnvjfLi1S10dwRk
axZU+WRxzrI96pPOgr6zUV0juTW+hMZlPxOpijqgLqNZcwEt4fzUwzZq72GBDabr
LYyRms52el7y3wVC5+fXqXhTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUk5qzLyVe
DtCfdgzcZKVJsBT/IH8wHwYDVR0jBBgwFoAUlaNNlXWF4FXwNo5HTaPR+bvPqN8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyQjU2LzM4QzFFOUFBM0Uy
NzExRjFCQTI0QzU5REI1ODMzNzczL2xhTk5sWFdGNEZYd05vNUhUYVBSLWJ2UHFO
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbGFOTmxYV0Y0Rlh3Tm81SFRhUFItYnZQcU44LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy
QjU2LzM4QzFFOUFBM0UyNzExRjFCQTI0QzU5REI1ODMzNzczL2xhTk5sWFdGNEZY
d05vNUhUYVBSLWJ2UHFOOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAAWxxYdvkjZsT78coI9HDl2Hgvmk4uuPG+GCw4EcZ95xasvBXYM0tHW2TZH/ng
cg7PMksDkWMi8BJ0shdt8UgJOoCHMcb+hC6DRCZzuKUqUuLtVsnTtDHHDRIWATJ8
5tcbqdyTetRKNCd5r93ShMO8aQtariVMD5i5PLkOJXUotTvQX5An5ItVxzQhe/Fv
unbNO1KYzF1T/Mb3LW57ERLFqrP3zJG45fQIc6ABwBpCHow5FtJQH3hvPlmbiekn
RkIF7J8Z5TzpMl/7OJLHo4ToyCVerPqGh8b/Too0UtQs1WrmbcPn/4syxHf8NpwO
T9zNhr8bZccxzJVjJhMB6r0O
-----END CERTIFICATE-----
Generated at Fri Sep 25 19:13:46 2026 by rpki-client