Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF9CA/7EA33706B23C11F1AB3B015E6111F970/ltlUhB6Fd6jfgc9XmCQrIHFeo5k.mft
File:                     ltlUhB6Fd6jfgc9XmCQrIHFeo5k.mft (raw, json)
Hash identifier:          vGwxl3a0hAB9O7Krp1PnZ/nDc1TUNf7CKkOiQF7/Peg=
Subject key identifier:   58:4C:F6:65:3C:08:A7:F9:65:72:FE:A8:27:2B:56:88:97:96:13:8F
Authority key identifier: 96:D9:54:84:1E:85:77:A8:DF:81:CF:57:98:24:2B:20:71:5E:A3:99
Certificate issuer:       /CN=A91DF9CA/serialNumber=96D954841E8577A8DF81CF5798242B20715EA399
Certificate serial:       05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltlUhB6Fd6jfgc9XmCQrIHFeo5k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF9CA/7EA33706B23C11F1AB3B015E6111F970/ltlUhB6Fd6jfgc9XmCQrIHFeo5k.mft
Manifest number:          04
Signing time:             Mon 21 Sep 2026 09:16:05 +0000
Manifest this update:     Mon 21 Sep 2026 09:16:05 +0000
Manifest next update:     Mon 28 Sep 2026 09:16:05 +0000
Files and hashes:         1: ltlUhB6Fd6jfgc9XmCQrIHFeo5k.crl (hash: bAyBW2E974tarEZSgEUbgYTHXfb1sNl6+cRne5XRvOI=)
                          2: C6EF2736B23C11F196D963B56111F970.roa (hash: 7Vzu1+cRluQVIi2fLurDSzXT17iGox+kdq/tblSQ6nk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF9CA/7EA33706B23C11F1AB3B015E6111F970/ltlUhB6Fd6jfgc9XmCQrIHFeo5k.crl
                          rsync://rpki.apnic.net/member_repository/A91DF9CA/7EA33706B23C11F1AB3B015E6111F970/ltlUhB6Fd6jfgc9XmCQrIHFeo5k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltlUhB6Fd6jfgc9XmCQrIHFeo5k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 09:16:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF9CA, serialNumber=96D954841E8577A8DF81CF5798242B20715EA399
        Validity
            Not Before: Sep 21 09:16:05 2026 GMT
            Not After : Sep 28 09:16:05 2026 GMT
        Subject: CN=6ab0f5d5-6b06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:34:5c:06:16:35:41:ff:5f:f1:ba:ae:85:63:
                    8b:d3:49:f8:b6:cc:20:34:06:d8:ed:4d:60:d4:90:
                    02:00:21:59:63:37:22:da:c1:99:d6:31:da:50:94:
                    e7:86:c4:56:56:d2:e7:79:49:9b:70:c6:15:62:ae:
                    0f:63:57:7f:9a:22:c3:29:66:81:de:31:9d:f3:02:
                    16:82:02:d0:05:21:3c:4e:17:89:b2:de:f5:e7:a2:
                    ee:1c:c2:0b:6d:b1:cc:c9:a5:f9:fe:26:12:ad:16:
                    98:cf:c7:59:7e:d0:41:91:a7:92:3e:a5:dd:84:d7:
                    36:cf:7e:23:7e:02:fd:19:55:9d:52:18:be:de:49:
                    d0:74:2f:7c:56:eb:7a:98:ae:c9:c4:19:85:d1:d2:
                    9e:b5:4f:c8:d7:fb:46:33:b0:72:23:65:dd:db:55:
                    04:ca:54:17:41:8b:a5:4c:d0:26:b0:c1:f5:3d:f7:
                    7b:0c:61:4f:cd:7b:75:1c:45:d9:bb:9f:4d:11:20:
                    3e:d3:1d:d1:4b:37:bc:ec:8e:5d:cd:87:d6:20:8b:
                    54:6e:17:35:79:cc:dd:ad:17:f1:49:38:df:d3:7d:
                    4a:e4:0f:51:b5:88:2e:61:14:86:ce:59:4b:14:c4:
                    12:73:72:5e:72:f2:17:ce:2c:6b:e4:a3:ff:70:34:
                    08:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:4C:F6:65:3C:08:A7:F9:65:72:FE:A8:27:2B:56:88:97:96:13:8F
            X509v3 Authority Key Identifier:
                keyid:96:D9:54:84:1E:85:77:A8:DF:81:CF:57:98:24:2B:20:71:5E:A3:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF9CA/7EA33706B23C11F1AB3B015E6111F970/ltlUhB6Fd6jfgc9XmCQrIHFeo5k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltlUhB6Fd6jfgc9XmCQrIHFeo5k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF9CA/7EA33706B23C11F1AB3B015E6111F970/ltlUhB6Fd6jfgc9XmCQrIHFeo5k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:d0:30:40:4c:70:06:65:fc:40:2b:3c:23:27:9d:a0:f7:8c:
         74:b4:c9:6d:ca:49:06:63:7c:5f:dd:c7:9e:f5:49:1f:93:cf:
         21:af:39:7a:29:32:a2:20:d7:87:15:5e:bc:98:07:13:b2:c3:
         e7:99:10:d9:91:e3:50:cb:ee:c4:20:bb:83:3f:8b:f7:c9:f7:
         05:03:0a:8d:e0:d0:18:4c:94:96:df:0c:ab:70:56:2a:ab:38:
         68:20:fc:28:36:11:d7:0b:65:db:06:20:a8:79:6f:cd:fb:d1:
         0b:0e:57:0f:cb:eb:e9:0f:56:74:3a:cb:ba:de:18:28:5c:24:
         ff:4a:3c:72:2d:ff:d4:5c:4e:aa:49:2f:ce:9a:80:3c:b1:1c:
         e8:8c:19:49:d0:21:c0:e0:a1:7a:bf:6e:23:35:55:8d:dd:76:
         b7:1c:00:4e:9e:21:9f:01:81:64:a8:bf:78:f6:8e:19:cd:ab:
         a4:78:60:0c:f2:d9:e8:03:66:36:42:a3:07:cf:73:59:14:8e:
         0c:ee:b0:95:61:f7:b0:80:5d:1b:c3:18:03:7e:fb:0f:72:a2:
         63:c8:27:3b:ec:c0:45:d0:57:55:f0:93:88:a7:27:43:ab:78:
         2b:f6:74:0b:e7:09:fd:a2:58:4f:0f:79:ba:44:81:83:e1:16:
         3d:9b:4d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:45:34 2026 by rpki-client