Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
File:                     LnKDqP3Vzws9n6or6XQogZiRk6U.mft (raw, json)
Hash identifier:          9ybGP+Sfh02qLkWOt/Vn0VSje0ikBFFioN8qgJ+Vyzg=
Subject key identifier:   7E:00:9E:B9:D7:A4:39:A5:6E:A7:8A:B7:C1:CA:DF:86:54:20:3D:DB
Authority key identifier: 2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5
Certificate issuer:       /CN=A91DFADF/serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5
Certificate serial:       0AB8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
Manifest number:          0AA4
Signing time:             Thu 08 Oct 2026 19:40:48 +0000
Manifest this update:     Thu 08 Oct 2026 19:40:47 +0000
Manifest next update:     Thu 15 Oct 2026 19:40:47 +0000
Files and hashes:         1: LnKDqP3Vzws9n6or6XQogZiRk6U.crl (hash: TtkauaDCgAoEUBKLm4fsGIv6+ww/YTPmqGO2NuoLdJk=)
                          2: 651384A6766811EF96E4115EC4F9AE02.roa (hash: 4tvOJ0DlZvwroxMkIv2YzecHFGQeqL4hT/QTBep3keQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl
                          rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 19:40:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2744 (0xab8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFADF, serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5
        Validity
            Not Before: Oct  8 19:40:47 2026 GMT
            Not After : Oct 15 19:40:47 2026 GMT
        Subject: CN=6ac7f1bf-932d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:75:84:68:ee:0f:af:95:7c:97:7e:34:fa:ce:
                    cd:ea:c4:f8:8f:58:5f:8a:ac:8b:c2:b8:3a:85:a9:
                    fa:6f:8e:3a:c3:69:fe:5e:1e:00:a6:44:ea:ac:38:
                    d0:66:5c:75:b8:f8:61:12:d7:16:21:5d:8f:24:93:
                    fa:5a:b4:d9:22:df:15:92:70:b7:47:1d:75:ed:63:
                    c8:98:60:fd:00:a6:63:08:e4:3b:46:07:73:67:97:
                    98:b2:78:36:28:99:70:c8:9a:79:69:5f:61:c1:e8:
                    86:0d:5b:90:f0:95:ed:14:dc:d9:aa:fd:31:33:12:
                    14:4c:b5:c4:79:f3:be:61:95:ec:8b:f6:17:cd:38:
                    15:8f:18:2f:34:23:a4:9d:a1:ff:e6:2c:53:65:6b:
                    ef:55:95:f8:08:db:56:e1:74:34:03:e2:f4:ee:12:
                    32:71:26:82:87:66:8e:04:de:1e:a8:ff:7e:d1:1d:
                    c2:3f:bd:7d:1d:c8:a8:d2:56:05:fc:e7:ba:f9:d8:
                    a0:00:c4:a0:ed:e9:f1:2f:21:da:60:98:e2:cd:3c:
                    04:98:ea:13:cd:f9:09:06:54:ba:ed:4d:40:ed:31:
                    6e:a0:31:d6:13:9e:21:87:dd:66:77:5f:a9:b3:33:
                    d9:98:ae:89:6c:95:04:28:97:04:9f:9a:8e:bb:f8:
                    54:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:00:9E:B9:D7:A4:39:A5:6E:A7:8A:B7:C1:CA:DF:86:54:20:3D:DB
            X509v3 Authority Key Identifier:
                keyid:2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:de:03:25:f1:39:f3:b3:2c:fe:86:f4:13:6e:b3:24:43:98:
         6d:a4:08:86:e9:ea:95:0e:86:70:c2:da:dc:13:37:db:d0:c2:
         09:03:7c:7c:a2:42:39:3a:f6:47:65:4c:28:e6:40:0e:6d:61:
         3a:d6:91:c2:e2:93:b4:18:10:1a:9d:75:52:eb:99:9e:31:7b:
         4f:a1:8a:2c:63:89:9d:01:2d:f7:59:c4:c7:86:e1:c1:43:8a:
         19:11:29:f3:3d:21:9b:b7:d6:27:6c:9f:a5:c2:b4:71:ed:07:
         2d:67:df:d2:e5:3f:f1:fc:64:a1:fa:c2:55:a0:9c:9c:88:87:
         e8:66:ca:f4:0e:de:36:a9:7a:33:41:ae:90:da:3e:b4:97:36:
         bd:14:dc:c5:cd:3e:bc:e2:e5:eb:76:6f:11:91:b7:54:60:ab:
         8f:fa:8f:5e:c2:25:2b:ac:5a:83:1b:51:f8:5d:28:32:5b:62:
         27:e4:96:fd:47:0f:c2:4f:7b:e2:6f:a4:9d:6c:68:33:9b:5c:
         a1:f0:01:05:41:bf:c2:c1:44:88:ac:34:8f:86:5b:0f:bb:42:
         b3:11:8f:c0:5b:08:0e:35:2f:21:b3:ac:87:c9:0c:cc:52:4f:
         f7:78:a5:ac:e9:58:5b:7e:6d:e3:ba:37:fa:df:f3:39:58:fe:
         64:c6:c4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 11:54:00 2026 by rpki-client