Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft
File:                     LRhptz6h6I6xK-afHA1OfCGWoz4.mft (raw, json)
Hash identifier:          HQ3cwNbYKGapG3IJNaPsTP4t0arErpk002mdqCwp3Vw=
Subject key identifier:   37:5D:5E:23:2F:50:18:9F:4F:B3:A0:48:FD:46:2D:5F:9F:89:F2:74
Authority key identifier: 2D:18:69:B7:3E:A1:E8:8E:B1:2B:E6:9F:1C:0D:4E:7C:21:96:A3:3E
Certificate issuer:       /CN=A91E8FFF/serialNumber=2D1869B73EA1E88EB12BE69F1C0D4E7C2196A33E
Certificate serial:       87
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LRhptz6h6I6xK-afHA1OfCGWoz4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft
Manifest number:          85
Signing time:             Wed 23 Sep 2026 07:23:12 +0000
Manifest this update:     Wed 23 Sep 2026 07:23:11 +0000
Manifest next update:     Wed 30 Sep 2026 07:23:11 +0000
Files and hashes:         1: LRhptz6h6I6xK-afHA1OfCGWoz4.crl (hash: fRcYKO1pVUxaLPXLI5TT8DOM6O2G6I+l4Jq+13un4OM=)
                          2: DB2D63A4EED111F0AB3DEEA1736F56BC.roa (hash: gmdE3N51alm8HvqkCut4cR91VTINLTaVDY/NZdbNc/0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.crl
                          rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LRhptz6h6I6xK-afHA1OfCGWoz4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 07:23:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8FFF, serialNumber=2D1869B73EA1E88EB12BE69F1C0D4E7C2196A33E
        Validity
            Not Before: Sep 23 07:23:11 2026 GMT
            Not After : Sep 30 07:23:11 2026 GMT
        Subject: CN=6ab37e60-c58a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:01:fa:47:91:e9:e6:fc:88:59:da:c8:5e:3b:
                    e8:4e:15:ae:00:75:97:e5:cd:e0:7c:a1:3f:e9:de:
                    63:bc:11:ac:79:bb:30:fe:e6:dc:dc:ce:2d:ec:e1:
                    d7:6e:77:fb:b0:2c:0f:e5:0c:ca:15:1e:76:07:86:
                    40:46:90:64:c7:60:94:36:13:9b:24:e0:bc:e6:82:
                    05:e6:cb:f0:ad:e2:a4:4b:bb:22:6e:62:29:f4:6e:
                    5c:a7:ae:86:2d:f5:35:61:49:98:f5:42:75:5e:31:
                    fa:58:0d:b5:c4:a9:b1:7c:8d:4a:06:7e:4c:90:cb:
                    7c:08:f3:63:a4:49:87:fb:68:ae:48:a2:9f:1d:bc:
                    3e:8b:79:f1:7d:40:be:09:ef:5e:36:58:7c:68:9e:
                    79:93:c0:b5:c0:ff:58:a1:5e:de:9b:0e:13:40:61:
                    c6:88:98:a9:c1:e7:81:ef:b8:3f:9c:27:59:ba:2f:
                    53:b1:2e:a1:d2:94:32:ae:11:f7:80:ae:ab:ff:69:
                    90:aa:08:c4:68:6f:7d:c2:bb:f6:72:9c:26:3f:54:
                    68:1f:3a:b0:50:1b:f9:75:a1:91:e1:a7:52:c0:ae:
                    4c:ad:1e:4d:17:08:75:ba:fe:19:55:9f:76:35:50:
                    a0:73:8e:f1:e1:77:d8:18:a5:b3:8f:ea:d1:98:84:
                    43:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:5D:5E:23:2F:50:18:9F:4F:B3:A0:48:FD:46:2D:5F:9F:89:F2:74
            X509v3 Authority Key Identifier:
                keyid:2D:18:69:B7:3E:A1:E8:8E:B1:2B:E6:9F:1C:0D:4E:7C:21:96:A3:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LRhptz6h6I6xK-afHA1OfCGWoz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/50357CF0EED111F0B0ACD276736F56BC/LRhptz6h6I6xK-afHA1OfCGWoz4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:02:cb:57:c8:e6:36:34:78:7b:5a:10:09:dd:f4:90:fa:8b:
         0f:a3:4d:6c:de:e7:41:aa:59:99:e6:ec:d3:80:d4:3b:95:b1:
         98:82:17:b5:7f:43:d2:5e:5d:c4:36:37:7d:bf:58:19:60:4a:
         fe:d6:16:09:ea:cb:5b:b9:c3:48:b5:6a:23:24:b9:c0:df:13:
         c0:5f:06:de:70:e0:69:0e:b8:4d:de:42:24:9a:6a:d3:a7:45:
         9e:94:0a:0c:32:15:ba:20:a2:5a:90:cc:3d:c7:97:dc:61:5a:
         2a:c8:a8:af:4c:86:61:94:7b:0e:46:23:ac:68:7c:d7:41:e0:
         50:c2:94:47:7d:bd:e7:df:70:24:43:83:51:33:b6:e5:79:31:
         31:2c:62:c1:32:1b:cb:4f:a8:0c:72:bb:eb:6a:53:e9:54:ab:
         ae:92:ab:4b:25:de:bb:38:3e:b7:b2:24:2c:60:7c:01:9e:f1:
         2b:c7:53:ee:b3:51:1b:a2:78:c7:56:55:ba:07:ad:12:3e:bf:
         8c:26:f6:d7:36:b1:96:d8:90:13:49:51:f8:2c:a8:59:cd:b3:
         c6:8f:aa:d8:d7:05:d9:b4:0d:95:70:d4:29:7d:9b:41:49:e0:
         51:56:6f:e3:94:83:5c:93:22:cc:a7:be:ba:0b:33:44:11:70:
         e9:33:49:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:52:35 2026 by rpki-client