Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
File:                     ljP2L_shhnbryT8cN2lknAxdhN8.mft (raw, json)
Hash identifier:          BnhMTZiRc7Ig13sVbRVOG41Zq9KielN9I+YHJPx0DYo=
Subject key identifier:   2B:95:C5:AF:E8:62:71:F2:52:64:3E:54:CA:4A:73:21:4F:28:0E:07
Authority key identifier: 96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF
Certificate issuer:       /CN=A91F20F8/serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF
Certificate serial:       0274
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
Manifest number:          026A
Signing time:             Fri 25 Sep 2026 02:13:44 +0000
Manifest this update:     Fri 25 Sep 2026 02:13:44 +0000
Manifest next update:     Fri 02 Oct 2026 02:13:44 +0000
Files and hashes:         1: ljP2L_shhnbryT8cN2lknAxdhN8.crl (hash: Qo1MlJ2wpQAG4JgroQyuwCGV6f1S4To7QXvGQaUEXDc=)
                          2: 3304B5BA43B311F19399644A98833773.roa (hash: bzOsUU4L5zybRan2RbEqjLxhGbEC4X30U/TXsNv87pc=)
                          3: AD4C18D62D1511F19E800787B3833773.roa (hash: gF6FfjxDgiZ5qTPAnk0dNcAHblND2UNyNpInYeZ2Rc8=)
                          4: 95FE27F02D1511F19EAB6E70B3833773.roa (hash: hxELHtGIUsJ5X6fDwKBBUuO929IKOwxoHEeRfQefsOg=)
                          5: 6445C13C2D1511F18C0F846BB3833773.roa (hash: PLgXnUtV5/qDMTfK+s5CXVumrPmYkILffVNAYNUoLk4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl
                          rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 02:13:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 628 (0x274)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F20F8, serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF
        Validity
            Not Before: Sep 25 02:13:44 2026 GMT
            Not After : Oct  2 02:13:44 2026 GMT
        Subject: CN=6ab5d8d8-a815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8b:eb:80:3f:7a:90:ee:82:a9:cd:58:5b:b9:
                    f7:75:14:06:f4:cb:c1:9b:7f:07:f6:28:41:b9:8d:
                    51:42:c4:5b:c8:1c:71:bc:bb:50:b4:e6:7c:95:29:
                    df:c0:04:e8:1b:08:43:93:03:36:3c:1c:1a:8f:91:
                    89:14:df:c5:61:de:ad:3e:69:17:b3:ed:c7:c0:eb:
                    f8:5c:c4:1b:31:8a:a0:67:af:cc:7d:fd:b9:d0:de:
                    d7:ef:f0:90:4b:92:11:87:01:ba:82:0f:be:c5:76:
                    d6:86:19:62:1b:b6:82:11:9e:56:1b:df:b2:f7:56:
                    f5:39:7d:84:30:c1:5f:05:88:53:fe:a8:99:ec:a3:
                    d0:ab:50:b3:7c:7a:82:86:81:68:f1:c7:e5:6d:34:
                    f8:41:1e:95:f7:51:38:3d:83:70:81:90:cf:7f:62:
                    7f:6d:6f:7b:cd:ff:5d:55:d7:18:14:11:e9:e2:4d:
                    ea:aa:41:ff:97:9c:01:34:a3:dd:40:9c:26:55:9e:
                    5a:ed:c3:00:cd:40:29:75:d4:31:4b:bf:1a:aa:06:
                    55:7d:8a:04:75:d7:8f:ad:fe:f4:83:94:16:23:fe:
                    b3:ec:e7:2f:7b:7f:b7:56:59:b6:9c:51:58:f0:f4:
                    be:8e:ad:a4:8d:3f:74:4e:a5:a0:26:a4:f5:6c:ed:
                    19:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:95:C5:AF:E8:62:71:F2:52:64:3E:54:CA:4A:73:21:4F:28:0E:07
            X509v3 Authority Key Identifier:
                keyid:96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:1d:83:4f:f7:38:c5:18:09:30:0d:aa:df:c3:18:e3:0d:bb:
         18:65:49:b6:77:41:ee:72:32:96:72:03:08:c1:dc:fe:97:d9:
         b6:6e:d7:e5:42:e5:8a:81:e5:94:0a:04:d6:a1:62:fe:15:fe:
         2f:5f:91:49:73:fc:29:ff:62:5b:fb:1d:6a:a8:07:73:7f:d0:
         62:67:48:c0:77:f6:a6:52:da:74:ac:3c:0f:1f:c0:21:06:6d:
         d0:c0:4c:66:d0:14:c3:20:41:e5:5b:69:e1:1f:38:ea:7c:01:
         00:cb:fc:7d:a0:64:d3:5e:21:80:55:2a:c5:4f:37:78:70:48:
         33:91:38:d2:18:b2:f9:8a:dc:3a:ae:05:0c:cc:a4:db:8e:34:
         d6:df:cd:8a:f4:03:5a:33:fd:f5:da:73:3c:c1:00:60:bb:8a:
         a4:fc:fa:ba:be:c2:1f:31:c5:7d:23:a4:40:cc:34:0f:c1:00:
         7c:b8:a5:44:82:4c:bf:ca:b1:3c:4e:3b:ef:4a:2a:bf:b1:40:
         28:81:ca:4f:4e:ca:85:df:4d:a3:05:5f:93:a8:78:f3:21:52:
         ae:5e:5e:31:a3:af:dd:18:54:64:1e:80:ee:dc:71:de:2a:7c:
         f5:24:8a:6b:4b:97:04:31:06:ad:2d:e8:a5:c5:33:5c:b2:d4:
         45:01:2c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:28:43 2026 by rpki-client