Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.mft
File:                     LqYoq1XRgXQ-8pDvgkmYDWKZr6I.mft (raw, json)
Hash identifier:          F9ef9+aboGd0+nWRvBZL+CXwkOqgpyGyVyJEB3v4mwk=
Subject key identifier:   BF:79:21:82:09:93:19:4A:21:FB:CF:B8:DF:85:BE:7E:96:0A:E2:74
Authority key identifier: 2E:A6:28:AB:55:D1:81:74:3E:F2:90:EF:82:49:98:0D:62:99:AF:A2
Certificate issuer:       /CN=A91FF94F/serialNumber=2EA628AB55D181743EF290EF8249980D6299AFA2
Certificate serial:       0205
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.mft
Manifest number:          01FF
Signing time:             Fri 25 Sep 2026 03:13:35 +0000
Manifest this update:     Fri 25 Sep 2026 03:13:35 +0000
Manifest next update:     Fri 02 Oct 2026 03:13:35 +0000
Files and hashes:         1: LqYoq1XRgXQ-8pDvgkmYDWKZr6I.crl (hash: rAH/yep/LSVemfDeHTFB0t3F7Lvk+ZAv6LykxV5T40E=)
                          2: F41E4608AD1511EE8FBA3458C4F9AE02.roa (hash: lKTLlH2NdmZabiSB46vthmuT0FwAQJtHjJmk7xS2S70=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.crl
                          rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 03:13:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 517 (0x205)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF94F, serialNumber=2EA628AB55D181743EF290EF8249980D6299AFA2
        Validity
            Not Before: Sep 25 03:13:35 2026 GMT
            Not After : Oct  2 03:13:35 2026 GMT
        Subject: CN=6ab5e6df-4b8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1b:65:de:ab:4a:26:ea:fa:d6:18:de:95:fe:
                    f1:9a:f5:a4:0d:2d:10:5f:bd:68:3c:28:24:f8:cd:
                    ae:09:44:0a:00:29:48:63:9e:6a:c4:53:33:eb:a6:
                    78:56:9d:3b:d1:9e:72:f5:c9:a6:a7:c4:fb:63:c8:
                    cc:ff:b1:fb:a1:a3:f0:93:56:38:f5:27:f0:3e:71:
                    a8:cc:13:3a:11:17:83:5d:90:e3:ab:89:de:6a:3f:
                    08:46:7d:ac:b3:45:c9:20:82:cb:6f:57:c5:5e:0d:
                    fd:f4:cd:50:cf:0d:93:84:1e:22:37:f9:94:e9:58:
                    f5:a5:b2:80:ce:4d:03:9d:22:1d:9a:d4:b9:bd:8b:
                    00:53:58:8e:91:f4:3c:10:b2:4b:a5:29:a1:85:1f:
                    ef:76:8f:31:97:a2:88:97:5f:c7:e8:ca:56:91:30:
                    86:b5:1f:8d:41:b2:ff:68:98:20:6b:b4:8c:fd:1d:
                    d0:a3:17:a0:fd:64:3d:40:98:26:ca:fb:df:56:0b:
                    b6:39:5d:4d:9f:1b:d1:da:97:c9:dd:79:0d:c8:74:
                    86:99:08:f9:aa:c0:d7:0c:a5:c1:f7:e6:6b:2b:be:
                    ff:36:74:7d:f2:c1:da:02:56:9e:c1:52:64:e7:19:
                    b3:ca:b1:0c:f0:57:31:b8:79:08:d4:a4:f6:ed:ed:
                    0e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:79:21:82:09:93:19:4A:21:FB:CF:B8:DF:85:BE:7E:96:0A:E2:74
            X509v3 Authority Key Identifier:
                keyid:2E:A6:28:AB:55:D1:81:74:3E:F2:90:EF:82:49:98:0D:62:99:AF:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:84:6c:f6:4b:19:36:a6:f5:e3:bd:21:f0:78:fb:2a:3f:f8:
         ab:70:5d:a6:f6:f7:3b:b8:04:88:bd:19:52:9d:c9:e1:32:8a:
         42:7e:07:a2:20:b4:7b:a1:eb:25:a8:83:cc:6f:8a:9b:17:f0:
         bc:62:f1:7a:24:da:c0:79:fd:d9:f7:85:32:34:c0:a8:5c:10:
         a0:88:64:a3:fe:53:37:ae:2a:21:a5:80:e9:41:3b:61:a4:5e:
         61:e2:35:c4:81:9a:eb:53:62:25:85:99:6e:71:be:93:1b:3f:
         23:40:e0:52:ec:26:72:09:3b:1d:db:eb:cf:f0:49:46:0c:ac:
         3b:a1:f2:6b:78:7a:cf:58:57:1e:19:b2:97:fc:6b:95:9c:b1:
         6b:cf:11:f2:ee:e1:dd:ae:64:67:03:be:79:86:de:79:04:b7:
         a0:c6:e5:1e:2d:2e:87:13:4e:d5:0f:43:6a:0c:af:b5:d5:48:
         c0:43:71:e6:be:85:6d:76:b2:2e:f6:c1:a9:27:8f:7e:34:31:
         90:bf:cf:cd:19:5d:1b:27:42:a4:5d:0c:a1:4a:3e:1a:3f:b4:
         ea:51:3f:5e:e9:5f:30:20:af:41:0b:71:94:6a:68:2f:47:91:
         9f:a4:50:e4:01:e4:08:04:d0:a7:28:e5:46:76:95:15:a9:03:
         ba:4b:e5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:45:03 2026 by rpki-client