Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft
File:                     lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft (raw, json)
Hash identifier:          DRjtIcpNqDxCAGU11OnEMSWNJMoGNDF2vTFbRRY6NYI=
Subject key identifier:   77:2C:BF:CB:5E:94:C9:47:08:06:66:8F:1A:CF:BF:6D:61:00:DF:EE
Authority key identifier: 96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2
Certificate issuer:       /CN=A919EFDE/serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2
Certificate serial:       3648
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft
Manifest number:          35C8
Signing time:             Sat 31 Oct 2026 14:24:53 +0000
Manifest this update:     Sat 31 Oct 2026 14:24:53 +0000
Manifest next update:     Sat 07 Nov 2026 14:24:53 +0000
Files and hashes:         1: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl (hash: uECIQkjIP+9dVOatVnvqxNEnPXjfoT/O2kp+dV3WlCE=)
                          2: 5113BF7CFE6011EA9D63505CC4F9AE02.roa (hash: mxnJdkkGiixNC+Rfsoo1Ofrs2JAqQlm+gAwevCl7GFk=)
                          3: A769D0DEB0CA11E59BE6876FC4F9AE02.roa (hash: Jd3ZacS2klJFI7xvpMG/m8SmMrwMISaa6zyQK7gUNdg=)
                          4: F6D63E40054A11EAA00FB024C4F9AE02.roa (hash: amb9pQroW3DV/+JaeOJZTDEVu2UZLwtQf6oUlJLMES4=)
                          5: 1A7891D4FA3011E9BF5A291EC4F9AE02.roa (hash: JUxy6GzDQ21xebagzDoF5HpC6HvU3N6JpzXQ1kUP9JI=)
                          6: B2690D6CCA5511EE9683413FC4F9AE02.roa (hash: ukllELSJvCp6vi+AdLqRlBz8ZcAISw83pxNAI70IHZw=)
                          7: 1B513B10FA3011E9BF5A291EC4F9AE02.roa (hash: BbNoi95+qosSwascIpShJhQSv4ttUNxmTWblhGbSbmA=)
                          8: 19DE7DB0FA3011E9BF5A291EC4F9AE02.roa (hash: 79Fuh/aEEYAZnE9PydtPuuiSfNO73FhbasXcojOGOhQ=)
                          9: A9D92784B0CA11E59BE6876FC4F9AE02.roa (hash: mQzTK4HvTtQ85QioP1VIxz0zyshDrYv48cyT8X+fGos=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl
                          rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Nov 2026 14:24:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13896 (0x3648)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EFDE, serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2
        Validity
            Not Before: Oct 31 14:24:53 2026 GMT
            Not After : Nov  7 14:24:53 2026 GMT
        Subject: CN=6ae5fa35-a5f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:53:c7:d7:ce:dc:ed:18:e0:7b:73:43:c7:91:
                    f4:84:9a:31:96:fb:06:1c:ca:e2:3b:34:49:54:55:
                    33:cf:23:b6:58:3c:d3:54:af:99:e2:ae:89:91:33:
                    7d:4e:50:08:aa:0e:e1:5b:79:17:2e:2f:11:31:28:
                    53:7d:7b:88:f9:2c:4d:c3:ce:ec:db:63:37:f1:5d:
                    75:8b:10:8a:78:cb:29:15:fc:66:6c:16:3e:6b:06:
                    3d:0a:b5:c0:07:42:89:37:cd:bc:76:da:14:dd:3d:
                    d2:2c:5f:7b:fc:7c:b8:d0:71:1d:8a:c6:82:ad:2e:
                    7d:7b:60:04:bc:9a:a1:47:3e:06:d3:0f:d1:16:4d:
                    b5:39:28:8c:c2:f8:e8:eb:6e:be:42:c8:a0:4d:42:
                    c4:df:e5:6e:a6:54:3b:09:7a:fb:64:a9:e6:08:ff:
                    9d:ce:a0:4a:8b:98:d6:b4:ef:62:ee:25:ff:34:d2:
                    42:eb:5c:08:fd:2d:14:42:c2:56:f5:4e:61:a6:82:
                    85:40:e6:f0:95:4f:a8:f8:9f:d2:29:c8:9b:59:0e:
                    b6:03:3f:b3:68:93:1c:22:3f:55:ba:d8:08:a6:7e:
                    46:7a:5d:7b:fc:60:08:f7:2e:5e:3f:c0:e3:58:85:
                    3d:a8:ea:c7:f5:be:90:c3:18:2f:b8:bb:7f:db:42:
                    e2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:2C:BF:CB:5E:94:C9:47:08:06:66:8F:1A:CF:BF:6D:61:00:DF:EE
            X509v3 Authority Key Identifier:
                keyid:96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:43:22:af:38:e2:d0:30:cb:d8:67:da:67:5b:ed:42:de:8c:
         d2:f6:c4:6d:1b:17:8b:8c:1a:ec:db:c5:22:49:3f:9e:fe:0e:
         1a:73:5e:30:f4:c0:d7:f8:cb:8c:ee:59:41:3f:9d:98:ea:0f:
         a4:f3:c1:07:68:b4:d5:b5:4e:9f:c6:46:df:6a:aa:08:36:e4:
         6e:0f:4a:82:22:a3:70:6a:89:2a:99:b8:98:23:cc:25:48:e0:
         46:64:60:b7:9c:80:49:21:d7:43:4a:91:6f:51:f8:85:fa:c6:
         b5:c5:ac:22:74:f6:b8:ee:10:f6:7b:dc:f8:bf:31:a6:d0:80:
         ad:31:9e:7d:64:70:d3:81:58:3b:f0:da:4b:b1:23:99:f7:da:
         13:49:b0:73:fd:74:73:ec:81:ee:9f:5a:20:e6:69:d1:53:d3:
         20:59:3a:ea:4b:3c:d5:7e:b2:d9:3d:ae:8d:c7:58:33:86:1d:
         15:72:eb:ee:49:c7:83:fc:a9:d1:d2:6d:1d:0e:13:68:4b:ce:
         44:b5:b0:9d:43:90:68:18:8b:00:56:d2:97:98:55:d1:fe:02:
         e6:6c:da:83:17:a8:41:a2:64:74:f5:ea:93:c6:77:c0:5f:b8:
         80:2e:44:d9:f8:44:af:d7:ed:50:28:15:41:e9:37:f7:3c:5b:
         eb:c2:4a:46
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVGREUxMTAvBgNVBAUTKDk2NjlDRDVCM0Q4NzM1ODE1QTY1RDY1OUYyNzQxQjQz
RTY0NzMyQjIwHhcNMjYxMDMxMTQyNDUzWhcNMjYxMTA3MTQyNDUzWjAYMRYwFAYD
VQQDEw02YWU1ZmEzNS1hNWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0FPH187c7Rjge3NDx5H0hJoxlvsGHMriOzRJVFUzzyO2WDzTVK+Z4q6JkTN9
TlAIqg7hW3kXLi8RMShTfXuI+SxNw87s22M38V11ixCKeMspFfxmbBY+awY9CrXA
B0KJN828dtoU3T3SLF97/Hy40HEdisaCrS59e2AEvJqhRz4G0w/RFk21OSiMwvjo
626+QsigTULE3+VuplQ7CXr7ZKnmCP+dzqBKi5jWtO9i7iX/NNJC61wI/S0UQsJW
9U5hpoKFQObwlU+o+J/SKcibWQ62Az+zaJMcIj9VutgIpn5Gel17/GAI9y5eP8Dj
WIU9qOrH9b6QwxgvuLt/20LiqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHcsv8te
lMlHCAZmjxrPv21hAN/uMB8GA1UdIwQYMBaAFJZpzVs9hzWBWmXWWfJ0G0PmRzKy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUZERS9DQzQ1RUNBODFE
ODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5ZRmFaZFpaOG5RYlEtWkhN
ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xtbk5XejJITllGYVpkWlo4blFiUS1aSE1ySS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RUZERS9DQzQ1RUNBODFEODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5Z
RmFaZFpaOG5RYlEtWkhNckkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALkMirzji0DDL2GfaZ1vtQt6M0vbEbRsXi4wa7NvFIkk/nv4OGnNeMPTA1/jL
jO5ZQT+dmOoPpPPBB2i01bVOn8ZG32qqCDbkbg9KgiKjcGqJKpm4mCPMJUjgRmRg
t5yASSHXQ0qRb1H4hfrGtcWsInT2uO4Q9nvc+L8xptCArTGefWRw04FYO/DaS7Ej
mffaE0mwc/10c+yB7p9aIOZp0VPTIFk66ks81X6y2T2ujcdYM4YdFXLr7knHg/yp
0dJtHQ4TaEvORLWwnUOQaBiLAFbSl5hV0f4C5mzagxeoQaJkdPXqk8Z3wF+4gC5E
2fhEr9ftUCgVQek39zxb68JKRg==
-----END CERTIFICATE-----
Generated at Mon Nov 2 07:34:03 2026 by rpki-client