Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft
File:                     lAiiAfAOWP6SWY7gOTkHi673d5U.mft (raw, json)
Hash identifier:          2tnTkXA33IhcMOHUPoJZji2A3vd/tXtwxNCX5ZDwT4Y=
Subject key identifier:   1B:5A:12:2D:F8:55:27:BD:45:EE:C5:C9:F7:56:DB:A0:5C:81:A1:9F
Authority key identifier: 94:08:A2:01:F0:0E:58:FE:92:59:8E:E0:39:39:07:8B:AE:F7:77:95
Certificate issuer:       /CN=A91A6F68/serialNumber=9408A201F00E58FE92598EE03939078BAEF77795
Certificate serial:       0144
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lAiiAfAOWP6SWY7gOTkHi673d5U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft
Manifest number:          0144
Signing time:             Wed 21 Oct 2026 05:56:28 +0000
Manifest this update:     Wed 21 Oct 2026 05:56:28 +0000
Manifest next update:     Wed 28 Oct 2026 05:56:28 +0000
Files and hashes:         1: lAiiAfAOWP6SWY7gOTkHi673d5U.crl (hash: jyeD5RFJjfaiYiLcvf16G+1909hy8Her5rs9gk5bfXw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.crl
                          rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lAiiAfAOWP6SWY7gOTkHi673d5U.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Oct 2026 02:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 324 (0x144)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6F68, serialNumber=9408A201F00E58FE92598EE03939078BAEF77795
        Validity
            Not Before: Oct 21 05:56:28 2026 GMT
            Not After : Oct 28 05:56:28 2026 GMT
        Subject: CN=6ad8540c-5269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d4:62:41:0d:6d:0a:08:c3:0a:3d:9b:5f:c2:
                    4b:ae:73:8b:c9:d0:6f:ac:77:a3:fb:78:cd:87:6d:
                    ca:90:a9:02:52:aa:21:d9:ba:56:4b:0d:f1:85:64:
                    d4:3d:7a:9b:db:63:1e:5c:37:cf:96:af:6b:7f:99:
                    42:d4:30:5b:8d:db:3b:e0:00:8b:72:6d:78:62:0c:
                    95:39:90:07:1b:68:8a:33:31:c9:e3:25:7a:ed:ec:
                    ba:96:1c:e7:b8:fe:98:35:1b:5b:65:1a:d8:bd:95:
                    f8:0b:fb:1a:d5:13:f1:b3:82:0d:f6:14:f2:ac:d5:
                    e4:7d:7c:4e:e7:76:05:08:c1:27:ad:51:60:2d:4f:
                    09:a8:e2:87:9a:2c:27:7c:1d:25:2b:6b:51:76:d7:
                    29:ea:5d:d7:96:4d:12:ea:3e:cf:55:c1:79:ac:54:
                    79:7e:1d:f8:97:61:ba:fe:a0:3c:29:e3:24:2a:99:
                    8b:b0:c6:7d:2c:f5:41:1d:27:b5:89:84:7a:04:1a:
                    db:0e:d3:3e:f2:b9:de:47:67:45:92:d6:e8:85:f4:
                    5d:42:c1:41:dd:d6:f8:05:b6:7c:20:56:62:48:72:
                    cf:16:30:92:a4:1b:cc:41:e4:0c:3f:9f:c2:67:98:
                    e9:39:dd:e5:e5:30:6b:a5:fa:f9:de:dc:2d:48:68:
                    f3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:5A:12:2D:F8:55:27:BD:45:EE:C5:C9:F7:56:DB:A0:5C:81:A1:9F
            X509v3 Authority Key Identifier:
                keyid:94:08:A2:01:F0:0E:58:FE:92:59:8E:E0:39:39:07:8B:AE:F7:77:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lAiiAfAOWP6SWY7gOTkHi673d5U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:9c:73:19:cc:3c:4a:ce:3e:1b:5f:cc:c0:4b:cc:c6:63:89:
         72:12:8d:4c:11:9a:4e:8e:cd:e8:24:b9:9c:15:9a:35:ba:3b:
         e7:01:84:9b:c1:88:34:ce:58:51:0e:39:cb:67:0e:35:b4:a8:
         2b:f0:5b:ef:d9:65:0e:83:4d:65:27:c3:a3:2a:0a:17:5b:8f:
         b5:61:e8:29:5e:75:f9:02:e9:02:44:1b:9a:b2:5d:83:4d:90:
         cc:fb:10:92:27:19:11:46:2b:c5:fd:e7:94:00:2e:bf:ee:e6:
         91:8c:ab:57:bb:e5:a1:a5:69:03:2f:e3:bf:57:4e:6a:f8:7c:
         83:60:ac:23:0d:65:88:3f:20:e9:1c:12:24:e1:b6:24:3f:b8:
         77:19:1e:05:78:35:d0:ab:98:83:fd:c2:12:f5:60:90:37:ca:
         6b:ca:16:8e:00:61:b0:fd:cb:67:59:d9:e5:ef:ba:91:08:1e:
         1a:69:6f:74:3f:f3:a2:21:c4:eb:7f:e7:89:0d:01:b7:53:24:
         af:7e:5b:32:05:71:1f:7f:b9:8e:9b:f3:fc:53:b1:c2:33:fc:
         cb:73:b9:51:6a:c8:41:28:72:71:e3:03:80:5b:4f:6e:3c:28:
         d7:3c:c7:59:e9:3b:23:d5:4a:f1:dc:9a:33:0b:26:94:09:2e:
         7c:d1:0b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 15:53:03 2026 by rpki-client