Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F85F/88F02B94491C11F1B9ED37A29D833773/LyzSxxoRGjdJaH9O5xIgN4pA8yU.mft
File:                     LyzSxxoRGjdJaH9O5xIgN4pA8yU.mft (raw, json)
Hash identifier:          0fJ5J2Fj9y3ZPyGHZ4fJkSt0AMzkmRkDTkw/zg5k/4Y=
Subject key identifier:   59:5D:EF:F4:96:18:6D:79:E3:F2:05:06:4F:A6:11:15:D9:3D:3A:BE
Authority key identifier: 2F:2C:D2:C7:1A:11:1A:37:49:68:7F:4E:E7:12:20:37:8A:40:F3:25
Certificate issuer:       /CN=A911F85F/serialNumber=2F2CD2C71A111A3749687F4EE71220378A40F325
Certificate serial:       54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyzSxxoRGjdJaH9O5xIgN4pA8yU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F85F/88F02B94491C11F1B9ED37A29D833773/LyzSxxoRGjdJaH9O5xIgN4pA8yU.mft
Manifest number:          52
Signing time:             Fri 09 Oct 2026 09:04:35 +0000
Manifest this update:     Fri 09 Oct 2026 09:04:35 +0000
Manifest next update:     Fri 16 Oct 2026 09:04:35 +0000
Files and hashes:         1: LyzSxxoRGjdJaH9O5xIgN4pA8yU.crl (hash: HhUIy1dwtdacoMDKyoSKc68n8xwSpIWFwizxrAFEZtI=)
                          2: C136E3D4491D11F1954C6C159E833773.roa (hash: qVFvOq9QjJ9uga7y4894NRrqhJ3NtM90nJ3zfl61s5w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F85F/88F02B94491C11F1B9ED37A29D833773/LyzSxxoRGjdJaH9O5xIgN4pA8yU.crl
                          rsync://rpki.apnic.net/member_repository/A911F85F/88F02B94491C11F1B9ED37A29D833773/LyzSxxoRGjdJaH9O5xIgN4pA8yU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyzSxxoRGjdJaH9O5xIgN4pA8yU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 09:04:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F85F, serialNumber=2F2CD2C71A111A3749687F4EE71220378A40F325
        Validity
            Not Before: Oct  9 09:04:35 2026 GMT
            Not After : Oct 16 09:04:35 2026 GMT
        Subject: CN=6ac8ae23-05f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:48:8f:6c:40:e9:46:1b:3f:46:79:99:0c:94:
                    c7:2f:d2:a7:80:d1:c6:71:e2:43:5d:d3:fd:bd:19:
                    0b:f3:3d:56:04:22:2c:a8:7c:a0:d5:44:a0:fd:25:
                    37:70:b2:d3:02:90:1b:69:1c:2d:0c:a1:09:59:8b:
                    ec:af:0e:10:34:0b:4b:d1:b0:d6:35:7b:7d:6b:85:
                    a4:ee:6a:9b:ef:e8:35:09:af:93:4d:3e:0b:aa:b3:
                    61:59:ed:15:90:74:d0:2e:29:38:12:59:77:29:6d:
                    4a:c7:33:80:30:d6:c4:42:e6:0c:18:9a:eb:3d:d1:
                    c3:f4:97:27:52:37:7f:3f:be:22:39:7a:ae:4f:79:
                    ab:a3:49:ab:ab:f8:f0:c4:e2:e3:b1:31:1f:df:bd:
                    36:9d:c1:6c:70:8d:d4:8e:b7:b5:2e:97:16:14:08:
                    3e:95:c9:86:6e:05:0c:72:b1:84:d3:5d:46:61:99:
                    96:dd:36:bc:54:41:e8:08:16:76:83:ea:a6:d8:97:
                    0d:d3:c4:b1:d1:00:b0:8b:45:66:5b:61:92:e8:61:
                    74:13:e8:21:54:6a:9a:f6:ba:5e:38:45:f3:fb:4f:
                    4b:f0:16:af:71:55:21:c5:1c:77:83:92:6c:01:ab:
                    96:44:fc:3b:2c:34:84:ee:3d:76:82:32:b7:13:99:
                    aa:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:5D:EF:F4:96:18:6D:79:E3:F2:05:06:4F:A6:11:15:D9:3D:3A:BE
            X509v3 Authority Key Identifier:
                keyid:2F:2C:D2:C7:1A:11:1A:37:49:68:7F:4E:E7:12:20:37:8A:40:F3:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F85F/88F02B94491C11F1B9ED37A29D833773/LyzSxxoRGjdJaH9O5xIgN4pA8yU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyzSxxoRGjdJaH9O5xIgN4pA8yU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F85F/88F02B94491C11F1B9ED37A29D833773/LyzSxxoRGjdJaH9O5xIgN4pA8yU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:b8:60:73:84:80:9d:31:c0:f2:94:48:d4:a1:45:1f:c6:70:
         cf:b9:d7:27:d7:37:7e:c3:02:26:68:73:7e:30:f0:15:ca:26:
         21:39:b6:d0:ec:5b:07:f7:ba:f2:a6:04:93:e9:84:72:5b:59:
         c3:0e:c7:0f:0f:cc:a1:af:aa:01:c6:06:93:2a:94:68:25:50:
         33:1e:82:9a:92:8f:03:a0:f6:15:08:2e:77:4b:f4:3a:e3:8e:
         b6:2a:2a:70:3f:3c:e2:b4:2d:25:6a:e0:a1:f4:2d:03:70:8d:
         d4:46:e4:dd:b9:5b:bd:5f:57:76:5d:94:73:5c:9e:e6:6b:33:
         a2:60:5c:b3:46:45:92:b5:aa:bd:d1:fd:9d:c3:7e:c8:98:58:
         d3:80:33:73:81:d6:9e:c2:eb:63:75:a3:df:ce:36:0d:2c:5b:
         03:63:cc:a2:cc:f8:3a:a0:da:82:10:d6:20:34:2c:47:bc:f8:
         0d:fd:f2:30:37:35:a0:77:a1:d7:e7:8e:11:be:30:46:32:cd:
         e1:d2:aa:ce:b2:7c:0b:ae:ad:d2:2b:6f:4d:80:9b:e3:16:e9:
         57:06:33:86:bc:d0:5e:27:63:53:a8:1b:a0:20:fb:7e:07:63:
         14:80:0d:1d:0e:31:b1:cf:dc:d3:e2:61:17:de:de:7f:2b:d1:
         8f:81:3c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 22:59:02 2026 by rpki-client