Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft
File:                     LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft (raw, json)
Hash identifier:          iRz2njx05QruVhTXCDIfTEMFn+0fAwk7gJKLJQck8Uc=
Subject key identifier:   DF:80:0F:62:1E:FC:40:45:B4:31:82:9E:36:51:66:27:2B:88:30:DF
Authority key identifier: 2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C
Certificate issuer:       /CN=A91203EB/serialNumber=2F265B0C802473094926890A85124E21B109DA3C
Certificate serial:       0732
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft
Manifest number:          071F
Signing time:             Thu 20 Aug 2026 21:57:56 +0000
Manifest this update:     Thu 20 Aug 2026 21:57:56 +0000
Manifest next update:     Thu 27 Aug 2026 21:57:56 +0000
Files and hashes:         1: LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl (hash: z9TyF9qkhLeXyUn5RiRYSkEaHV4JzXUmzSQ9zHLRHzo=)
                          2: 579FE34A0BF211EF8B0F9C81C4F9AE02.roa (hash: 2QQLdWByWmzyDLm9K7Etw2tEiz/l3b7pU56fbAv1SHo=)
                          3: 8CBE17540BCF11EF80BE8E0CC4F9AE02.roa (hash: K5LcOR8cOoj1G9hwCRlc2w0NxNadpML+5njvncofuUc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl
                          rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1842 (0x732)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91203EB, serialNumber=2F265B0C802473094926890A85124E21B109DA3C
        Validity
            Not Before: Aug 20 21:57:56 2026 GMT
            Not After : Aug 27 21:57:56 2026 GMT
        Subject: CN=6a877864-e3b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:34:9b:5e:ac:e2:01:d2:0e:df:77:b8:1e:33:
                    82:a5:47:07:d5:ab:80:8f:d6:77:b1:74:8e:cd:b2:
                    1e:8a:72:11:41:91:a2:54:64:ac:63:63:77:46:96:
                    11:7f:b7:ea:49:1f:cc:1f:20:9c:c3:f2:a6:e9:b1:
                    46:fc:4c:72:a6:84:cf:cd:74:41:a3:c6:1c:5e:fa:
                    37:d9:cf:fa:52:95:5a:6a:9f:c3:08:e6:6b:d4:19:
                    35:cd:0f:9c:f7:45:9d:4e:07:40:52:c3:0c:53:48:
                    e6:70:62:8f:25:2d:9e:86:b1:e3:79:91:b3:f6:80:
                    bf:3e:79:52:ad:cd:1d:d2:fb:45:f4:0a:53:ff:d0:
                    f4:79:b3:49:ff:54:96:57:d9:0d:bb:62:0c:3a:dc:
                    c7:b1:57:50:83:80:0e:95:86:d0:c1:5a:42:6a:55:
                    ba:b6:e3:2b:3c:77:2f:4c:12:e1:54:ea:37:30:a2:
                    08:1e:bb:15:02:af:fa:81:44:c9:c0:8b:6d:e2:8a:
                    eb:43:91:f6:dc:43:6a:76:c8:96:25:f5:e2:74:4d:
                    1e:a5:a2:c0:80:f6:24:cb:b3:a9:85:21:04:ef:46:
                    49:88:f6:ee:d7:f9:7c:f9:55:c5:d1:43:2a:32:b5:
                    fb:37:55:78:69:32:d2:dc:e6:f5:67:b0:37:1d:45:
                    e7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:80:0F:62:1E:FC:40:45:B4:31:82:9E:36:51:66:27:2B:88:30:DF
            X509v3 Authority Key Identifier:
                keyid:2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:44:09:bf:e3:dc:16:30:2d:e6:97:6f:55:48:03:b6:f6:e3:
         25:48:38:dc:08:19:69:5f:41:e0:b5:79:5f:07:5a:9a:70:84:
         de:aa:d1:0a:f9:a8:d2:af:75:4e:db:0d:82:9c:cc:5c:03:6e:
         66:8c:e8:de:7b:63:45:49:55:61:94:0d:28:e7:94:30:7d:2d:
         1d:37:4b:e2:5c:24:19:62:01:25:dd:68:3b:a9:ee:ee:52:0f:
         a3:80:f2:49:21:91:09:09:7b:0d:ba:d0:fe:82:3c:8b:7b:fc:
         6d:e1:80:c5:25:1e:12:b4:bd:8e:53:68:ae:ac:d4:82:a2:f8:
         0b:67:36:60:41:82:0f:0f:cc:4c:e2:ac:7b:f9:e5:1f:e9:e0:
         9c:c3:fa:85:d0:84:1f:7e:a0:f5:2f:3b:d7:f7:bd:c2:e2:41:
         67:59:1e:16:06:0e:2b:fd:3b:cc:37:6f:af:9f:82:2d:fa:90:
         d8:8c:64:b6:27:b4:e6:60:b5:13:0b:4a:74:a4:73:09:9d:ab:
         82:90:27:67:64:c2:2f:67:2f:97:10:04:6a:fd:fa:cc:28:4f:
         d8:4d:6c:11:44:72:9d:2d:27:94:7c:b5:f2:69:51:b5:5f:56:
         f0:da:14:59:17:5f:5c:a8:56:84:4a:e8:4c:29:e2:1e:93:77:
         fd:71:45:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 20:21:11 2026 by rpki-client