Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft
File:                     LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft (raw, json)
Hash identifier:          1v9fyfa8yK6bGjBcT+y7RBmxb23kvsu9dp4hVHavs8s=
Subject key identifier:   7D:A1:43:41:9E:00:DF:2F:0F:9C:ED:08:AA:DF:1C:84:B2:00:4A:4C
Authority key identifier: 2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C
Certificate issuer:       /CN=A91203EB/serialNumber=2F265B0C802473094926890A85124E21B109DA3C
Certificate serial:       0754
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft
Manifest number:          0741
Signing time:             Mon 26 Oct 2026 21:52:53 +0000
Manifest this update:     Mon 26 Oct 2026 21:52:52 +0000
Manifest next update:     Mon 02 Nov 2026 21:52:52 +0000
Files and hashes:         1: LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl (hash: rkzw35ev1x9pdxaSJ/njVRCjXO34b4YbD34Z+GxZEJo=)
                          2: 579FE34A0BF211EF8B0F9C81C4F9AE02.roa (hash: 2QQLdWByWmzyDLm9K7Etw2tEiz/l3b7pU56fbAv1SHo=)
                          3: 8CBE17540BCF11EF80BE8E0CC4F9AE02.roa (hash: K5LcOR8cOoj1G9hwCRlc2w0NxNadpML+5njvncofuUc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl
                          rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 21:52:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1876 (0x754)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91203EB, serialNumber=2F265B0C802473094926890A85124E21B109DA3C
        Validity
            Not Before: Oct 26 21:52:52 2026 GMT
            Not After : Nov  2 21:52:52 2026 GMT
        Subject: CN=6adfcbb4-55d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e2:60:dd:91:ad:40:0d:34:8f:28:aa:b6:bc:
                    bf:8b:14:08:e4:e5:19:13:8f:01:d7:ee:f0:3d:41:
                    f8:7c:9f:ce:54:e3:96:55:06:62:ac:cd:9d:aa:54:
                    e8:2c:6b:5e:ac:29:99:01:96:d2:85:60:57:38:69:
                    42:65:bc:36:98:3c:c9:3f:a4:9f:db:32:36:cd:7d:
                    c0:8b:39:4e:3f:b7:13:aa:58:7a:08:d8:ed:6e:01:
                    47:bd:1a:fa:b3:41:a6:bf:fa:e8:a7:06:52:64:b0:
                    ea:52:2b:e6:9c:a2:32:d7:35:6b:94:32:25:52:c1:
                    e6:d0:9c:70:dd:9e:e4:46:05:76:03:b9:e5:1d:e9:
                    63:13:d7:51:80:83:20:be:0c:33:35:ce:30:71:ab:
                    95:1c:25:7e:f3:55:c8:39:2a:58:f3:43:eb:a9:a3:
                    b4:2f:c8:e1:c9:18:c1:94:81:fb:b2:fa:54:4d:45:
                    e2:39:67:49:1c:33:ff:78:e2:ec:7d:a7:ed:d5:b7:
                    a3:97:e7:6b:05:63:64:dd:e6:a3:95:3e:4d:26:7c:
                    f6:25:80:91:b4:ce:9e:e7:05:f9:64:0e:35:28:70:
                    2d:24:1b:d2:28:5f:98:be:ad:87:2c:c2:7e:81:27:
                    e4:5c:f0:87:4f:94:32:16:90:9b:24:e9:d3:ce:f0:
                    6b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A1:43:41:9E:00:DF:2F:0F:9C:ED:08:AA:DF:1C:84:B2:00:4A:4C
            X509v3 Authority Key Identifier:
                keyid:2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:07:0d:e4:9c:d7:70:89:12:c2:ad:ba:34:2d:3c:90:1e:52:
         1c:53:85:68:68:85:50:92:f0:08:c1:15:c1:b7:2e:5b:cd:21:
         8f:35:36:6b:81:c1:2b:e5:c6:7d:8d:02:91:4b:34:04:13:47:
         ce:90:01:31:2c:e9:98:82:b6:e3:1b:0b:cf:62:18:0b:3a:ba:
         bb:75:82:00:3c:f7:9c:e6:06:aa:3c:86:23:6c:c3:f0:8d:85:
         f7:79:33:73:e5:f6:3d:0a:1c:16:7c:24:64:a0:6e:31:89:60:
         e0:34:8b:11:93:29:94:9f:cd:2d:30:e4:73:98:1f:50:6a:b0:
         34:3b:5e:6e:6a:e7:7b:64:35:1d:8c:50:d3:8a:5a:92:5e:34:
         d5:79:fc:d8:1b:f1:08:63:5d:81:36:fd:ab:b9:66:6c:4e:7e:
         6f:64:b5:8c:d3:18:b7:c3:a9:86:8d:24:20:5f:54:84:ed:60:
         e2:f1:2d:89:ec:15:f7:b3:88:1c:22:40:83:6a:64:31:63:94:
         c0:76:13:be:e8:b8:15:f1:68:fc:f7:76:a7:02:6b:40:bc:9b:
         5b:5a:b7:5e:a0:8c:89:39:53:ba:10:d9:d5:8a:20:26:49:f0:
         6f:f6:78:1b:09:54:0b:c8:af:78:cd:56:93:9d:d9:df:2a:41:
         8f:8f:48:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:05:46 2026 by rpki-client