Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.mft
File:                     LNlBunzrUf5uFl4_yYBm1amZ5P4.mft (raw, json)
Hash identifier:          7xZ7DCsbhDdDqt9jLUt3bB8loXaMEJMfJJDzY6QowGk=
Subject key identifier:   F6:90:2D:65:E0:B9:92:DF:B1:38:69:9B:85:D1:2B:6F:AB:59:86:40
Authority key identifier: 2C:D9:41:BA:7C:EB:51:FE:6E:16:5E:3F:C9:80:66:D5:A9:99:E4:FE
Certificate issuer:       /CN=A912B635/serialNumber=2CD941BA7CEB51FE6E165E3FC98066D5A999E4FE
Certificate serial:       073E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LNlBunzrUf5uFl4_yYBm1amZ5P4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.mft
Manifest number:          0736
Signing time:             Mon 28 Sep 2026 22:06:05 +0000
Manifest this update:     Mon 28 Sep 2026 22:06:04 +0000
Manifest next update:     Mon 05 Oct 2026 22:06:04 +0000
Files and hashes:         1: LNlBunzrUf5uFl4_yYBm1amZ5P4.crl (hash: 0lJ6Zeeifq9ccIvN9C/H45gapYRN8ytteim3h9A55b8=)
                          2: D44C47FE91D311EBBE8C7D54C4F9AE02.roa (hash: hoTsa8dVgQ4vW+5S2YD2L/R9GnNm4cZof285Ws4nrg4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.crl
                          rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LNlBunzrUf5uFl4_yYBm1amZ5P4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 22:06:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1854 (0x73e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B635, serialNumber=2CD941BA7CEB51FE6E165E3FC98066D5A999E4FE
        Validity
            Not Before: Sep 28 22:06:04 2026 GMT
            Not After : Oct  5 22:06:04 2026 GMT
        Subject: CN=6abae4cd-b9c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9c:e7:fd:68:d9:0a:1b:9b:56:7a:ee:ff:e6:
                    35:4a:33:b2:d1:43:fd:06:b7:06:86:b2:68:60:e1:
                    51:d3:27:78:77:44:55:62:56:4e:21:00:12:8c:26:
                    34:16:b5:28:8d:df:c4:19:f5:c2:47:a4:99:c2:f4:
                    49:21:01:61:a3:33:51:32:93:15:92:bf:fe:3c:92:
                    29:5e:2f:26:c4:2b:9d:46:80:4e:8f:95:ce:94:ba:
                    e3:d9:d8:02:7e:f7:b0:09:12:59:74:bd:5f:49:b8:
                    36:b3:e0:e1:3e:2a:d6:de:4f:f8:40:33:b1:96:ce:
                    9f:4c:be:76:48:a0:47:aa:5c:a2:2e:a7:80:c2:08:
                    7f:0c:71:b6:0a:4e:1e:a7:74:95:d6:c4:60:54:c5:
                    71:01:58:04:df:0e:df:79:94:a8:c1:dc:3a:22:be:
                    a4:dd:6f:cf:88:1e:09:1f:d3:b3:a4:a7:8c:26:99:
                    ec:62:e5:91:1a:1c:dd:1a:8b:76:5e:07:ad:ec:df:
                    61:07:66:a5:7f:d5:1f:4e:c8:c3:cc:2d:d0:3e:5a:
                    44:3a:38:73:69:1a:30:11:32:c4:bc:88:d9:26:b4:
                    7c:7b:31:a4:01:70:56:2b:32:64:21:75:ae:a7:13:
                    ea:d3:60:7c:bc:62:ec:6d:12:79:90:63:65:23:f9:
                    50:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:90:2D:65:E0:B9:92:DF:B1:38:69:9B:85:D1:2B:6F:AB:59:86:40
            X509v3 Authority Key Identifier:
                keyid:2C:D9:41:BA:7C:EB:51:FE:6E:16:5E:3F:C9:80:66:D5:A9:99:E4:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LNlBunzrUf5uFl4_yYBm1amZ5P4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:85:27:b2:a7:d6:8f:d2:ef:96:8e:e0:ef:c8:d1:7d:a0:e6:
         9c:48:13:43:90:e1:20:0a:1d:44:8d:cf:26:d5:c7:f4:c8:08:
         81:12:04:60:e5:d7:b3:fd:58:00:87:e2:a6:03:27:ad:04:84:
         17:0c:06:00:75:e8:1d:6a:26:7a:fa:2f:ec:9f:49:b1:63:ff:
         b2:e8:08:0e:42:52:92:d9:0b:d9:c6:b2:1f:01:c9:40:15:6a:
         23:85:25:b3:4c:dc:cf:f9:6e:3b:7b:a4:d8:44:56:ab:69:6c:
         4d:b3:da:66:8c:16:e8:f0:64:a1:a0:9a:73:ba:08:be:9a:f1:
         1b:0e:5c:41:8c:6a:d1:87:6b:93:7f:e3:52:8e:14:4f:ce:bf:
         63:5c:53:c6:e0:36:54:54:d4:49:af:bd:9a:ec:c2:f2:06:e9:
         e1:7d:55:0e:5e:3e:be:0f:d6:9b:c4:b9:43:e0:a8:39:da:bc:
         3b:f2:01:ed:dd:32:29:52:a2:60:36:50:b4:37:50:72:5d:12:
         fd:fb:56:e2:99:13:67:69:e3:83:4e:2d:9a:4c:22:50:e9:ed:
         5e:3b:a1:3c:97:b4:3e:c1:80:0d:03:4d:fb:c6:eb:ca:cb:d0:
         9e:f9:70:3c:e4:43:c4:1a:e1:21:8a:66:79:01:42:68:8f:ad:
         f0:0f:23:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:55:00 2026 by rpki-client