Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916AF56/D38CC962BAD911F1B87B60C15211F970/lGEnBAQ_3E-h6xPOayYRy9evuus.mft
File:                     lGEnBAQ_3E-h6xPOayYRy9evuus.mft (raw, json)
Hash identifier:          s/CDF5UG+xjqMxxNzCg8/lcI8mLKEOUeMiTjj2uHLS4=
Subject key identifier:   02:90:0C:55:95:9D:D6:15:7B:CF:E4:2E:3F:08:3A:25:27:5B:50:01
Authority key identifier: 94:61:27:04:04:3F:DC:4F:A1:EB:13:CE:6B:26:11:CB:D7:AF:BA:EB
Certificate issuer:       /CN=A916AF56/serialNumber=94612704043FDC4FA1EB13CE6B2611CBD7AFBAEB
Certificate serial:       0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGEnBAQ_3E-h6xPOayYRy9evuus.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916AF56/D38CC962BAD911F1B87B60C15211F970/lGEnBAQ_3E-h6xPOayYRy9evuus.mft
Manifest number:          07
Signing time:             Wed 07 Oct 2026 09:52:54 +0000
Manifest this update:     Wed 07 Oct 2026 09:52:54 +0000
Manifest next update:     Wed 14 Oct 2026 09:52:54 +0000
Files and hashes:         1: lGEnBAQ_3E-h6xPOayYRy9evuus.crl (hash: DiiPwXiG0+SGERhhlOJPLneM6S6O+kQfNkE6daCz2Rc=)
                          2: E72F947EBADC11F1A099C55E5311F970.roa (hash: MZFUmgynH7Qi3nDed0uz5cTNYOmlDVcLBrr9eW+aYzU=)
                          3: E603E3C0BADC11F1A099C55E5311F970.roa (hash: L/UJFDIq3MDtS6IKzDD7V0x3ShEe7y/cMIYBi5x7YeI=)
                          4: E69E6F44BADC11F1A099C55E5311F970.roa (hash: kwd2PfRNL4XCO6LUE9BrTVlOJPXhNfbf3n5+xuQ0YrE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916AF56/D38CC962BAD911F1B87B60C15211F970/lGEnBAQ_3E-h6xPOayYRy9evuus.crl
                          rsync://rpki.apnic.net/member_repository/A916AF56/D38CC962BAD911F1B87B60C15211F970/lGEnBAQ_3E-h6xPOayYRy9evuus.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGEnBAQ_3E-h6xPOayYRy9evuus.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 09:52:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916AF56, serialNumber=94612704043FDC4FA1EB13CE6B2611CBD7AFBAEB
        Validity
            Not Before: Oct  7 09:52:54 2026 GMT
            Not After : Oct 14 09:52:54 2026 GMT
        Subject: CN=6ac61676-8858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2a:7d:0c:1b:03:65:67:ad:89:d0:ee:11:30:
                    9c:c4:ea:92:38:78:59:81:73:f8:51:c2:0b:60:04:
                    df:68:ea:c1:1b:6a:8c:06:c2:9e:e7:9c:62:9e:4d:
                    dc:b7:a5:fe:b0:0f:f3:3b:9e:87:b6:03:7b:6d:84:
                    af:2d:c5:b8:6e:af:b7:18:6b:54:47:97:c3:36:88:
                    d4:73:58:44:da:23:b4:6b:65:e9:e1:da:99:18:76:
                    f5:28:19:21:f7:06:71:ad:b9:87:b6:ee:79:50:a8:
                    f4:4f:bf:c1:db:1c:34:f5:fb:3d:55:a0:2b:ae:d4:
                    fa:e3:ac:f2:d7:e4:b5:e0:47:d5:18:68:65:4a:63:
                    59:5d:a8:3a:25:16:7c:2b:e0:95:63:6e:bb:94:56:
                    70:8c:90:77:ab:92:91:fc:97:ff:d9:8e:e2:b3:c1:
                    77:c2:39:8b:65:ac:ee:cd:26:f6:e7:c3:c8:35:15:
                    df:52:01:31:ba:e6:f9:be:50:05:bc:f7:e4:11:08:
                    ac:eb:e6:01:78:56:79:9c:35:fa:c7:61:0f:76:86:
                    cb:28:ff:c2:10:d6:fe:54:32:40:07:79:cd:54:56:
                    19:2f:c1:65:0b:02:fb:0f:c0:30:dc:c8:73:af:af:
                    82:9b:93:f0:55:70:16:fd:33:b7:bf:6d:8e:fc:d5:
                    ff:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:90:0C:55:95:9D:D6:15:7B:CF:E4:2E:3F:08:3A:25:27:5B:50:01
            X509v3 Authority Key Identifier:
                keyid:94:61:27:04:04:3F:DC:4F:A1:EB:13:CE:6B:26:11:CB:D7:AF:BA:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916AF56/D38CC962BAD911F1B87B60C15211F970/lGEnBAQ_3E-h6xPOayYRy9evuus.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGEnBAQ_3E-h6xPOayYRy9evuus.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AF56/D38CC962BAD911F1B87B60C15211F970/lGEnBAQ_3E-h6xPOayYRy9evuus.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:de:81:9c:64:31:28:ec:e8:ee:13:0d:42:ba:b7:5d:02:e5:
         70:23:3d:71:e6:6e:83:e7:09:cb:d7:a6:a9:0b:f4:36:6f:34:
         fd:09:a7:bb:83:82:e1:32:30:f0:ad:07:65:e8:a1:91:9a:31:
         8f:2d:36:c8:56:86:3a:a7:68:dc:d7:76:4a:3e:10:3f:33:d1:
         28:e5:bb:7e:b6:c7:00:2e:cc:9e:02:aa:92:4a:ea:fb:e5:33:
         81:c9:8b:01:5c:a8:93:ed:ff:90:6b:fc:10:8f:c5:e9:91:20:
         b8:9d:2c:54:02:b9:bd:92:33:2c:ac:47:bf:4c:4b:d9:a9:51:
         83:8b:cf:42:4c:b5:d2:75:27:7f:15:42:8c:a0:a8:71:43:74:
         c4:80:71:a5:22:1a:c0:2c:87:db:43:4d:d9:2a:50:a3:29:d7:
         a6:73:cd:c1:8b:92:f8:ae:8b:88:3d:e8:9c:96:14:b6:14:9b:
         e1:82:9e:33:09:26:cd:c5:04:1c:61:a0:4e:0c:f9:6d:db:62:
         7a:47:da:73:de:ff:d7:50:8b:30:a0:87:e1:15:b6:b5:b9:31:
         52:49:1d:7d:c7:9d:34:dc:b7:1a:f9:08:fe:f7:9c:15:0a:8c:
         af:ce:81:8f:9d:67:66:b2:d0:3c:c7:e2:9b:d5:74:c8:c4:1d:
         66:5b:de:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 23:12:40 2026 by rpki-client