Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft
File:                     lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft (raw, json)
Hash identifier:          4iZ2qggGGIYF8s2xktA10oUo1gC1a/A0jQXi7d12CyE=
Subject key identifier:   C3:C4:85:6B:36:74:C6:99:1F:65:BC:F8:09:12:A6:E0:A6:99:81:AC
Authority key identifier: 94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92
Certificate issuer:       /CN=A916DC92/serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192
Certificate serial:       0D4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft
Manifest number:          0D34
Signing time:             Sun 04 Oct 2026 18:19:02 +0000
Manifest this update:     Sun 04 Oct 2026 18:19:02 +0000
Manifest next update:     Sun 11 Oct 2026 18:19:02 +0000
Files and hashes:         1: lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl (hash: ssp+QVPKhPQOHCJWpUd/f5iq2LSoBTJPQ4h/L0de3is=)
                          2: CCE5BAAA09D911EA80E56E21C4F9AE02.roa (hash: PU5K85ByPeJlmo+7kA0ZUbRl2pb30nPNJ3u58gZkpSk=)
                          3: CE15A7B409D911EA80E56E21C4F9AE02.roa (hash: /MtJQ2aFPi8HYTchwzSmXpRAnCoGqWuQ+vHypfNM8zk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl
                          rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 18:19:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3406 (0xd4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DC92, serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192
        Validity
            Not Before: Oct  4 18:19:02 2026 GMT
            Not After : Oct 11 18:19:02 2026 GMT
        Subject: CN=6ac29896-4c2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d4:af:be:5f:4c:e1:1c:d5:06:fe:61:23:6c:
                    d0:bc:f8:08:aa:02:f5:a7:0a:0f:7b:38:0a:93:1f:
                    dc:65:6b:0a:46:b3:e8:93:3c:f2:a9:9b:d3:32:72:
                    22:fe:85:e0:62:ca:2f:89:2b:fb:31:cc:c7:4b:a0:
                    be:e3:11:03:2c:26:d9:9d:59:f6:83:f6:5e:16:ae:
                    55:fc:52:1a:3e:9e:a9:7d:0e:df:4f:f3:4a:1f:38:
                    f3:f9:ad:fa:ab:5d:a1:26:e1:cb:25:43:bb:cb:e8:
                    0f:ad:46:08:13:ae:86:58:e7:98:80:86:99:9a:1b:
                    e6:85:db:33:c2:92:fe:2c:59:a4:eb:a7:a7:fb:1e:
                    82:38:14:ce:d7:73:48:4f:b9:c3:97:d8:05:2e:55:
                    fa:50:a8:0e:72:76:d9:7c:84:84:2e:59:32:11:09:
                    c1:5a:90:ac:83:8e:d7:33:84:a1:56:b0:74:4a:47:
                    20:5b:68:94:b1:6d:8f:d3:80:72:aa:79:ac:06:78:
                    b0:81:14:b4:e4:8d:52:b5:d2:d8:9f:c0:01:f0:0e:
                    31:9e:a6:3f:bd:6d:ab:aa:fc:e0:fa:9f:e1:4f:54:
                    25:37:20:fa:b7:50:cd:68:3c:5a:a2:f5:ca:3d:f5:
                    aa:e1:ae:86:5f:d5:25:94:cb:c8:98:ce:4d:e5:4a:
                    f2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C4:85:6B:36:74:C6:99:1F:65:BC:F8:09:12:A6:E0:A6:99:81:AC
            X509v3 Authority Key Identifier:
                keyid:94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:15:54:7a:3f:3a:55:8c:c2:60:db:90:ef:9b:f9:b7:20:78:
         30:9c:33:10:bf:33:04:d4:9c:4e:7c:0b:d2:91:16:42:59:a8:
         37:9f:ad:0d:c1:97:8e:93:d8:a8:27:e5:e5:69:e7:56:45:f6:
         35:23:87:8e:f4:61:90:e1:9f:55:64:bf:87:43:e9:20:4b:4d:
         78:46:38:4a:e9:d9:63:c9:84:10:f5:1a:4b:47:8e:78:68:71:
         cc:c6:d3:f0:52:aa:d1:39:d5:ed:e4:9c:df:8a:2d:5e:c3:ee:
         88:6f:39:18:64:74:c2:de:44:21:28:1a:aa:55:57:8b:06:d5:
         a3:33:1f:11:32:7a:e0:3f:99:23:af:6b:d8:3a:ec:6a:7d:c3:
         b5:6a:96:db:c9:75:5d:2a:89:4b:7f:7f:17:cf:01:c3:4e:e2:
         54:5a:c2:a9:c8:9f:36:37:08:fa:a3:ea:36:84:68:3a:dd:e2:
         d8:8c:f3:5c:bc:8c:6a:03:08:60:a8:ce:17:90:b4:0b:97:42:
         56:ae:97:62:53:aa:0b:90:da:02:1e:8f:8f:30:d5:9e:a0:c4:
         e3:7a:53:77:9a:e9:e7:60:40:2e:9c:b2:2c:35:75:c5:4d:59:
         70:6e:61:0b:93:fe:61:d8:69:c8:1f:73:db:b4:a7:f5:fa:63:
         30:ca:1a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:26:28 2026 by rpki-client