Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.mft
File:                     lUb_2jDoTm_o815o7CVUGDnprQ8.mft (raw, json)
Hash identifier:          zonAevZa2bD/byK2T34y0B3YFbmtmr6UaqD2IbV6mns=
Subject key identifier:   01:D9:F9:5A:45:AD:E0:2D:51:B1:8B:DB:36:2C:14:A4:E1:BA:B0:BE
Authority key identifier: 95:46:FF:DA:30:E8:4E:6F:E8:F3:5E:68:EC:25:54:18:39:E9:AD:0F
Certificate issuer:       /CN=A91795C3/serialNumber=9546FFDA30E84E6FE8F35E68EC25541839E9AD0F
Certificate serial:       69
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUb_2jDoTm_o815o7CVUGDnprQ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.mft
Manifest number:          5E
Signing time:             Thu 03 Sep 2026 08:31:14 +0000
Manifest this update:     Thu 03 Sep 2026 08:31:14 +0000
Manifest next update:     Thu 10 Sep 2026 08:31:14 +0000
Files and hashes:         1: lUb_2jDoTm_o815o7CVUGDnprQ8.crl (hash: SY6513tTRCL7QUs3r90gIBGgrkMgpX4S1hwoH1YhNLA=)
                          2: 49589EFA2D9F11F1920FEBD19F833773.roa (hash: rB6mncEodXlTCyNlNE9b7egaGZ8DkJX6TOSzNBIB7dQ=)
                          3: F594A6063FA511F1B714D040BE833773.roa (hash: vpQZtX1yMfD38qzmAFhlXuV41BUehxqTr9ZL+NUr+4c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.crl
                          rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUb_2jDoTm_o815o7CVUGDnprQ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 08:31:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91795C3, serialNumber=9546FFDA30E84E6FE8F35E68EC25541839E9AD0F
        Validity
            Not Before: Sep  3 08:31:14 2026 GMT
            Not After : Sep 10 08:31:14 2026 GMT
        Subject: CN=6a993052-9392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6c:1e:9e:94:6c:4a:99:c8:f3:cc:ce:5b:7c:
                    9f:ae:a3:f2:c8:bd:27:f4:4c:03:95:6b:16:fc:11:
                    87:43:fa:a9:21:be:11:7f:79:91:60:5d:3c:ac:24:
                    9f:b1:83:d6:68:eb:90:93:88:a1:42:1d:97:da:d0:
                    58:9f:67:31:08:5e:cf:cf:12:c3:c7:46:4e:57:99:
                    72:17:80:98:4d:22:b2:b7:1a:db:44:fa:22:4d:92:
                    48:ad:5c:32:72:55:13:4f:d1:5c:09:fd:c9:60:fc:
                    f3:7a:32:1a:21:1f:fb:ca:34:4f:90:d8:58:09:fb:
                    22:08:bf:86:cb:92:39:ae:d0:7b:db:f5:32:25:ab:
                    7f:82:3b:45:0a:42:fd:19:f1:d5:4c:ac:25:7d:f1:
                    64:ee:7f:42:6a:fa:73:b8:92:b2:2a:5b:4a:6d:6e:
                    24:fc:fc:b2:29:b1:21:bc:ac:90:9f:cb:17:64:6c:
                    0b:a5:bb:3b:ec:da:a2:a6:cb:ce:f1:b2:54:36:87:
                    7d:66:4f:ba:51:d3:28:70:0b:7d:02:0d:00:4f:e3:
                    24:db:a4:1b:39:08:06:d5:83:96:70:8a:01:df:ed:
                    fe:46:cf:cb:1e:c6:a8:66:f3:ca:77:f7:78:5b:45:
                    17:e0:a7:e5:42:71:b7:a6:01:78:b1:30:ef:50:de:
                    ab:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D9:F9:5A:45:AD:E0:2D:51:B1:8B:DB:36:2C:14:A4:E1:BA:B0:BE
            X509v3 Authority Key Identifier:
                keyid:95:46:FF:DA:30:E8:4E:6F:E8:F3:5E:68:EC:25:54:18:39:E9:AD:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUb_2jDoTm_o815o7CVUGDnprQ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:51:87:22:3f:54:16:06:e4:7d:a3:a4:cf:e7:44:b7:0e:6c:
         ba:4d:4c:25:9e:06:d9:7c:33:8b:0c:e5:f6:0e:18:30:54:b0:
         28:91:eb:06:52:3f:7a:66:9f:7f:6e:f6:15:57:ac:2a:87:d7:
         fe:ec:78:98:5d:64:ed:19:18:c0:71:cf:86:b3:42:55:a1:f5:
         4d:73:1a:98:38:48:69:82:af:15:ba:cb:1c:2c:49:97:b7:ca:
         0c:6a:47:2d:7a:fb:e9:5f:87:c5:84:e4:93:2f:d6:9e:9a:7b:
         b5:fc:c5:d8:7b:26:72:54:c5:19:36:8c:74:0e:78:a1:ae:a6:
         49:d4:71:c0:7b:20:82:42:50:b3:1b:2b:33:91:ef:d5:43:eb:
         dc:fc:49:9a:b9:cd:f3:ad:fc:bf:0f:7b:e1:cc:e9:84:d0:3e:
         33:50:42:f1:ab:2f:c6:4d:e4:89:4e:68:f9:99:d4:f4:90:e1:
         ce:74:56:b9:09:76:96:88:73:d8:48:51:31:e1:ac:20:70:36:
         44:d6:d9:b9:d3:60:28:cf:47:a2:c2:a4:89:32:f1:d2:00:14:
         db:d8:52:7b:c4:84:be:63:15:e2:d5:a9:a2:e4:bf:57:8d:eb:
         32:40:85:f2:c1:72:92:de:31:ec:ff:72:e0:2b:bc:55:f7:78:
         27:b6:17:88
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
OTVDMzExMC8GA1UEBRMoOTU0NkZGREEzMEU4NEU2RkU4RjM1RTY4RUMyNTU0MTgz
OUU5QUQwRjAeFw0yNjA5MDMwODMxMTRaFw0yNjA5MTAwODMxMTRaMBgxFjAUBgNV
BAMTDTZhOTkzMDUyLTkzOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC6bB6elGxKmcjzzM5bfJ+uo/LIvSf0TAOVaxb8EYdD+qkhvhF/eZFgXTysJJ+x
g9Zo65CTiKFCHZfa0FifZzEIXs/PEsPHRk5XmXIXgJhNIrK3GttE+iJNkkitXDJy
VRNP0VwJ/clg/PN6MhohH/vKNE+Q2FgJ+yIIv4bLkjmu0Hvb9TIlq3+CO0UKQv0Z
8dVMrCV98WTuf0Jq+nO4krIqW0ptbiT8/LIpsSG8rJCfyxdkbAuluzvs2qKmy87x
slQ2h31mT7pR0yhwC30CDQBP4yTbpBs5CAbVg5ZwigHf7f5Gz8sexqhm88p393hb
RRfgp+VCcbemAXixMO9Q3qvFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUAdn5WkWt
4C1RsYvbNiwUpOG6sL4wHwYDVR0jBBgwFoAUlUb/2jDoTm/o815o7CVUGDnprQ8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5NUMzLzJCQjJCQjI2MkNE
QTExRjFBNzYyN0RDRjlCODMzNzczL2xVYl8yakRvVG1fbzgxNW83Q1ZVR0RucHJR
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbFViXzJqRG9UbV9vODE1bzdDVlVHRG5wclE4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5
NUMzLzJCQjJCQjI2MkNEQTExRjFBNzYyN0RDRjlCODMzNzczL2xVYl8yakRvVG1f
bzgxNW83Q1ZVR0RucHJROC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCCUYciP1QWBuR9o6TP50S3Dmy6TUwlngbZfDOLDOX2DhgwVLAokesGUj96Zp9/
bvYVV6wqh9f+7HiYXWTtGRjAcc+Gs0JVofVNcxqYOEhpgq8VusscLEmXt8oMakct
evvpX4fFhOSTL9aemnu1/MXYeyZyVMUZNox0DnihrqZJ1HHAeyCCQlCzGyszke/V
Q+vc/Emauc3zrfy/D3vhzOmE0D4zUELxqy/GTeSJTmj5mdT0kOHOdFa5CXaWiHPY
SFEx4awgcDZE1tm502Aoz0eiwqSJMvHSABTb2FJ7xIS+YxXi1ami5L9XjesyQIXy
wXKS3jHs/3LgK7xV93gntheI
-----END CERTIFICATE-----
Generated at Sat Sep 5 07:33:25 2026 by rpki-client