Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft
File:                     lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft (raw, json)
Hash identifier:          bom8CvkITISOWOrna+Yq1tNn1FJjE1wXMmtnmzgzdYU=
Subject key identifier:   FC:0C:57:C7:7D:2E:85:14:F3:E0:12:E8:A2:59:6E:13:E5:33:31:61
Authority key identifier: 96:B8:0C:37:C6:61:3D:14:A9:2C:DB:EC:66:28:21:64:3E:8A:F1:1B
Certificate issuer:       /CN=A91818BD/serialNumber=96B80C37C6613D14A92CDBEC662821643E8AF11B
Certificate serial:       03A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrgMN8ZhPRSpLNvsZighZD6K8Rs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft
Manifest number:          0394
Signing time:             Sat 05 Sep 2026 00:24:44 +0000
Manifest this update:     Sat 05 Sep 2026 00:24:43 +0000
Manifest next update:     Sat 12 Sep 2026 00:24:43 +0000
Files and hashes:         1: lrgMN8ZhPRSpLNvsZighZD6K8Rs.crl (hash: HkocLfWw7Xn1dV+jxME8l2aWrY53uSkWUuawHej6cXE=)
                          2: 481545DEFE8211ECBAB0E13FC4F9AE02.roa (hash: qwPyRzKdt7F2prPIJu2RV96XdN340vghb2ALVy3uoMo=)
                          3: B83B7E0C065511EDB3E94E54C4F9AE02.roa (hash: kbj/qZCCFFcNhZw3sqrJDaXIf5h+0nQW4F9uuXPmNWM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.crl
                          rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrgMN8ZhPRSpLNvsZighZD6K8Rs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 00:24:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 931 (0x3a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91818BD, serialNumber=96B80C37C6613D14A92CDBEC662821643E8AF11B
        Validity
            Not Before: Sep  5 00:24:43 2026 GMT
            Not After : Sep 12 00:24:43 2026 GMT
        Subject: CN=6a9b614b-9919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:6a:44:46:66:87:ac:d7:86:8b:be:aa:d4:13:
                    56:8d:31:30:55:c2:c3:c3:57:85:7c:92:ad:ae:34:
                    81:47:28:ee:ec:de:bc:0a:ca:bd:44:a0:2d:5e:1c:
                    9a:a0:92:2b:92:c9:5a:43:7c:f6:e3:1a:81:99:ee:
                    9d:33:92:9c:90:de:ce:55:d3:d0:8c:38:0a:10:bc:
                    c4:f6:4d:70:19:d0:15:5c:ee:4c:6e:1e:f7:3b:75:
                    20:e0:9a:d0:35:0a:ac:c4:40:10:e9:c4:15:e9:1f:
                    dc:23:5a:4d:b6:15:72:71:85:5d:cc:74:38:aa:08:
                    c4:e9:08:57:5f:dd:3a:7c:0f:0c:ef:3b:69:0c:79:
                    f1:95:9e:3d:18:4c:ec:fd:f8:21:72:3d:77:c2:b7:
                    17:32:a8:8e:67:e5:cf:0c:3e:76:75:79:cd:24:51:
                    83:67:fd:84:54:54:f0:9d:de:5a:56:4d:d7:85:36:
                    73:24:69:e7:e0:3c:07:5d:32:7c:b4:a8:e5:0f:48:
                    c8:e0:44:8f:a3:0c:40:ba:8f:f9:e1:6e:d5:39:f7:
                    56:38:0f:82:a6:f4:a6:fe:ba:df:fd:1f:d3:b7:26:
                    dd:4a:0f:c6:f3:9a:c0:b6:71:e9:47:10:36:ca:8b:
                    b8:a3:81:d0:24:6e:af:cc:55:ea:a8:05:24:b9:40:
                    83:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:0C:57:C7:7D:2E:85:14:F3:E0:12:E8:A2:59:6E:13:E5:33:31:61
            X509v3 Authority Key Identifier:
                keyid:96:B8:0C:37:C6:61:3D:14:A9:2C:DB:EC:66:28:21:64:3E:8A:F1:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrgMN8ZhPRSpLNvsZighZD6K8Rs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:28:71:c0:0d:01:42:ae:8d:04:af:36:5a:48:f3:db:91:08:
         cb:c2:97:26:71:cf:99:aa:1b:be:58:1c:eb:ed:f7:d8:6e:e8:
         8a:be:b8:61:f8:48:59:e0:d6:45:85:e8:a3:f5:43:cc:be:5a:
         6a:19:b5:fa:9b:c8:ff:ba:62:b3:35:0b:01:8c:9f:48:9a:de:
         9c:1f:fa:60:09:61:f7:e0:b0:9c:fc:d1:41:c3:fe:5e:2b:37:
         97:89:8c:ee:b7:c5:58:80:34:19:f1:d3:bd:5d:df:d9:86:1a:
         6e:58:b3:bf:15:dc:c5:8c:e6:15:68:36:98:ef:14:9d:20:62:
         c5:62:90:e7:63:9a:9f:a0:0e:3c:65:73:30:70:c8:86:fd:bb:
         4a:99:5d:f2:ed:b7:db:45:81:8e:16:fc:de:1b:44:c4:e0:40:
         e3:0e:8d:7d:b1:54:26:90:30:1d:6e:a7:40:61:83:56:7a:02:
         e6:66:4b:11:63:d3:55:b2:e1:8e:09:6f:09:de:b4:49:5d:ed:
         de:18:c7:7d:3b:22:80:77:87:b2:ea:7f:4b:26:a9:b9:75:61:
         72:37:aa:3a:a3:57:63:30:19:b0:2a:b3:43:ab:64:17:c9:09:
         91:7e:98:15:d0:88:f5:1a:da:7b:8f:af:7b:1b:e8:d9:d1:55:
         eb:4d:73:59
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA6MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODE4QkQxMTAvBgNVBAUTKDk2QjgwQzM3QzY2MTNEMTRBOTJDREJFQzY2MjgyMTY0
M0U4QUYxMUIwHhcNMjYwOTA1MDAyNDQzWhcNMjYwOTEyMDAyNDQzWjAYMRYwFAYD
VQQDEw02YTliNjE0Yi05OTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3mpERmaHrNeGi76q1BNWjTEwVcLDw1eFfJKtrjSBRyju7N68Csq9RKAtXhya
oJIrkslaQ3z24xqBme6dM5KckN7OVdPQjDgKELzE9k1wGdAVXO5Mbh73O3Ug4JrQ
NQqsxEAQ6cQV6R/cI1pNthVycYVdzHQ4qgjE6QhXX906fA8M7ztpDHnxlZ49GEzs
/fghcj13wrcXMqiOZ+XPDD52dXnNJFGDZ/2EVFTwnd5aVk3XhTZzJGnn4DwHXTJ8
tKjlD0jI4ESPowxAuo/54W7VOfdWOA+CpvSm/rrf/R/TtybdSg/G85rAtnHpRxA2
you4o4HQJG6vzFXqqAUkuUCD4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPwMV8d9
LoUU8+AS6KJZbhPlMzFhMB8GA1UdIwQYMBaAFJa4DDfGYT0UqSzb7GYoIWQ+ivEb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MThCRC80MTRENUJEQUZF
ODAxMUVDOUYzMTdBM0ZDNEY5QUUwMi9scmdNTjhaaFBSU3BMTnZzWmlnaFpENks4
UnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xyZ01OOFpoUFJTcExOdnNaaWdoWkQ2SzhScy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MThCRC80MTRENUJEQUZFODAxMUVDOUYzMTdBM0ZDNEY5QUUwMi9scmdNTjhaaFBS
U3BMTnZzWmlnaFpENks4UnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAChxwA0BQq6NBK82Wkjz25EIy8KXJnHPmaobvlgc6+332G7oir64YfhIWeDW
RYXoo/VDzL5aahm1+pvI/7piszULAYyfSJrenB/6YAlh9+CwnPzRQcP+Xis3l4mM
7rfFWIA0GfHTvV3f2YYablizvxXcxYzmFWg2mO8UnSBixWKQ52Oan6AOPGVzMHDI
hv27Spld8u2320WBjhb83htExOBA4w6NfbFUJpAwHW6nQGGDVnoC5mZLEWPTVbLh
jglvCd60SV3t3hjHfTsigHeHsup/SyapuXVhcjeqOqNXYzAZsCqzQ6tkF8kJkX6Y
FdCI9Rrae4+vexvo2dFV601zWQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 09:16:21 2026 by rpki-client