Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft
File:                     LR4Op3rKP-WX3vMZYh70DRLUwdw.mft (raw, json)
Hash identifier:          c5tmjbg0275ltK0qt6dnHcNmMHbsIYdkStuiv6hYjT4=
Subject key identifier:   8C:67:1D:95:05:5D:22:C8:86:4E:62:3E:F7:E3:14:F3:EB:D4:D9:85
Authority key identifier: 2D:1E:0E:A7:7A:CA:3F:E5:97:DE:F3:19:62:1E:F4:0D:12:D4:C1:DC
Certificate issuer:       /CN=A91939DA/serialNumber=2D1E0EA77ACA3FE597DEF319621EF40D12D4C1DC
Certificate serial:       01AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft
Manifest number:          01A6
Signing time:             Fri 11 Sep 2026 04:13:27 +0000
Manifest this update:     Fri 11 Sep 2026 04:13:26 +0000
Manifest next update:     Fri 18 Sep 2026 04:13:26 +0000
Files and hashes:         1: LR4Op3rKP-WX3vMZYh70DRLUwdw.crl (hash: QFl/+Fu9NttauOCp9JmjMhV6qqRrMV7wglZTRTUzlAs=)
                          2: 056F0FFA2FAC11EFA4D45C6BC4F9AE02.roa (hash: lYBNMPIGwdmg3hahCp/0TuyobmaHK3vnQLBxguRZNCc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.crl
                          rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 04:13:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 430 (0x1ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91939DA, serialNumber=2D1E0EA77ACA3FE597DEF319621EF40D12D4C1DC
        Validity
            Not Before: Sep 11 04:13:26 2026 GMT
            Not After : Sep 18 04:13:26 2026 GMT
        Subject: CN=6aa37fe6-d7c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e6:4c:0a:4b:a5:d0:f0:c7:34:f2:be:40:3e:
                    51:fd:6c:3a:85:cc:ae:10:6e:33:d2:49:33:3c:81:
                    04:c8:9a:24:ec:db:59:cf:a3:40:34:d6:5d:af:f0:
                    b5:b7:9c:11:f5:c6:16:ee:b9:6d:5a:e3:8f:43:3d:
                    3f:46:c0:5b:1d:7d:49:41:be:68:39:35:60:4e:f3:
                    68:d0:c8:ab:45:d1:6b:06:ee:6b:95:1d:f3:f8:c4:
                    29:8e:f0:6e:d5:39:1e:83:78:85:00:49:a5:96:2e:
                    4c:25:68:22:0f:2c:4a:e8:96:5f:2e:84:c0:15:ac:
                    65:72:f3:90:1b:3e:6d:f5:8c:99:85:95:67:61:73:
                    f1:de:e0:aa:29:40:16:05:00:b2:9f:67:cf:96:36:
                    13:67:4c:33:21:c7:bf:5a:49:d7:89:91:4e:06:97:
                    09:7a:44:20:69:cb:c6:e1:45:3c:78:2c:73:86:8d:
                    0e:44:1c:0e:55:19:5c:92:81:74:21:fc:8f:4d:bd:
                    d5:50:7f:3e:12:e6:6d:b6:0f:e7:a2:7b:1d:f3:a4:
                    7e:2e:e1:28:74:3d:49:cf:bc:85:cb:71:20:fb:5d:
                    7e:9e:b7:84:b5:7f:1e:f3:f2:e6:4d:83:2a:52:f1:
                    07:6c:17:5f:99:d0:a9:6c:91:02:43:db:74:2d:28:
                    ef:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:67:1D:95:05:5D:22:C8:86:4E:62:3E:F7:E3:14:F3:EB:D4:D9:85
            X509v3 Authority Key Identifier:
                keyid:2D:1E:0E:A7:7A:CA:3F:E5:97:DE:F3:19:62:1E:F4:0D:12:D4:C1:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:61:e3:03:33:72:42:1f:0f:d6:56:1e:c4:ea:ad:91:ef:f0:
         07:75:0d:91:03:c1:c1:59:48:1f:96:d2:03:24:c8:3a:c3:f1:
         ed:af:90:05:51:ad:2f:9d:a5:3b:a6:b0:93:fa:72:b2:80:37:
         27:a1:cf:79:3c:85:cd:bf:a1:28:be:47:a0:de:80:74:ed:cd:
         9e:3a:b1:e2:66:58:6e:43:4f:f4:6c:91:a5:9d:c2:2c:48:3b:
         64:59:a7:3a:93:bb:d4:c6:e8:c8:66:b0:e9:e7:73:60:3e:5a:
         16:dc:7b:2a:1f:54:5a:7b:c4:91:4e:9d:5a:2c:7f:b6:c0:1f:
         cb:83:02:99:4a:3e:7b:d4:c3:1c:c2:d9:6e:84:fe:81:fc:f0:
         ca:33:80:a2:9e:26:61:01:83:db:80:e8:90:ad:c5:f0:97:7e:
         6e:a2:03:da:fc:6b:aa:cf:75:fa:e3:54:4e:8b:8c:0f:b5:24:
         9f:bd:2c:7a:f1:e7:e3:b2:20:4d:6b:8b:7a:9e:7b:c9:d5:fb:
         77:58:ef:e3:af:c5:88:32:e3:52:96:a0:46:ad:8c:47:81:73:
         04:b0:10:55:1b:ab:da:cd:79:40:79:02:20:dc:40:54:e0:3a:
         1a:25:6f:07:ed:38:d5:0e:c2:7d:87:39:2c:f6:8c:df:a4:1e:
         2c:57:5d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 10:20:43 2026 by rpki-client