Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft
File:                     lA0nrhRKrcqeNFLLOMMjasv3Als.mft (raw, json)
Hash identifier:          AdiFDP9kRSPpDQGwj3CjSAAC46Scvxx/fjUfKtVq1xc=
Subject key identifier:   57:69:7D:AA:DF:14:C9:D1:07:AE:02:87:B5:16:9C:D4:BC:42:AA:FA
Authority key identifier: 94:0D:27:AE:14:4A:AD:CA:9E:34:52:CB:38:C3:23:6A:CB:F7:02:5B
Certificate issuer:       /CN=A919B460/serialNumber=940D27AE144AADCA9E3452CB38C3236ACBF7025B
Certificate serial:       85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lA0nrhRKrcqeNFLLOMMjasv3Als.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft
Manifest number:          81
Signing time:             Mon 07 Sep 2026 07:31:34 +0000
Manifest this update:     Mon 07 Sep 2026 07:31:34 +0000
Manifest next update:     Mon 14 Sep 2026 07:31:34 +0000
Files and hashes:         1: lA0nrhRKrcqeNFLLOMMjasv3Als.crl (hash: Rb6NMESLsrFTFbU08Tr/vNssuV1doHVGmE8FT+MIxdg=)
                          2: 6233066868B411F1A7FCE07D7E47A888.roa (hash: cLHTOzBDSvX2r1cQexaW7fZ273SuMXzR4+rLK7jUiPo=)
                          3: 4BE78CE0ED2A11F08C16C3A8456F56BC.roa (hash: DxS8qtWv9pkNq2b6VRn4H0f6+eH9NnF6qbsTrQl88zk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.crl
                          rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lA0nrhRKrcqeNFLLOMMjasv3Als.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Sep 2026 07:31:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B460, serialNumber=940D27AE144AADCA9E3452CB38C3236ACBF7025B
        Validity
            Not Before: Sep  7 07:31:34 2026 GMT
            Not After : Sep 14 07:31:34 2026 GMT
        Subject: CN=6a9e6856-1d02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:93:53:d7:f3:c7:40:2f:b1:19:47:7b:03:8d:
                    c3:15:3f:87:9c:b8:8c:74:25:71:fc:44:34:bb:78:
                    50:31:3f:63:4e:bb:44:07:d1:8b:86:20:8d:89:d9:
                    04:8b:8a:a8:fc:ce:a3:48:0f:ed:e0:f4:ab:7a:3a:
                    d5:86:a5:22:32:0f:93:06:da:62:ed:c5:45:0f:04:
                    18:91:c7:bd:de:34:3a:84:2d:41:76:c0:e5:3f:34:
                    53:78:58:f4:d0:0b:7c:e4:4f:06:9b:62:ae:42:6d:
                    a6:fe:da:18:d9:b6:0e:ea:6e:58:7e:8a:2f:b2:24:
                    56:0b:c6:e8:8c:11:da:7c:3d:ee:00:dd:72:55:c6:
                    dc:3d:e2:c7:50:82:16:45:a9:80:63:b0:fa:03:10:
                    ad:87:fd:ea:99:2d:3f:e6:5f:41:26:07:b7:ca:c4:
                    1f:cf:e8:2d:bb:b9:0a:3f:99:5a:fb:60:f0:f3:66:
                    7d:dc:e2:9a:24:a2:c8:95:03:ea:9e:b6:0b:fd:bd:
                    47:fd:b1:0e:b6:7d:75:a6:90:bb:21:4c:0a:64:31:
                    45:6a:70:24:e5:1e:06:7b:03:db:32:e2:76:23:54:
                    93:b0:8f:a5:08:15:21:23:77:3f:14:c4:bc:04:60:
                    7c:92:1d:40:63:4c:4f:06:55:72:d8:2d:0b:fe:08:
                    26:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:69:7D:AA:DF:14:C9:D1:07:AE:02:87:B5:16:9C:D4:BC:42:AA:FA
            X509v3 Authority Key Identifier:
                keyid:94:0D:27:AE:14:4A:AD:CA:9E:34:52:CB:38:C3:23:6A:CB:F7:02:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lA0nrhRKrcqeNFLLOMMjasv3Als.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:53:01:42:6c:1f:ad:48:c2:0f:30:c9:cd:e5:4b:bf:a1:9c:
         05:b9:53:e3:0a:f2:c5:48:13:39:13:68:b3:54:4a:50:c8:d6:
         03:e0:0b:c3:9e:eb:d4:ac:87:89:c2:93:07:22:80:27:df:10:
         43:e8:b7:f5:dc:a1:4e:d5:6d:8e:a5:46:91:86:4a:c1:9f:8c:
         4a:53:fa:8e:44:6e:69:57:be:59:7b:31:b5:70:40:35:c1:a7:
         d4:f5:01:27:ea:ea:fe:ca:3e:70:30:90:9f:53:00:8a:de:b6:
         4b:c6:c8:7d:e2:e6:d2:bd:bf:46:d3:c2:19:f7:4c:3b:74:ef:
         b5:5f:cc:06:43:70:6b:d4:24:07:cf:3a:61:9d:6b:ae:46:94:
         2d:f3:fb:3c:f4:d6:b7:b2:7f:35:ef:bc:bf:f9:c0:62:5e:4a:
         ee:f6:b4:3c:85:21:44:37:1f:bb:40:59:9b:d1:d4:0f:a0:55:
         03:8a:57:50:7b:9f:97:a3:aa:5f:4d:8d:c6:fc:44:7e:2a:f5:
         d2:0d:5c:29:8c:45:1d:0c:d7:1c:56:00:61:87:b5:31:10:b1:
         60:4d:8b:77:4a:35:b4:a6:01:0b:fc:eb:b1:d4:6e:4a:4a:37:
         88:32:69:b1:1b:25:ee:8c:75:c4:72:f7:60:37:2d:69:22:58:
         fa:a4:d1:2b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUI0NjAxMTAvBgNVBAUTKDk0MEQyN0FFMTQ0QUFEQ0E5RTM0NTJDQjM4QzMyMzZB
Q0JGNzAyNUIwHhcNMjYwOTA3MDczMTM0WhcNMjYwOTE0MDczMTM0WjAYMRYwFAYD
VQQDEw02YTllNjg1Ni0xZDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1ZNT1/PHQC+xGUd7A43DFT+HnLiMdCVx/EQ0u3hQMT9jTrtEB9GLhiCNidkE
i4qo/M6jSA/t4PSrejrVhqUiMg+TBtpi7cVFDwQYkce93jQ6hC1BdsDlPzRTeFj0
0At85E8Gm2KuQm2m/toY2bYO6m5YfoovsiRWC8bojBHafD3uAN1yVcbcPeLHUIIW
RamAY7D6AxCth/3qmS0/5l9BJge3ysQfz+gtu7kKP5la+2Dw82Z93OKaJKLIlQPq
nrYL/b1H/bEOtn11ppC7IUwKZDFFanAk5R4GewPbMuJ2I1STsI+lCBUhI3c/FMS8
BGB8kh1AY0xPBlVy2C0L/ggmaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFdpfarf
FMnRB64Ch7UWnNS8Qqr6MB8GA1UdIwQYMBaAFJQNJ64USq3KnjRSyzjDI2rL9wJb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjQ2MC8wMkFFNDY3MkVE
MkExMUYwOThDNjMxMjE0NTZGNTZCQy9sQTBucmhSS3JjcWVORkxMT01NamFzdjNB
bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xBMG5yaFJLcmNxZU5GTExPTU1qYXN2M0Fscy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QjQ2MC8wMkFFNDY3MkVEMkExMUYwOThDNjMxMjE0NTZGNTZCQy9sQTBucmhSS3Jj
cWVORkxMT01NamFzdjNBbHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIlMBQmwfrUjCDzDJzeVLv6GcBblT4wryxUgTORNos1RKUMjWA+ALw57r1KyH
icKTByKAJ98QQ+i39dyhTtVtjqVGkYZKwZ+MSlP6jkRuaVe+WXsxtXBANcGn1PUB
J+rq/so+cDCQn1MAit62S8bIfeLm0r2/RtPCGfdMO3TvtV/MBkNwa9QkB886YZ1r
rkaULfP7PPTWt7J/Ne+8v/nAYl5K7va0PIUhRDcfu0BZm9HUD6BVA4pXUHufl6Oq
X02NxvxEfir10g1cKYxFHQzXHFYAYYe1MRCxYE2Ld0o1tKYBC/zrsdRuSko3iDJp
sRsl7ox1xHL3YDctaSJY+qTRKw==
-----END CERTIFICATE-----
Generated at Wed Sep 9 01:12:01 2026 by rpki-client