Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft
File:                     lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft (raw, json)
Hash identifier:          P+pO6S9FXAeSxCooW4ERgdwvaytzwlti3CDKlssrx1k=
Subject key identifier:   80:50:C1:E6:5D:E3:B2:95:2F:25:AF:D0:EA:83:8D:08:CD:85:3F:CA
Authority key identifier: 97:37:71:30:04:81:9B:6B:66:FC:56:E6:EC:86:BE:4D:C2:E2:8E:17
Certificate issuer:       /CN=A91A1C06/serialNumber=9737713004819B6B66FC56E6EC86BE4DC2E28E17
Certificate serial:       3599
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft
Manifest number:          3586
Signing time:             Tue 04 Aug 2026 15:00:03 +0000
Manifest this update:     Tue 04 Aug 2026 15:00:02 +0000
Manifest next update:     Tue 11 Aug 2026 15:00:02 +0000
Files and hashes:         1: lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl (hash: VR1pVJ8ngVdv4NTEEmhBs1ms7QAQqg5X2y/5ZuVFX14=)
                          2: F3E1B79CB8F811F08ABED010C4F9AE02.roa (hash: tS4RWCL5pxa5UjyzIdHh2QDGb2clP9SaVI3vEhg55R8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl
                          rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Aug 2026 15:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13721 (0x3599)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1C06, serialNumber=9737713004819B6B66FC56E6EC86BE4DC2E28E17
        Validity
            Not Before: Aug  4 15:00:02 2026 GMT
            Not After : Aug 11 15:00:02 2026 GMT
        Subject: CN=6a71fe73-46d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a3:fa:3d:9e:ea:82:b5:5e:64:c3:a8:08:cb:
                    b2:dd:d7:e6:18:29:e2:4b:af:62:ec:e9:36:63:ea:
                    bf:cb:bd:e0:36:34:1c:17:63:02:b1:7a:81:a3:4d:
                    3f:ce:a4:6d:f7:b3:23:6a:f3:56:70:e1:79:e7:43:
                    87:54:52:53:65:e5:f9:42:fa:95:80:0f:68:b4:5c:
                    7f:e5:49:c9:e6:d0:ef:bd:3e:03:df:3a:45:7a:fb:
                    ad:a2:1e:2e:0c:9d:7e:0f:86:0f:b3:ae:26:07:49:
                    90:ba:fd:4a:10:c8:fa:ed:97:84:0e:ec:e3:96:ba:
                    4d:ca:b8:24:64:34:ad:08:0d:77:9f:ee:4e:53:6b:
                    4a:5d:1c:b1:57:e4:23:3c:c4:0c:a9:c1:15:ec:ba:
                    18:14:a0:25:9f:d5:68:96:ea:3c:f9:46:0c:e3:46:
                    4c:75:b2:78:b7:3d:ab:e3:e3:8b:f8:d8:4a:f5:74:
                    ee:7d:99:de:17:e9:3b:54:3d:cc:c1:55:e5:7f:7e:
                    44:a1:48:4a:b2:5f:0b:f0:23:14:22:e5:48:89:92:
                    9a:f5:42:a3:2d:77:f6:b7:56:19:e7:b0:9a:28:3c:
                    f9:f2:5a:02:8b:4c:1a:9e:39:40:33:d6:7e:67:0d:
                    a4:32:c2:30:db:38:5d:da:2c:fb:77:d9:4e:a2:31:
                    82:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:50:C1:E6:5D:E3:B2:95:2F:25:AF:D0:EA:83:8D:08:CD:85:3F:CA
            X509v3 Authority Key Identifier:
                keyid:97:37:71:30:04:81:9B:6B:66:FC:56:E6:EC:86:BE:4D:C2:E2:8E:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:94:05:c2:4b:e5:8f:1e:57:cc:c5:0b:0a:6b:c9:a9:1a:5e:
         ba:0a:4a:4b:f0:9b:35:50:7b:f3:0a:f2:21:13:ce:e3:28:e8:
         ad:de:e5:54:e0:fb:a4:03:53:a3:2f:cc:38:80:7a:00:cf:cb:
         b4:0f:49:e4:d1:15:41:e6:a7:74:91:63:da:07:92:ea:91:8a:
         e4:35:35:c9:f1:16:55:fe:89:49:d4:e6:ce:29:2d:49:ea:55:
         69:e4:da:d3:9b:8f:3c:4e:aa:9d:be:9a:3b:c1:cf:77:11:81:
         e5:94:d4:56:2d:04:76:6f:11:28:56:93:fc:ae:c0:39:c1:81:
         69:9f:29:4c:5c:f6:55:fa:d7:b4:1b:63:20:d2:02:a6:d2:86:
         40:ee:b0:81:3b:b7:60:ab:84:e3:0a:7c:b1:c4:4a:2f:eb:1d:
         68:f5:3e:a7:94:cf:d2:92:58:c0:4e:40:9f:31:0e:e4:76:65:
         08:a9:23:2e:7b:8f:d8:66:21:7c:2b:84:24:36:91:3c:37:f3:
         e1:ae:63:77:97:7d:4b:98:bd:31:15:be:6c:3a:b2:ee:01:75:
         5f:a6:64:93:8a:bb:57:4f:bf:e6:0a:03:93:53:41:de:15:c1:
         1d:80:6b:7e:5c:e6:e0:83:9a:d8:80:65:ea:54:34:cd:b3:3e:
         1e:d4:cb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 03:14:51 2026 by rpki-client