Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A26B4/7ECAFBD255A911F18E92BC479B833773/lEQwmLiAH9qz9QqhrWffnUrY-uQ.mft
File:                     lEQwmLiAH9qz9QqhrWffnUrY-uQ.mft (raw, json)
Hash identifier:          cLdFtQ2jd3hw31dc89vQyw18bwgEfBvWVVl9RIYwOIw=
Subject key identifier:   F9:F4:CC:87:5F:14:78:B2:5F:30:A8:2B:8F:0C:71:0B:E1:29:50:0A
Authority key identifier: 94:44:30:98:B8:80:1F:DA:B3:F5:0A:A1:AD:67:DF:9D:4A:D8:FA:E4
Certificate issuer:       /CN=A91A26B4/serialNumber=94443098B8801FDAB3F50AA1AD67DF9D4AD8FAE4
Certificate serial:       3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEQwmLiAH9qz9QqhrWffnUrY-uQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A26B4/7ECAFBD255A911F18E92BC479B833773/lEQwmLiAH9qz9QqhrWffnUrY-uQ.mft
Manifest number:          39
Signing time:             Thu 03 Sep 2026 08:50:31 +0000
Manifest this update:     Thu 03 Sep 2026 08:50:30 +0000
Manifest next update:     Thu 10 Sep 2026 08:50:30 +0000
Files and hashes:         1: lEQwmLiAH9qz9QqhrWffnUrY-uQ.crl (hash: 00O9qs4w24aEBj2ZBtepcbYv8ioyNhE8SRoppZ9KFfY=)
                          2: 8DB4437A5B0C11F1A290872FAE833773.roa (hash: kddMFJP6M2YdDuXTiIMj4eShU+ZBD/05socoOXhdsL4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A26B4/7ECAFBD255A911F18E92BC479B833773/lEQwmLiAH9qz9QqhrWffnUrY-uQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A26B4/7ECAFBD255A911F18E92BC479B833773/lEQwmLiAH9qz9QqhrWffnUrY-uQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEQwmLiAH9qz9QqhrWffnUrY-uQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 08:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A26B4, serialNumber=94443098B8801FDAB3F50AA1AD67DF9D4AD8FAE4
        Validity
            Not Before: Sep  3 08:50:30 2026 GMT
            Not After : Sep 10 08:50:30 2026 GMT
        Subject: CN=6a9934d7-53ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:08:22:16:14:74:ef:0e:c0:03:28:8f:01:5c:
                    eb:7c:0d:3d:27:55:2c:3a:74:c1:77:1b:91:de:d7:
                    32:44:72:fc:f8:36:b9:04:11:5e:0f:20:dc:4b:41:
                    4b:61:26:a0:c9:2b:9b:d9:c7:b1:30:20:d5:87:f4:
                    31:58:a7:79:40:65:cb:e1:07:56:da:c5:e9:47:15:
                    d6:f0:1d:29:ae:b4:16:de:0c:88:50:b2:b6:e2:f9:
                    3f:f3:85:ae:61:c8:12:2d:1e:2c:5d:f2:d1:d7:02:
                    2c:32:14:d0:cd:3f:66:5b:a0:14:48:a2:60:72:7d:
                    e2:b8:15:c2:47:ec:09:1d:96:f8:0b:56:77:7f:dc:
                    1e:f4:20:67:cb:ac:e2:0d:1b:13:9b:b3:86:4f:29:
                    3c:50:c2:f9:b3:04:26:0a:98:2d:4b:69:0b:44:9b:
                    e7:45:0d:0a:d7:11:06:8b:5b:31:3d:49:1f:b7:c1:
                    c9:75:c5:00:49:a8:b6:c2:e7:4c:a4:9e:9f:22:e2:
                    4a:30:7b:ca:1a:04:b3:43:22:ed:f3:f4:9a:12:5d:
                    bd:80:a1:54:48:ee:93:ee:7f:24:81:4a:3d:f0:77:
                    3d:1b:65:15:b8:dd:d2:3a:2b:54:1d:e7:c6:a7:5b:
                    91:c9:f4:d2:70:55:ec:09:68:e0:44:20:d1:e2:8a:
                    99:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F4:CC:87:5F:14:78:B2:5F:30:A8:2B:8F:0C:71:0B:E1:29:50:0A
            X509v3 Authority Key Identifier:
                keyid:94:44:30:98:B8:80:1F:DA:B3:F5:0A:A1:AD:67:DF:9D:4A:D8:FA:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A26B4/7ECAFBD255A911F18E92BC479B833773/lEQwmLiAH9qz9QqhrWffnUrY-uQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEQwmLiAH9qz9QqhrWffnUrY-uQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A26B4/7ECAFBD255A911F18E92BC479B833773/lEQwmLiAH9qz9QqhrWffnUrY-uQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:08:f3:a8:c6:70:a6:ea:a5:aa:98:a9:67:22:ce:81:0c:d3:
         07:7a:3c:b2:6c:eb:7e:73:70:f3:3f:84:6b:61:c1:26:a9:7e:
         2e:2a:0b:bb:36:1d:c3:ac:5c:95:1c:81:44:13:f6:f6:ee:d9:
         67:44:3d:70:18:75:95:85:28:c4:91:b4:b3:6d:e1:70:3b:45:
         ec:53:d0:37:9a:fc:c7:8d:41:d7:0b:a3:eb:2d:9e:58:1a:40:
         c5:2d:f0:14:88:b7:ca:e9:59:a0:a7:1c:f6:1d:3e:03:17:56:
         a5:d3:6f:c2:70:b4:f6:ee:62:28:91:9d:f3:f2:a1:e4:10:fc:
         36:f9:77:91:04:22:63:ca:03:4c:a9:8f:cb:ed:38:6d:ad:60:
         74:70:33:26:b6:d6:31:8b:b4:03:ac:f4:cd:b9:6c:99:c7:f5:
         d2:3d:73:fd:8a:d3:71:6e:b0:cb:ec:42:e7:f4:2b:3a:b3:b0:
         d9:c0:92:52:6b:1e:23:ac:5e:4c:97:e7:8e:ca:61:00:e7:24:
         93:e6:11:01:96:d8:26:4e:5c:ec:8f:61:53:98:e6:49:43:4e:
         fd:03:f5:c1:77:b8:a5:f5:7c:50:bf:df:a6:a7:32:66:c1:0a:
         3d:92:7a:79:e1:4d:d7:72:5a:91:af:c6:15:fa:9e:b6:29:c3:
         03:e7:0e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 19:22:50 2026 by rpki-client