Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft
File:                     L9JLb9eYBEVzVDhmYs4w3aOyALU.mft (raw, json)
Hash identifier:          NXriD3cw8Z5387NOd8H4XLUvdhemHaaIOHVNqzATXUo=
Subject key identifier:   F3:30:D7:86:91:41:62:3C:5B:2F:3A:02:7D:D3:E9:E3:35:71:AE:8D
Authority key identifier: 2F:D2:4B:6F:D7:98:04:45:73:54:38:66:62:CE:30:DD:A3:B2:00:B5
Certificate issuer:       /CN=A91A29DA/serialNumber=2FD24B6FD79804457354386662CE30DDA3B200B5
Certificate serial:       01E6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L9JLb9eYBEVzVDhmYs4w3aOyALU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft
Manifest number:          01DD
Signing time:             Fri 11 Sep 2026 03:39:31 +0000
Manifest this update:     Fri 11 Sep 2026 03:39:30 +0000
Manifest next update:     Fri 18 Sep 2026 03:39:30 +0000
Files and hashes:         1: L9JLb9eYBEVzVDhmYs4w3aOyALU.crl (hash: jFNltbtslueHDS5i5ZiNSTA9cH52brlJaqRN3f+hN3Q=)
                          2: C659227E3D9611F1B3BD8648C4833773.roa (hash: URpwa68ICBHx7NH87HQVK1oNTdznNSwb1RkzR4QbR8U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.crl
                          rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L9JLb9eYBEVzVDhmYs4w3aOyALU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 03:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 486 (0x1e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A29DA, serialNumber=2FD24B6FD79804457354386662CE30DDA3B200B5
        Validity
            Not Before: Sep 11 03:39:30 2026 GMT
            Not After : Sep 18 03:39:30 2026 GMT
        Subject: CN=6aa377f3-b55b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ef:d0:f3:b1:4d:74:c6:b0:11:12:5b:38:79:
                    50:70:b2:42:d4:9a:0e:2b:7f:d1:4e:4f:d2:8a:86:
                    94:95:da:78:4e:6c:d4:64:aa:63:99:ba:9f:80:d9:
                    f1:8c:3c:a6:33:67:8f:b0:10:fc:7f:92:ce:20:cc:
                    29:62:7d:38:9b:e7:27:86:29:99:d5:7a:1c:e7:51:
                    05:d8:d8:ac:9d:55:7c:7b:84:84:6d:40:21:94:60:
                    d3:1b:2f:af:40:e7:f4:2e:ee:a0:92:fa:b7:74:09:
                    77:66:f7:2d:9a:8d:7a:fe:94:cd:6c:ae:3b:aa:ef:
                    ed:88:d9:75:63:bc:9c:87:3d:d3:b9:86:db:1c:f9:
                    e2:9c:47:f3:b9:85:38:3e:22:7f:01:d4:d9:63:3a:
                    58:29:61:c3:b8:9a:91:1a:cf:78:e7:26:0f:8f:d6:
                    04:4a:0e:25:f9:52:46:7b:25:0e:1f:b9:e7:0e:69:
                    59:94:86:45:c2:21:64:05:3e:cb:e8:7a:2c:80:da:
                    7e:09:9d:61:22:c8:b6:9e:c8:c1:26:2e:fa:7d:39:
                    c6:42:64:83:f2:43:bb:ec:d2:1d:62:34:4a:57:c1:
                    88:b9:69:ef:05:94:ee:68:fc:bd:2f:15:14:7c:28:
                    6d:31:12:19:48:55:05:5c:b5:79:d6:5f:67:68:0e:
                    a7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:30:D7:86:91:41:62:3C:5B:2F:3A:02:7D:D3:E9:E3:35:71:AE:8D
            X509v3 Authority Key Identifier:
                keyid:2F:D2:4B:6F:D7:98:04:45:73:54:38:66:62:CE:30:DD:A3:B2:00:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L9JLb9eYBEVzVDhmYs4w3aOyALU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:ae:44:82:b8:e4:1d:56:22:4b:df:87:e7:70:e3:77:22:40:
         2a:a8:d7:70:58:de:b1:e3:65:af:3b:28:1d:62:1e:b2:b6:9c:
         bc:d7:13:4e:ea:ed:28:62:4e:78:ad:5f:cc:6a:6e:80:bc:14:
         9a:9d:46:b1:40:5f:01:4f:7b:21:9d:d0:d5:22:77:24:d1:35:
         5c:7d:8a:36:54:4a:d3:42:71:b9:28:5f:ff:ce:2b:24:f6:7b:
         f4:b0:ba:02:33:e0:e4:c6:f5:c7:cc:a6:4c:4d:75:15:6c:6f:
         4a:1c:e4:ab:ce:04:e1:80:c7:61:f2:ac:a4:be:9b:be:9e:f0:
         8f:d1:55:2d:56:58:fa:e6:80:97:62:8a:ec:2c:1e:26:4b:5e:
         5d:9c:ff:e3:6a:16:25:3b:44:c8:3b:8c:8b:47:87:3a:e3:56:
         92:79:20:73:d4:87:1d:d2:67:e9:c8:75:3c:e4:f2:db:82:bc:
         e4:73:a0:63:62:07:f1:a9:c7:3b:72:56:60:9b:f4:20:a8:4e:
         dd:93:5f:48:4d:aa:34:a9:11:aa:a2:71:21:c7:2d:53:5e:5a:
         fa:14:a6:3c:9e:08:d2:b5:65:58:ff:b4:37:f1:09:a2:5f:76:
         86:c5:27:0e:7f:d6:33:ad:ef:77:3c:91:5c:e0:08:53:a0:35:
         ab:d6:36:80
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTI5REExMTAvBgNVBAUTKDJGRDI0QjZGRDc5ODA0NDU3MzU0Mzg2NjYyQ0UzMERE
QTNCMjAwQjUwHhcNMjYwOTExMDMzOTMwWhcNMjYwOTE4MDMzOTMwWjAYMRYwFAYD
VQQDEw02YWEzNzdmMy1iNTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAre/Q87FNdMawERJbOHlQcLJC1JoOK3/RTk/SioaUldp4TmzUZKpjmbqfgNnx
jDymM2ePsBD8f5LOIMwpYn04m+cnhimZ1Xoc51EF2NisnVV8e4SEbUAhlGDTGy+v
QOf0Lu6gkvq3dAl3Zvctmo16/pTNbK47qu/tiNl1Y7ychz3TuYbbHPninEfzuYU4
PiJ/AdTZYzpYKWHDuJqRGs945yYPj9YESg4l+VJGeyUOH7nnDmlZlIZFwiFkBT7L
6HosgNp+CZ1hIsi2nsjBJi76fTnGQmSD8kO77NIdYjRKV8GIuWnvBZTuaPy9LxUU
fChtMRIZSFUFXLV51l9naA6nPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPMw14aR
QWI8Wy86An3T6eM1ca6NMB8GA1UdIwQYMBaAFC/SS2/XmARFc1Q4ZmLOMN2jsgC1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjlEQS8zNEI1QjUxNERB
NTQxMUVFODI3Q0E1N0RDNEY5QUUwMi9MOUpMYjllWUJFVnpWRGhtWXM0dzNhT3lB
TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0w5SkxiOWVZQkVWelZEaG1ZczR3M2FPeUFMVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MjlEQS8zNEI1QjUxNERBNTQxMUVFODI3Q0E1N0RDNEY5QUUwMi9MOUpMYjllWUJF
VnpWRGhtWXM0dzNhT3lBTFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoK5EgrjkHVYiS9+H53DjdyJAKqjXcFjeseNlrzsoHWIesracvNcTTurtKGJO
eK1fzGpugLwUmp1GsUBfAU97IZ3Q1SJ3JNE1XH2KNlRK00JxuShf/84rJPZ79LC6
AjPg5Mb1x8ymTE11FWxvShzkq84E4YDHYfKspL6bvp7wj9FVLVZY+uaAl2KK7Cwe
JkteXZz/42oWJTtEyDuMi0eHOuNWknkgc9SHHdJn6ch1POTy24K85HOgY2IH8anH
O3JWYJv0IKhO3ZNfSE2qNKkRqqJxIcctU15a+hSmPJ4I0rVlWP+0N/EJol92hsUn
Dn/WM63vdzyRXOAIU6A1q9Y2gA==
-----END CERTIFICATE-----
Generated at Fri Sep 11 14:30:05 2026 by rpki-client