Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft
File:                     lAiiAfAOWP6SWY7gOTkHi673d5U.mft (raw, json)
Hash identifier:          DbXZZwgkANZx2lM5Rf/rFClS3lPGrhuoR8bqF7XoKQA=
Subject key identifier:   F4:9F:62:B8:63:96:84:4B:86:04:A2:23:BE:C9:B2:F1:91:A7:18:00
Authority key identifier: 94:08:A2:01:F0:0E:58:FE:92:59:8E:E0:39:39:07:8B:AE:F7:77:95
Certificate issuer:       /CN=A91A6F68/serialNumber=9408A201F00E58FE92598EE03939078BAEF77795
Certificate serial:       012C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lAiiAfAOWP6SWY7gOTkHi673d5U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft
Manifest number:          012C
Signing time:             Thu 03 Sep 2026 05:51:00 +0000
Manifest this update:     Thu 03 Sep 2026 05:51:00 +0000
Manifest next update:     Thu 10 Sep 2026 05:51:00 +0000
Files and hashes:         1: lAiiAfAOWP6SWY7gOTkHi673d5U.crl (hash: L0yz8WLUyKGNpMqu61bonhWLyJPLc36+mR0v/jf8Wm8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.crl
                          rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lAiiAfAOWP6SWY7gOTkHi673d5U.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 05:50:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300 (0x12c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6F68, serialNumber=9408A201F00E58FE92598EE03939078BAEF77795
        Validity
            Not Before: Sep  3 05:51:00 2026 GMT
            Not After : Sep 10 05:51:00 2026 GMT
        Subject: CN=6a990ac4-5829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:24:89:4b:bf:8d:8f:75:e1:ec:dc:55:a6:18:
                    f3:4d:d4:18:8d:31:32:e0:af:64:11:4e:d9:9d:07:
                    66:30:2d:d4:48:b7:5a:9f:f1:6d:27:dd:ef:20:11:
                    4f:d0:81:6e:2d:36:0f:40:80:64:20:cd:df:2e:8f:
                    ed:a2:21:ba:b9:3f:d2:fc:96:d1:52:bf:3e:ca:d8:
                    a5:89:04:5e:e8:dd:5d:48:f3:e7:72:de:70:f0:7d:
                    4a:89:b6:ae:f0:05:5a:1f:5c:5b:ef:e6:13:ae:23:
                    3b:78:c3:eb:4b:79:95:15:7b:84:70:f1:36:8d:be:
                    97:1d:be:c2:74:fe:be:9d:76:d9:70:52:9b:7a:16:
                    20:26:c4:da:83:c4:5e:d3:d4:63:c3:e6:d6:2b:19:
                    dd:9f:91:66:17:9b:15:c4:2f:99:d4:ec:88:ef:26:
                    2a:9d:b1:46:b3:62:be:9e:c6:2f:de:01:ac:7f:84:
                    95:a1:5b:fd:ec:15:6b:f2:a8:5c:2c:f7:43:d7:10:
                    4b:a5:4d:33:dc:5e:d7:c3:51:d0:03:7b:2b:ee:53:
                    c3:05:ce:86:cc:55:f4:7c:5a:5f:ce:b3:d9:64:c8:
                    cc:41:c6:33:5a:55:73:3a:c8:46:1d:ff:25:34:b0:
                    e1:a5:b5:ab:ef:d3:e9:3c:a1:d7:c6:95:99:81:f8:
                    78:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:9F:62:B8:63:96:84:4B:86:04:A2:23:BE:C9:B2:F1:91:A7:18:00
            X509v3 Authority Key Identifier:
                keyid:94:08:A2:01:F0:0E:58:FE:92:59:8E:E0:39:39:07:8B:AE:F7:77:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lAiiAfAOWP6SWY7gOTkHi673d5U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:72:c0:c8:28:b0:d7:8b:82:5e:33:5b:9c:9c:f3:1c:a0:02:
         0d:15:d4:85:2b:fd:27:cb:fd:ab:2f:69:f7:1f:8f:c0:fb:84:
         a2:6c:80:15:53:26:10:84:d9:24:97:2f:af:7c:9f:a5:95:0e:
         ba:e0:ce:fc:b0:5c:f2:45:2d:7d:3c:2f:fe:b7:65:a8:a2:66:
         ea:3a:c9:fe:f5:e3:8c:e4:3e:a2:df:9b:e6:c7:7b:6f:f7:f1:
         9b:02:12:28:3d:5f:c3:75:13:5c:aa:06:5c:73:d1:20:c9:6f:
         7f:8c:3a:9b:bc:d4:ed:49:bc:13:62:69:42:d8:be:1e:a1:77:
         d9:80:ec:21:24:2a:3f:3d:7e:5a:6e:fe:c3:5f:89:c8:b2:36:
         e1:26:87:17:c3:84:51:5d:3b:40:9c:5c:47:ee:00:ce:a3:74:
         6f:23:ac:48:21:64:62:ea:b2:6f:73:37:8c:05:ec:3a:8e:3d:
         15:d0:17:d2:8f:f4:ee:f8:af:82:0e:fb:52:f1:41:99:4e:f5:
         fd:38:1e:ed:08:94:a5:73:57:7b:9e:5d:73:d8:5c:13:32:09:
         6a:5f:5b:af:2f:78:70:b9:7d:0a:a3:2a:18:10:20:c0:70:a6:
         e4:35:a1:00:ad:52:c2:ec:b4:4b:60:b1:b6:fc:9c:39:f7:cc:
         61:60:be:85
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTZGNjgxMTAvBgNVBAUTKDk0MDhBMjAxRjAwRTU4RkU5MjU5OEVFMDM5MzkwNzhC
QUVGNzc3OTUwHhcNMjYwOTAzMDU1MTAwWhcNMjYwOTEwMDU1MTAwWjAYMRYwFAYD
VQQDEw02YTk5MGFjNC01ODI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8ySJS7+Nj3Xh7NxVphjzTdQYjTEy4K9kEU7ZnQdmMC3USLdan/FtJ93vIBFP
0IFuLTYPQIBkIM3fLo/toiG6uT/S/JbRUr8+ytiliQRe6N1dSPPnct5w8H1Kibau
8AVaH1xb7+YTriM7eMPrS3mVFXuEcPE2jb6XHb7CdP6+nXbZcFKbehYgJsTag8Re
09Rjw+bWKxndn5FmF5sVxC+Z1OyI7yYqnbFGs2K+nsYv3gGsf4SVoVv97BVr8qhc
LPdD1xBLpU0z3F7Xw1HQA3sr7lPDBc6GzFX0fFpfzrPZZMjMQcYzWlVzOshGHf8l
NLDhpbWr79PpPKHXxpWZgfh4LwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPSfYrhj
loRLhgSiI77JsvGRpxgAMB8GA1UdIwQYMBaAFJQIogHwDlj+klmO4Dk5B4uu93eV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkY2OC9CQTU2NUY1Q0RG
MjExMUVGODMzRjRGMkNDNEY5QUUwMi9sQWlpQWZBT1dQNlNXWTdnT1RrSGk2NzNk
NVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL2xBaWlBZkFPV1A2U1dZN2dPVGtIaTY3M2Q1VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NkY2OC9CQTU2NUY1Q0RGMjExMUVGODMzRjRGMkNDNEY5QUUwMi9sQWlpQWZBT1dQ
NlNXWTdnT1RrSGk2NzNkNVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA1nLAyCiw14uCXjNbnJzzHKACDRXUhSv9J8v9qy9p9x+PwPuEomyAFVMmEITZ
JJcvr3yfpZUOuuDO/LBc8kUtfTwv/rdlqKJm6jrJ/vXjjOQ+ot+b5sd7b/fxmwIS
KD1fw3UTXKoGXHPRIMlvf4w6m7zU7Um8E2JpQti+HqF32YDsISQqPz1+Wm7+w1+J
yLI24SaHF8OEUV07QJxcR+4AzqN0byOsSCFkYuqyb3M3jAXsOo49FdAX0o/07viv
gg77UvFBmU71/Tge7QiUpXNXe55dc9hcEzIJal9bry94cLl9CqMqGBAgwHCm5DWh
AK1Swuy0S2CxtvycOffMYWC+hQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:56:41 2026 by rpki-client