Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft
File:                     LT4_u8fCsSzVNMi57TeG-2qlVQY.mft (raw, json)
Hash identifier:          T7ygI0/3VcAO4Rv2aOe0rla96WZ7FPs+JJ0B/Jy/VHM=
Subject key identifier:   85:5C:3F:5C:81:EF:95:BD:A2:E3:7D:A9:FF:C5:42:D1:A0:94:07:F3
Authority key identifier: 2D:3E:3F:BB:C7:C2:B1:2C:D5:34:C8:B9:ED:37:86:FB:6A:A5:55:06
Certificate issuer:       /CN=A91A7B36/serialNumber=2D3E3FBBC7C2B12CD534C8B9ED3786FB6AA55506
Certificate serial:       0106
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft
Manifest number:          0102
Signing time:             Sun 11 Oct 2026 06:48:17 +0000
Manifest this update:     Sun 11 Oct 2026 06:48:16 +0000
Manifest next update:     Sun 18 Oct 2026 06:48:16 +0000
Files and hashes:         1: LT4_u8fCsSzVNMi57TeG-2qlVQY.crl (hash: qqs36T77SZxejSwKrdrOScJ/WYI5KF8WNaPE4dAHhDI=)
                          2: D055AA08480111F098A44B5CC4F9AE02.roa (hash: XsH+IJ5SSw5cAUWIZZhkMzbgbFC8kkMlwg6uRhNZXvk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.crl
                          rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 262 (0x106)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7B36, serialNumber=2D3E3FBBC7C2B12CD534C8B9ED3786FB6AA55506
        Validity
            Not Before: Oct 11 06:48:16 2026 GMT
            Not After : Oct 18 06:48:16 2026 GMT
        Subject: CN=6acb3131-b3bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:45:a4:73:03:5b:6d:0d:e2:f4:21:03:85:e4:
                    c4:9a:de:58:76:fa:7d:79:0e:8a:e0:82:8b:e1:97:
                    30:20:1b:9b:69:5d:35:ab:1d:75:a3:7e:ca:b1:91:
                    cc:89:60:1c:d4:f7:15:18:14:5f:0b:49:d4:7e:f7:
                    e7:ef:de:ae:d5:19:7e:93:f0:f8:c1:40:65:3d:37:
                    4d:f5:95:51:ab:48:6a:cd:e0:27:52:85:79:da:85:
                    d2:c2:88:e7:74:67:b5:55:1a:9a:3c:b2:71:e2:50:
                    4f:12:0c:42:61:c1:03:b2:b0:70:64:09:6e:1e:d0:
                    44:32:ff:70:7a:47:4e:a8:82:58:fd:8d:ab:26:8c:
                    7c:e2:50:b7:38:da:f3:aa:a0:29:ce:16:ba:6e:eb:
                    17:7b:dc:ac:24:4c:dc:ad:2b:0e:30:c4:03:d1:70:
                    9f:5d:e5:e4:16:8d:ff:e5:7f:16:2d:19:a1:2d:b9:
                    06:ee:90:db:f6:e7:d4:ce:7b:59:aa:30:21:7a:96:
                    88:17:aa:2c:ae:e7:3e:e4:d8:f3:8c:35:ec:26:16:
                    41:75:f3:d8:55:21:14:55:55:66:06:d7:fa:15:4f:
                    58:cc:47:4e:17:5b:80:fe:55:1f:60:f1:be:a7:56:
                    67:01:28:17:5c:0b:37:52:7b:35:70:f9:e3:4e:bd:
                    a6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:5C:3F:5C:81:EF:95:BD:A2:E3:7D:A9:FF:C5:42:D1:A0:94:07:F3
            X509v3 Authority Key Identifier:
                keyid:2D:3E:3F:BB:C7:C2:B1:2C:D5:34:C8:B9:ED:37:86:FB:6A:A5:55:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:e2:67:f8:6d:d3:d4:a1:d9:48:a7:1a:e2:1f:2a:80:a5:38:
         06:c4:be:75:0a:69:99:76:89:67:84:8d:ac:01:05:92:8f:27:
         a8:41:37:b9:4c:ef:3f:6c:8a:dd:6f:7e:d4:d3:d7:be:bf:75:
         27:09:66:d4:d0:47:91:da:ce:15:79:1f:76:7d:c4:6d:59:22:
         c9:10:27:cb:79:d6:b3:83:bb:9b:01:bd:f6:b5:9a:9b:ac:1a:
         1f:35:17:ff:b4:18:e3:b1:30:f7:cd:2b:f9:a7:da:5a:48:3a:
         10:3b:24:cb:c4:9f:e7:31:10:06:f6:8d:aa:6f:ce:cd:51:86:
         30:92:21:55:53:28:0c:06:fe:5a:87:dc:b9:51:c4:a6:78:2a:
         36:e5:8b:86:f7:4f:c0:9d:43:4d:b2:ff:95:79:09:72:42:c5:
         b0:dc:75:f5:6e:99:89:b3:0c:8c:c6:04:41:1d:80:2a:9c:3b:
         e8:d1:16:de:af:41:bb:ef:dc:2b:44:da:a2:11:46:a7:b4:c7:
         e5:95:20:99:1e:cf:39:da:6f:e2:26:8f:f9:2e:d1:c8:07:e1:
         6d:c3:4e:3c:fa:8b:05:b5:38:7d:bb:c4:75:88:9a:44:28:4b:
         e2:63:08:fa:1f:e2:bb:99:3e:25:7f:94:24:1d:dc:48:d2:12:
         65:ed:ff:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:38:14 2026 by rpki-client