Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
File:                     Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft (raw, json)
Hash identifier:          h7hIk3zT9SZotIl2wLSuIgINhtwt1EO+aSW+mYL83Og=
Subject key identifier:   F5:A4:09:B5:B4:A2:86:94:71:70:32:03:21:43:BE:62:B2:5A:E5:B8
Authority key identifier: 2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2
Certificate issuer:       /CN=A91A8A85/serialNumber=2EAF60095334E7F0BAA065A92F653F5C744895C2
Certificate serial:       07E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
Manifest number:          07D0
Signing time:             Fri 04 Sep 2026 21:16:19 +0000
Manifest this update:     Fri 04 Sep 2026 21:16:18 +0000
Manifest next update:     Fri 11 Sep 2026 21:16:18 +0000
Files and hashes:         1: Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl (hash: CXGzIAZT2rhABXfuVfng2lHhAuBTmOY+bLKHIrFEukQ=)
                          2: 6FBFD196C3B811EF82B40031C4F9AE02.roa (hash: r2E33zBN68DzdFBxJzHPWNCremEV/5Gpjhm3sPaTCEM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl
                          rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 21:16:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2019 (0x7e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8A85, serialNumber=2EAF60095334E7F0BAA065A92F653F5C744895C2
        Validity
            Not Before: Sep  4 21:16:18 2026 GMT
            Not After : Sep 11 21:16:18 2026 GMT
        Subject: CN=6a9b3523-6843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a4:b9:07:49:38:42:1a:39:01:c9:45:02:66:
                    03:f0:bb:22:9e:78:3a:66:76:38:14:8d:57:ae:1d:
                    44:65:10:e9:c1:bb:e4:4f:2a:7b:02:31:a6:b0:f8:
                    cd:c3:9a:17:84:4c:0e:e2:28:95:b1:74:0d:f7:92:
                    5c:7a:df:f2:61:44:9e:0b:69:00:1d:5d:57:83:de:
                    9e:2f:20:db:62:0a:54:6b:78:d6:e8:48:89:5d:ba:
                    e6:ee:bb:7e:c2:ef:16:d3:a5:ba:ce:35:85:bc:44:
                    c9:dd:21:fc:41:70:7d:12:4b:75:20:46:0d:38:d4:
                    2e:f6:f0:7d:1c:c4:50:db:5c:5a:31:56:8f:ad:b5:
                    f7:5e:f6:78:3b:3d:dd:d2:e2:df:f7:56:d8:91:46:
                    7b:ed:eb:8f:bc:db:ff:6a:6a:f6:90:cd:35:34:86:
                    77:8b:f3:29:8c:4a:80:4a:f9:ea:66:5f:95:7f:ee:
                    83:74:ed:b8:0b:12:cf:4b:44:52:d7:b4:fa:20:21:
                    9b:39:9b:be:8e:4c:a1:f0:ad:68:3d:b2:23:92:61:
                    cd:10:8f:4c:af:5a:9c:c2:3c:1b:71:f2:1f:d0:75:
                    7d:21:be:8f:93:18:e6:7b:56:dd:ef:5a:3e:2d:70:
                    f9:c9:90:13:7b:ee:e4:bb:e3:74:94:01:f5:aa:7e:
                    57:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A4:09:B5:B4:A2:86:94:71:70:32:03:21:43:BE:62:B2:5A:E5:B8
            X509v3 Authority Key Identifier:
                keyid:2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:b6:54:75:50:d1:0f:bc:79:2b:80:24:a1:0c:bd:c3:31:1b:
         9c:f2:3d:50:aa:2d:89:a7:74:07:c3:da:0d:0d:39:7c:2a:b4:
         fb:d5:25:ef:a5:09:7d:fc:1d:84:c7:d2:3d:7b:62:5c:6e:f9:
         cb:fe:11:68:b9:11:00:4d:95:9f:17:7a:8e:63:4a:ef:48:f6:
         29:07:91:5c:04:87:c5:8a:79:12:1b:4c:3b:00:70:12:07:7b:
         fa:c5:82:a2:e2:e6:e3:0e:14:fe:8e:0c:bc:eb:66:c9:db:51:
         a4:22:e5:c8:35:14:4e:11:cf:68:eb:bf:91:17:42:da:8a:f9:
         0e:cc:11:ea:86:62:d8:cd:13:1f:33:c9:fb:ab:2b:e5:15:25:
         49:99:3b:c5:ea:df:be:66:89:2a:11:3d:0b:0e:3d:38:e1:5c:
         f9:82:5d:db:7f:ee:7a:f4:d7:90:44:ef:2b:93:2b:6a:d6:49:
         24:50:25:f1:e6:f1:39:14:ba:a4:dc:bc:88:c9:8d:8a:59:b7:
         cb:73:57:30:36:a1:37:45:c8:32:6c:17:d6:63:da:ba:d8:87:
         66:a9:7d:15:cc:20:2d:a5:f9:26:22:91:7f:2a:10:0a:d3:80:
         20:0c:fb:f6:5d:81:05:1f:be:35:8e:42:9f:04:27:3a:a1:c8:
         86:09:cb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:15:42 2026 by rpki-client