Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft
File:                     ltGlmUmhu3ombXKg8S_81fUFnxc.mft (raw, json)
Hash identifier:          /r5PIFmfgvTpS7Tiv9TdHPl/Sy4IR0WHmN4dCDwHT88=
Subject key identifier:   33:B1:81:A5:8C:AE:FD:19:D2:E0:79:40:28:E0:6D:1A:C4:1C:F2:9D
Authority key identifier: 96:D1:A5:99:49:A1:BB:7A:26:6D:72:A0:F1:2F:FC:D5:F5:05:9F:17
Certificate issuer:       /CN=A91AB001/serialNumber=96D1A59949A1BB7A266D72A0F12FFCD5F5059F17
Certificate serial:       0553
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft
Manifest number:          054B
Signing time:             Sun 04 Oct 2026 23:28:53 +0000
Manifest this update:     Sun 04 Oct 2026 23:28:53 +0000
Manifest next update:     Sun 11 Oct 2026 23:28:53 +0000
Files and hashes:         1: ltGlmUmhu3ombXKg8S_81fUFnxc.crl (hash: +2mfSaiCzkqSCMS8LOIPECgcP8d/MHV/sxqpJEfDr4g=)
                          2: 5BD4372457DE11EC88BC6713C4F9AE02.roa (hash: HfIHCgE3FqwzFZeum4TKPXX/IhXg0j6Cd01v1i5w0B0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.crl
                          rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 20:23:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1363 (0x553)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB001, serialNumber=96D1A59949A1BB7A266D72A0F12FFCD5F5059F17
        Validity
            Not Before: Oct  4 23:28:53 2026 GMT
            Not After : Oct 11 23:28:53 2026 GMT
        Subject: CN=6ac2e135-29aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b1:18:a0:51:87:d6:6a:64:90:c0:4f:f0:56:
                    19:da:b6:81:50:0d:1a:a4:a1:04:3c:cc:16:83:67:
                    3d:58:fc:92:06:c7:24:96:f8:1d:91:a9:51:b5:6a:
                    c5:01:48:41:63:75:6e:af:fe:39:79:c8:d4:7f:97:
                    b1:9d:a6:79:7d:0b:fd:4c:77:45:3c:f3:6d:2e:c1:
                    29:96:a4:81:74:91:9c:3f:51:5d:db:aa:e6:84:fb:
                    9b:15:eb:a2:e5:f8:ba:fd:a6:7c:03:1b:47:4a:34:
                    a0:78:22:03:3b:6a:d3:27:d6:51:16:c2:19:28:06:
                    a8:61:66:dc:e3:2e:75:7e:87:6b:5e:e7:10:c4:a5:
                    15:27:bc:d5:17:45:ed:de:e3:03:e3:4b:ae:ed:7d:
                    6e:0b:33:b9:ff:f8:3b:6f:c5:35:89:52:44:0c:78:
                    ff:03:1b:4a:43:d1:51:6b:0b:93:76:55:23:86:07:
                    34:92:58:9c:39:04:b7:af:3b:0e:a5:17:10:5c:b9:
                    3c:0b:42:94:60:20:15:25:ed:18:55:81:68:20:a3:
                    45:5e:08:21:81:0b:9a:bf:f7:c7:84:10:5f:d5:d2:
                    cc:91:42:ee:c9:69:bb:1e:41:28:6b:b9:a8:f9:56:
                    60:b9:65:c2:1e:4d:88:d6:12:03:48:90:cc:c0:5f:
                    97:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B1:81:A5:8C:AE:FD:19:D2:E0:79:40:28:E0:6D:1A:C4:1C:F2:9D
            X509v3 Authority Key Identifier:
                keyid:96:D1:A5:99:49:A1:BB:7A:26:6D:72:A0:F1:2F:FC:D5:F5:05:9F:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:91:8c:9c:f7:e3:fc:56:7e:a9:8a:59:ef:6a:b3:60:66:2d:
         5b:19:d0:31:d6:15:ef:8c:24:c4:a7:b6:e0:c8:96:d4:7c:2f:
         cf:cc:81:51:6f:ad:12:9d:92:56:b6:34:5b:3e:b0:58:90:bd:
         e0:5f:1b:ad:3e:2e:4f:af:6c:33:d2:9a:8f:28:c0:6c:b1:6c:
         da:23:eb:cd:f3:f7:67:43:86:22:d8:fe:9a:65:72:13:74:98:
         71:64:f8:6c:d8:5b:5f:1a:4e:f2:b7:58:e2:f5:bd:96:cb:56:
         ce:f4:c8:da:d0:cc:2a:90:9f:58:c6:9a:67:71:09:d9:b4:da:
         4b:d2:64:96:7d:c7:7f:ed:1b:d9:50:24:83:5e:7f:36:5c:23:
         b0:b1:b4:bb:a8:e0:fd:40:1e:2f:48:b7:dd:db:2c:0c:2e:24:
         d3:f5:ca:95:0c:35:41:fe:61:3e:69:88:ba:45:91:dd:87:df:
         c8:eb:55:63:51:95:a1:28:e7:84:75:57:f7:53:07:c5:d2:50:
         7b:6a:bb:ef:e8:88:ad:54:3f:0d:88:be:0c:06:e9:50:c2:ea:
         84:8b:91:87:7f:fa:01:04:6e:0e:ef:af:0e:14:53:e1:bb:da:
         3b:f6:95:8b:a7:cb:65:4c:cf:70:e3:7f:7f:b0:a0:71:3c:e5:
         d0:2d:ee:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 02:43:19 2026 by rpki-client