Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft
File:                     lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft (raw, json)
Hash identifier:          VUtgdfzhRHJh5NHwWcUlKDMbEZ5JPvVsTyGJjOGnCpA=
Subject key identifier:   B2:0D:A7:79:C1:6E:D2:24:AC:4E:C2:F9:6B:E5:82:CD:EA:BB:B3:29
Authority key identifier: 96:C1:BC:98:7A:D6:64:39:13:F6:5E:05:D1:A6:63:F6:4C:4A:E1:B6
Certificate issuer:       /CN=A91C6A87/serialNumber=96C1BC987AD6643913F65E05D1A663F64C4AE1B6
Certificate serial:       74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsG8mHrWZDkT9l4F0aZj9kxK4bY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft
Manifest number:          72
Signing time:             Sun 25 Oct 2026 08:16:42 +0000
Manifest this update:     Sun 25 Oct 2026 08:16:42 +0000
Manifest next update:     Sun 01 Nov 2026 08:16:42 +0000
Files and hashes:         1: lsG8mHrWZDkT9l4F0aZj9kxK4bY.crl (hash: 9gFDYLPPLwh1iwgOAiZ/MZEEX7ZMnS624BiIZDhwYmg=)
                          2: 0190D9DAB27811F1901667443511F970.roa (hash: FYWhAcq7Avqujd9P2u3A9dXiOLrYNlsp2Zn1y3CZTn8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.crl
                          rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsG8mHrWZDkT9l4F0aZj9kxK4bY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 08:16:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6A87, serialNumber=96C1BC987AD6643913F65E05D1A663F64C4AE1B6
        Validity
            Not Before: Oct 25 08:16:42 2026 GMT
            Not After : Nov  1 08:16:42 2026 GMT
        Subject: CN=6addbaea-bdc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0c:3c:89:9c:3f:6a:4c:f7:33:52:7f:04:79:
                    e0:e8:cc:5c:24:7d:64:60:6a:e0:2a:03:01:68:f5:
                    72:f2:01:98:9e:1c:98:be:82:50:db:3c:fd:f1:9a:
                    e9:b4:19:99:e5:c3:06:d4:6e:4c:c3:dc:2b:4c:ab:
                    3f:ab:7f:bd:33:85:49:43:c5:ea:70:aa:b2:c6:e3:
                    ac:18:43:a4:ee:ff:f5:1b:70:5e:8e:f0:57:86:8b:
                    33:c6:e7:5c:73:0b:87:c3:66:8b:6b:8b:c0:58:17:
                    51:3a:d9:d9:cd:45:a8:29:30:c8:af:a6:bb:89:5f:
                    cc:80:1b:ed:1d:d1:74:b6:48:3a:39:2c:96:63:c0:
                    dc:7d:5c:0a:f8:15:10:ce:ea:1f:de:6e:73:ed:01:
                    fe:d4:45:93:9e:51:37:0b:76:e9:38:ac:94:0d:da:
                    03:fa:f0:14:c4:94:c7:c6:c7:d0:cd:d1:3c:7d:3d:
                    a0:38:29:30:8b:ff:0d:d4:0b:7f:40:38:e4:e4:89:
                    31:b0:7a:30:40:93:c8:55:12:5d:30:dd:a8:dc:a9:
                    6e:a7:9d:28:57:72:7b:a1:a4:a9:2d:77:6c:44:87:
                    1a:34:59:d2:e7:23:b3:76:8c:55:06:79:e8:4a:14:
                    a2:1b:4d:c0:11:9f:3a:fd:c3:13:9e:f7:10:7d:c3:
                    28:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:0D:A7:79:C1:6E:D2:24:AC:4E:C2:F9:6B:E5:82:CD:EA:BB:B3:29
            X509v3 Authority Key Identifier:
                keyid:96:C1:BC:98:7A:D6:64:39:13:F6:5E:05:D1:A6:63:F6:4C:4A:E1:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsG8mHrWZDkT9l4F0aZj9kxK4bY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:14:da:28:2f:8e:77:08:0d:13:e9:90:fb:50:74:5a:b7:ca:
         99:20:3a:55:ac:22:64:01:2b:f4:41:b0:bd:30:4f:2d:19:9a:
         f1:81:b2:b8:e7:4a:92:ae:67:db:cb:61:54:e7:49:71:ac:ea:
         df:08:ec:50:b7:5a:c9:46:b8:bf:c7:da:3c:c0:76:eb:5d:34:
         be:5e:c2:ec:63:9d:2e:46:6a:5b:0e:fd:0e:70:42:79:d8:79:
         5e:7d:64:7a:f8:30:d6:e3:79:06:49:3a:5d:bf:45:e9:b9:cf:
         d0:31:85:50:06:e8:5b:8d:08:db:38:c0:fd:88:6e:5d:07:3c:
         fb:32:d0:37:e9:5e:2b:c7:4a:81:a6:7c:91:d0:33:b5:5a:b7:
         a4:dd:db:17:98:d3:8c:16:08:ff:e3:bd:cb:f0:ba:45:8e:09:
         2b:81:5e:29:39:bd:bc:d0:71:02:71:4c:83:63:8a:15:0a:6e:
         09:58:66:c7:7a:cc:2a:88:18:af:9f:9e:1a:f5:13:63:c2:aa:
         a8:30:eb:da:51:44:21:57:85:32:20:b9:04:4c:4f:a9:e1:ba:
         a7:8c:83:2a:23:00:c0:bd:10:62:c2:25:7a:24:f1:08:11:57:
         f6:a4:b8:1e:e1:a5:51:1b:aa:fa:60:ce:da:28:ec:ff:d7:c6:
         1c:10:1b:1a
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
NkE4NzExMC8GA1UEBRMoOTZDMUJDOTg3QUQ2NjQzOTEzRjY1RTA1RDFBNjYzRjY0
QzRBRTFCNjAeFw0yNjEwMjUwODE2NDJaFw0yNjExMDEwODE2NDJaMBgxFjAUBgNV
BAMTDTZhZGRiYWVhLWJkYzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCtDDyJnD9qTPczUn8EeeDozFwkfWRgauAqAwFo9XLyAZieHJi+glDbPP3xmum0
GZnlwwbUbkzD3CtMqz+rf70zhUlDxepwqrLG46wYQ6Tu//UbcF6O8FeGizPG51xz
C4fDZotri8BYF1E62dnNRagpMMivpruJX8yAG+0d0XS2SDo5LJZjwNx9XAr4FRDO
6h/ebnPtAf7URZOeUTcLduk4rJQN2gP68BTElMfGx9DN0Tx9PaA4KTCL/w3UC39A
OOTkiTGwejBAk8hVEl0w3ajcqW6nnShXcnuhpKktd2xEhxo0WdLnI7N2jFUGeehK
FKIbTcARnzr9wxOe9xB9wyhZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUsg2necFu
0iSsTsL5a+WCzeq7sykwHwYDVR0jBBgwFoAUlsG8mHrWZDkT9l4F0aZj9kxK4bYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2QTg3L0JFMDYyOEMyMjRD
NTExRjE5QTQyMEVFQkE1ODMzNzczL2xzRzhtSHJXWkRrVDlsNEYwYVpqOWt4SzRi
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbHNHOG1IcldaRGtUOWw0RjBhWmo5a3hLNGJZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2
QTg3L0JFMDYyOEMyMjRDNTExRjE5QTQyMEVFQkE1ODMzNzczL2xzRzhtSHJXWkRr
VDlsNEYwYVpqOWt4SzRiWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBJFNooL453CA0T6ZD7UHRat8qZIDpVrCJkASv0QbC9ME8tGZrxgbK450qSrmfb
y2FU50lxrOrfCOxQt1rJRri/x9o8wHbrXTS+XsLsY50uRmpbDv0OcEJ52HlefWR6
+DDW43kGSTpdv0Xpuc/QMYVQBuhbjQjbOMD9iG5dBzz7MtA36V4rx0qBpnyR0DO1
Wrek3dsXmNOMFgj/473L8LpFjgkrgV4pOb280HECcUyDY4oVCm4JWGbHeswqiBiv
n54a9RNjwqqoMOvaUUQhV4UyILkETE+p4bqnjIMqIwDAvRBiwiV6JPEIEVf2pLge
4aVRG6r6YM7aKOz/18YcEBsa
-----END CERTIFICATE-----
Generated at Mon Oct 26 11:33:19 2026 by rpki-client