Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft
File:                     lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft (raw, json)
Hash identifier:          0NEWys+NLjhw8bq57EY+106+omlshL4zCdGPFpcaJN8=
Subject key identifier:   CF:DC:04:84:CE:43:4C:B9:55:71:02:AA:9C:FD:DD:86:1B:D9:AA:A6
Authority key identifier: 96:C1:BC:98:7A:D6:64:39:13:F6:5E:05:D1:A6:63:F6:4C:4A:E1:B6
Certificate issuer:       /CN=A91C6A87/serialNumber=96C1BC987AD6643913F65E05D1A663F64C4AE1B6
Certificate serial:       39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsG8mHrWZDkT9l4F0aZj9kxK4bY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft
Manifest number:          38
Signing time:             Tue 07 Jul 2026 09:50:23 +0000
Manifest this update:     Tue 07 Jul 2026 09:50:22 +0000
Manifest next update:     Tue 14 Jul 2026 09:50:22 +0000
Files and hashes:         1: lsG8mHrWZDkT9l4F0aZj9kxK4bY.crl (hash: 9DPr1dWy56b29SvcVvRJo3wBEifMij8B8gwF/oxLDrM=)
                          2: 20763B5024C611F191287557A6833773.roa (hash: 0r6vS9qeg1815ILGWf03i2uDlWfL7ibwuznjphtmkNw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.crl
                          rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsG8mHrWZDkT9l4F0aZj9kxK4bY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 09:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6A87, serialNumber=96C1BC987AD6643913F65E05D1A663F64C4AE1B6
        Validity
            Not Before: Jul  7 09:50:22 2026 GMT
            Not After : Jul 14 09:50:22 2026 GMT
        Subject: CN=6a4ccbdf-8870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ae:a8:ba:5c:30:a3:0e:3f:5d:4c:bb:2f:8f:
                    1f:7a:ed:2b:28:1e:28:7b:17:1e:78:a4:66:0e:fb:
                    01:af:fb:90:38:30:92:09:20:32:20:a2:c1:e0:20:
                    6c:d2:88:9a:d0:b4:a2:fe:73:46:3e:e3:e2:aa:d8:
                    5d:04:b4:a6:c7:c3:ff:59:28:bb:04:aa:51:b4:50:
                    16:49:27:d2:c1:b8:76:aa:38:04:8c:33:88:d7:96:
                    5e:ed:8d:4b:15:0a:33:20:79:6c:a3:5d:c6:d8:6d:
                    93:3f:93:87:5d:25:13:f4:ff:a5:8d:50:08:7e:7a:
                    03:a3:39:07:e2:28:3f:c7:46:6d:fd:b7:41:68:4e:
                    19:10:35:55:cd:44:5a:ce:73:ad:41:2d:ed:c2:20:
                    4a:9f:1e:46:ce:3a:03:31:5d:be:21:fb:3d:cb:d5:
                    77:89:e1:5c:2a:ec:96:7c:1d:c9:c1:01:a6:c8:44:
                    16:c0:cd:76:9a:21:03:0e:07:9f:16:0d:27:2b:ad:
                    46:79:a9:97:9a:37:92:6d:70:70:64:d9:1c:d4:82:
                    36:4d:d0:01:76:97:d3:b4:08:a8:bf:fe:4c:66:e4:
                    1f:af:64:1a:f9:8d:18:91:40:55:07:b0:c4:98:3a:
                    fe:ac:9f:0e:c5:e4:4a:11:26:59:e3:86:c5:48:8b:
                    eb:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:DC:04:84:CE:43:4C:B9:55:71:02:AA:9C:FD:DD:86:1B:D9:AA:A6
            X509v3 Authority Key Identifier:
                keyid:96:C1:BC:98:7A:D6:64:39:13:F6:5E:05:D1:A6:63:F6:4C:4A:E1:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsG8mHrWZDkT9l4F0aZj9kxK4bY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:42:57:21:cf:35:5e:28:18:d0:27:41:9b:3c:50:a0:3e:ad:
         2c:86:2f:bc:b5:97:b8:90:95:fb:31:8b:04:d6:3d:53:f5:63:
         c3:5f:7f:8b:0d:a3:a5:39:87:99:c9:72:e6:56:b5:69:bd:fa:
         c2:83:38:11:08:bb:78:71:f0:57:ac:76:f1:f3:a6:f5:ce:c2:
         9a:c7:3d:25:aa:fc:41:5f:7c:dd:5a:e5:ab:3a:cf:91:58:d8:
         fc:39:1b:76:63:44:d6:9f:9f:ea:e3:08:c1:78:60:d0:42:da:
         2d:84:de:6e:0a:82:b9:ac:6c:48:f4:f7:50:07:bc:81:40:7e:
         70:ef:c7:65:84:35:8e:20:8f:e9:eb:a8:8f:70:bd:38:e4:10:
         08:a9:aa:f2:bc:c3:22:2e:80:83:ea:98:0e:94:b1:fc:fd:e4:
         d0:5e:66:14:a0:5f:25:01:25:a7:37:27:c0:0c:1b:64:3e:11:
         40:aa:49:49:8e:81:db:0f:99:d4:5e:ce:84:5a:1b:cf:b9:53:
         c8:54:c3:ea:e9:b8:62:38:57:cb:e9:fb:94:1b:45:c2:2a:0a:
         84:2c:51:68:46:ab:65:4c:60:d4:5a:63:b8:64:18:15:8b:7f:
         b3:ba:69:1a:48:c5:25:30:51:64:69:4c:8d:7e:16:0b:4a:9c:
         a1:2a:99:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 21:04:21 2026 by rpki-client