Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft
File:                     lGqi80z6-eS9bjRboJqd6bnC0U0.mft (raw, json)
Hash identifier:          Rtz7lUENqV5OAyYNzT1aZylwAsjDomwYqlBp0h+sroQ=
Subject key identifier:   67:FB:AC:FF:AF:62:05:CF:DA:48:66:ED:7E:06:3F:F2:E9:8A:91:98
Authority key identifier: 94:6A:A2:F3:4C:FA:F9:E4:BD:6E:34:5B:A0:9A:9D:E9:B9:C2:D1:4D
Certificate issuer:       /CN=A91CAA69/serialNumber=946AA2F34CFAF9E4BD6E345BA09A9DE9B9C2D14D
Certificate serial:       0F64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft
Manifest number:          0F4D
Signing time:             Tue 06 Oct 2026 17:38:47 +0000
Manifest this update:     Tue 06 Oct 2026 17:38:46 +0000
Manifest next update:     Tue 13 Oct 2026 17:38:46 +0000
Files and hashes:         1: lGqi80z6-eS9bjRboJqd6bnC0U0.crl (hash: Z9MMX3ymwQhCPyDMCfSXEkOg4pI+bt0ujC0GGrPEoWE=)
                          2: DECBB040985611ECBE7ED328C4F9AE02.roa (hash: idv/2IXVQV4s0FcPaBXiyKtcotl1AiWEqCu1Wl2Gwy8=)
                          3: 1FAB60EE9EB111E99ED10D84C4F9AE02.roa (hash: JoDyF1+0/uHXUe4b6JwZuFvOHh5ZoEWfFz+rLvuX/DE=)
                          4: DF5D49F6985611ECBE7ED328C4F9AE02.roa (hash: iGmNhe2U/JgHU115UXZMlUMKdd/xk6VCuDolUguecP8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.crl
                          rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 17:38:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3940 (0xf64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CAA69, serialNumber=946AA2F34CFAF9E4BD6E345BA09A9DE9B9C2D14D
        Validity
            Not Before: Oct  6 17:38:46 2026 GMT
            Not After : Oct 13 17:38:46 2026 GMT
        Subject: CN=6ac53226-709c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:05:ec:6f:e7:88:61:f2:03:f0:45:33:18:78:
                    cc:e3:df:04:89:ba:11:37:28:36:83:93:43:54:2a:
                    13:69:6e:83:f7:fb:0e:2d:09:c6:60:ea:1a:d0:93:
                    eb:cf:49:b0:ec:d0:6f:f9:f8:7a:21:4c:22:2d:b0:
                    7e:19:99:1c:09:84:d0:7c:e1:d9:43:92:ce:5f:9d:
                    96:a7:67:0a:37:ca:26:74:5d:62:7f:e5:d3:d7:c4:
                    de:81:f7:cd:5d:50:d1:14:80:62:02:d4:72:01:d0:
                    81:8c:4a:22:7a:e0:fd:a8:cc:57:ba:83:ea:b8:f9:
                    8b:24:a6:23:ee:04:c0:e2:f4:cb:1c:45:38:2e:5e:
                    0e:98:be:b1:22:f2:e4:ab:4d:7b:e6:4f:a8:3a:ec:
                    ca:50:6f:9d:5d:bc:cf:6a:85:1f:f9:3d:3a:64:f1:
                    fa:b6:39:ce:55:ba:35:61:c4:b7:64:c9:79:0b:93:
                    05:b6:44:aa:6f:4c:50:a4:b7:25:2d:bd:68:3f:07:
                    e7:19:31:70:d9:da:44:02:85:59:82:2b:aa:55:19:
                    af:1f:1b:61:9c:64:d7:01:7e:86:e1:c7:f7:c3:17:
                    2d:bf:e7:98:11:c7:33:16:37:28:28:82:72:d6:55:
                    51:28:f5:46:f2:11:62:7a:71:fb:fb:7f:8c:00:ab:
                    38:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:FB:AC:FF:AF:62:05:CF:DA:48:66:ED:7E:06:3F:F2:E9:8A:91:98
            X509v3 Authority Key Identifier:
                keyid:94:6A:A2:F3:4C:FA:F9:E4:BD:6E:34:5B:A0:9A:9D:E9:B9:C2:D1:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:c5:c4:a7:0b:9b:c1:ce:a3:33:8e:a6:21:8d:0f:57:ed:dc:
         ef:4a:6c:8a:1e:b4:c7:90:13:ae:96:a6:f3:eb:96:d7:a3:0d:
         12:72:93:3c:ef:34:48:83:ab:ef:a1:fc:cc:75:09:4d:6d:6f:
         47:2e:dc:35:ad:19:83:ea:69:a8:5d:a1:54:b7:25:45:7f:1d:
         ad:2d:70:74:06:96:4f:25:af:84:46:9d:1e:2b:d9:c5:1e:35:
         83:b9:f1:b6:95:29:18:8c:3c:22:2f:5f:0f:20:3a:a6:06:ad:
         c6:f4:5b:e5:da:4e:37:b1:20:08:35:9a:7a:b4:27:b5:b7:4d:
         ae:69:c5:98:40:e0:d7:bb:b7:78:be:0a:50:2b:ba:82:cc:2b:
         c7:5e:df:5b:67:d9:ff:69:76:12:ec:81:48:8b:a8:00:b6:b4:
         0c:5e:a6:d1:0d:b5:b9:20:75:46:29:16:7c:02:da:06:a6:7e:
         0f:75:ba:c7:9d:61:c2:46:85:f1:03:0c:c2:6e:bf:2a:97:c3:
         90:de:e3:cb:4e:18:3d:26:b4:1c:7f:ef:a8:15:e8:88:f3:41:
         e0:b1:f1:a2:f1:bd:e7:61:b3:89:c4:03:66:67:f2:29:da:1f:
         42:3e:bb:9a:cc:08:3c:47:0a:8f:7d:51:d6:b5:3f:8e:e8:58:
         60:05:6e:63
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICD2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0FBNjkxMTAvBgNVBAUTKDk0NkFBMkYzNENGQUY5RTRCRDZFMzQ1QkEwOUE5REU5
QjlDMkQxNEQwHhcNMjYxMDA2MTczODQ2WhcNMjYxMDEzMTczODQ2WjAYMRYwFAYD
VQQDEw02YWM1MzIyNi03MDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwgXsb+eIYfID8EUzGHjM498EiboRNyg2g5NDVCoTaW6D9/sOLQnGYOoa0JPr
z0mw7NBv+fh6IUwiLbB+GZkcCYTQfOHZQ5LOX52Wp2cKN8omdF1if+XT18TegffN
XVDRFIBiAtRyAdCBjEoieuD9qMxXuoPquPmLJKYj7gTA4vTLHEU4Ll4OmL6xIvLk
q0175k+oOuzKUG+dXbzPaoUf+T06ZPH6tjnOVbo1YcS3ZMl5C5MFtkSqb0xQpLcl
Lb1oPwfnGTFw2dpEAoVZgiuqVRmvHxthnGTXAX6G4cf3wxctv+eYEcczFjcoKIJy
1lVRKPVG8hFienH7+3+MAKs4VwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGf7rP+v
YgXP2khm7X4GP/LpipGYMB8GA1UdIwQYMBaAFJRqovNM+vnkvW40W6Canem5wtFN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUE2OS80MEUxRkM5QzlF
QjAxMUU5QjA3RTdBODJDNEY5QUUwMi9sR3FpODB6Ni1lUzlialJib0pxZDZibkMw
VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xHcWk4MHo2LWVTOWJqUmJvSnFkNmJuQzBVMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QUE2OS80MEUxRkM5QzlFQjAxMUU5QjA3RTdBODJDNEY5QUUwMi9sR3FpODB6Ni1l
UzlialJib0pxZDZibkMwVTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUcXEpwubwc6jM46mIY0PV+3c70psih60x5ATrpam8+uW16MNEnKTPO80SIOr
76H8zHUJTW1vRy7cNa0Zg+ppqF2hVLclRX8drS1wdAaWTyWvhEadHivZxR41g7nx
tpUpGIw8Ii9fDyA6pgatxvRb5dpON7EgCDWaerQntbdNrmnFmEDg17u3eL4KUCu6
gswrx17fW2fZ/2l2EuyBSIuoALa0DF6m0Q21uSB1RikWfALaBqZ+D3W6x51hwkaF
8QMMwm6/KpfDkN7jy04YPSa0HH/vqBXoiPNB4LHxovG952GzicQDZmfyKdofQj67
mswIPEcKj31R1rU/juhYYAVuYw==
-----END CERTIFICATE-----
Generated at Wed Oct 7 04:27:29 2026 by rpki-client