Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft
File:                     lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft (raw, json)
Hash identifier:          /1CesZXN6sx5dPhwUsUPhjLpX/nrTnX6SWy7l/IDrdU=
Subject key identifier:   97:5F:08:8A:63:C0:82:9E:16:0C:3F:75:7C:E9:B5:EF:77:9F:43:40
Authority key identifier: 94:C6:43:E1:6D:04:A7:73:8B:C7:2B:5B:10:7E:05:B1:61:61:40:13
Certificate issuer:       /CN=A91CAA8A/serialNumber=94C643E16D04A7738BC72B5B107E05B161614013
Certificate serial:       95
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lMZD4W0Ep3OLxytbEH4FsWFhQBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft
Manifest number:          92
Signing time:             Mon 19 Oct 2026 08:14:16 +0000
Manifest this update:     Mon 19 Oct 2026 08:14:15 +0000
Manifest next update:     Mon 26 Oct 2026 08:14:15 +0000
Files and hashes:         1: lMZD4W0Ep3OLxytbEH4FsWFhQBM.crl (hash: wmCYb3JzVtktzYvuoMCTlVQ6CnYNN7p03BSKPQO/HTQ=)
                          2: 537A2262F2D211F0BAE73FD33C6F56BC.roa (hash: s2faR/BPs0e9l2J2jTA2X6q8H0jSwkE9aF0b9GI1C9M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.crl
                          rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lMZD4W0Ep3OLxytbEH4FsWFhQBM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 08:14:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149 (0x95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CAA8A, serialNumber=94C643E16D04A7738BC72B5B107E05B161614013
        Validity
            Not Before: Oct 19 08:14:15 2026 GMT
            Not After : Oct 26 08:14:15 2026 GMT
        Subject: CN=6ad5d158-bd17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:41:b6:59:a9:b1:cb:2f:7d:d7:be:8b:66:db:
                    48:72:30:46:84:88:80:1f:f6:04:f9:5a:29:bd:b0:
                    02:35:5a:75:0b:7b:66:51:e3:1e:c3:72:f0:ab:fb:
                    02:7d:21:90:b6:2e:8b:75:f5:29:6e:20:88:f8:ca:
                    4b:77:1e:75:a2:20:b9:f0:54:eb:de:94:cf:d2:9c:
                    a0:90:5c:35:b0:be:88:c2:14:cb:49:77:b2:cd:64:
                    71:ac:da:76:9c:8a:e4:7b:1b:98:07:cd:84:44:3a:
                    da:cf:f7:85:d2:54:1d:f4:b8:2f:5b:72:7f:06:1f:
                    c8:10:d2:ba:b3:b6:48:60:99:0e:8a:06:e6:d3:f1:
                    aa:8d:18:ed:82:90:66:85:70:6d:08:ff:41:f6:f1:
                    2a:f9:7a:7d:25:72:04:f0:dc:39:71:7e:72:57:e3:
                    79:56:19:1f:b9:91:84:66:f3:2f:8f:82:01:f1:c4:
                    8e:ed:24:74:20:1c:e5:59:8f:0f:54:2e:1c:da:f5:
                    aa:f2:a8:5c:44:c1:2a:5f:d9:a5:bb:3e:34:23:97:
                    b2:d2:4d:72:8b:a5:88:9b:a3:f8:24:36:e7:59:65:
                    61:f1:8b:c0:cf:34:38:54:c0:4d:5c:bd:da:26:ef:
                    af:01:fb:4a:e5:70:a3:56:dd:e8:0b:27:5a:6d:9c:
                    22:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:5F:08:8A:63:C0:82:9E:16:0C:3F:75:7C:E9:B5:EF:77:9F:43:40
            X509v3 Authority Key Identifier:
                keyid:94:C6:43:E1:6D:04:A7:73:8B:C7:2B:5B:10:7E:05:B1:61:61:40:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lMZD4W0Ep3OLxytbEH4FsWFhQBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:de:79:fd:1a:de:16:59:42:30:cf:c8:69:29:8d:50:76:64:
         1f:05:28:8b:11:77:39:69:bd:8b:26:3f:0a:e2:51:36:73:d6:
         c0:e6:41:42:02:28:b0:5e:1b:09:12:ea:fe:e0:11:e1:b7:ea:
         38:63:0c:89:d5:f8:02:be:97:43:3c:e6:41:6c:29:c7:0e:b2:
         75:aa:b8:7a:9e:10:63:03:e0:a8:e5:9c:34:9b:ea:55:9f:07:
         63:63:a7:11:84:6f:23:48:e9:95:a2:77:bc:65:4f:07:2a:41:
         be:0a:2f:16:ea:5e:24:f2:6f:50:0b:35:97:9c:c7:9b:1b:96:
         6f:77:fa:9c:25:26:89:09:45:b1:fb:66:6a:91:83:a5:88:69:
         eb:79:2a:4d:ab:68:87:2f:0d:e4:11:6d:03:45:47:42:8a:39:
         48:36:5a:b9:94:53:f2:36:00:04:65:d5:70:7b:b0:8e:1c:2d:
         e0:04:82:ea:37:da:7a:39:e4:85:9b:75:5e:13:29:59:b5:60:
         44:37:0d:a7:48:ff:c0:a6:85:04:23:b6:44:00:0a:89:3e:f8:
         39:98:0c:8d:aa:33:3e:a8:e7:6b:95:69:30:91:66:58:e7:66:
         be:1c:7e:bf:f7:5e:6e:bc:ba:c6:4d:f4:e3:e1:c3:bb:27:65:
         6e:fb:6a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:12:20 2026 by rpki-client