Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2A10/F256CC16232C11F193A4D832A3833773/lNLPRKNppCI0T3ZXg78B6YKpxAE.mft
File:                     lNLPRKNppCI0T3ZXg78B6YKpxAE.mft (raw, json)
Hash identifier:          P0x5JDIEwgFnxaoWsDCGwWr1x6kl8bhp3zMATQbK3aw=
Subject key identifier:   EB:5A:47:98:D2:2A:7C:0C:51:C5:5A:3F:04:6F:00:17:B1:F1:69:2F
Authority key identifier: 94:D2:CF:44:A3:69:A4:22:34:4F:76:57:83:BF:01:E9:82:A9:C4:01
Certificate issuer:       /CN=A91D2A10/serialNumber=94D2CF44A369A422344F765783BF01E982A9C401
Certificate serial:       6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNLPRKNppCI0T3ZXg78B6YKpxAE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2A10/F256CC16232C11F193A4D832A3833773/lNLPRKNppCI0T3ZXg78B6YKpxAE.mft
Manifest number:          69
Signing time:             Mon 05 Oct 2026 08:26:05 +0000
Manifest this update:     Mon 05 Oct 2026 08:26:04 +0000
Manifest next update:     Mon 12 Oct 2026 08:26:04 +0000
Files and hashes:         1: lNLPRKNppCI0T3ZXg78B6YKpxAE.crl (hash: gdlYqjyglPU4EO4OPt+LeUmGhZzqq6VsWhuuAolfZgg=)
                          2: A1E11254233211F193BBD607A5833773.roa (hash: yATqUA3STQ8R5PmkT2WcIp8HtIqcDGU6lhFcb0afmd4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2A10/F256CC16232C11F193A4D832A3833773/lNLPRKNppCI0T3ZXg78B6YKpxAE.crl
                          rsync://rpki.apnic.net/member_repository/A91D2A10/F256CC16232C11F193A4D832A3833773/lNLPRKNppCI0T3ZXg78B6YKpxAE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNLPRKNppCI0T3ZXg78B6YKpxAE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 08:26:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2A10, serialNumber=94D2CF44A369A422344F765783BF01E982A9C401
        Validity
            Not Before: Oct  5 08:26:04 2026 GMT
            Not After : Oct 12 08:26:04 2026 GMT
        Subject: CN=6ac35f1d-b06c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:03:91:f3:5f:81:38:0c:73:80:a7:32:26:28:
                    4a:51:75:13:6f:62:c4:68:02:2a:75:2f:dd:6c:fb:
                    28:e9:aa:6c:91:14:9b:dc:d0:62:8e:f4:46:0c:42:
                    02:29:f9:ad:44:c6:96:78:f9:79:01:cd:e4:a5:14:
                    0a:33:e1:fd:9a:d6:24:fd:c2:0a:3b:cb:12:6c:77:
                    73:89:11:0b:29:58:a1:85:a6:ce:8d:13:78:81:32:
                    f0:f4:f0:59:59:f7:43:bd:45:6c:7f:b9:59:f1:89:
                    c3:4c:82:30:5a:97:24:64:1e:5a:e5:58:3b:ea:40:
                    f9:84:40:09:7d:5f:9f:d2:65:3a:e1:28:99:77:30:
                    9e:d1:d7:5a:27:6e:eb:34:f3:a5:7a:c6:75:e6:92:
                    26:ef:18:5b:4b:53:57:68:ad:92:63:83:1c:aa:82:
                    41:9d:ce:b4:8b:8f:c9:da:c9:eb:97:d6:5f:eb:75:
                    1e:be:d3:89:09:3d:08:dd:91:20:34:2b:b0:10:02:
                    c7:48:b3:aa:a6:3b:59:a4:4a:ef:83:c6:03:e8:88:
                    50:fe:d7:56:99:c2:6c:58:f9:ae:94:6e:69:9c:fe:
                    de:b9:0a:f2:36:4c:f9:35:9b:d0:a7:c8:ac:dd:d7:
                    e8:8e:c3:49:3c:db:57:cb:ac:47:59:14:f8:11:0e:
                    2f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:5A:47:98:D2:2A:7C:0C:51:C5:5A:3F:04:6F:00:17:B1:F1:69:2F
            X509v3 Authority Key Identifier:
                keyid:94:D2:CF:44:A3:69:A4:22:34:4F:76:57:83:BF:01:E9:82:A9:C4:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2A10/F256CC16232C11F193A4D832A3833773/lNLPRKNppCI0T3ZXg78B6YKpxAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNLPRKNppCI0T3ZXg78B6YKpxAE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2A10/F256CC16232C11F193A4D832A3833773/lNLPRKNppCI0T3ZXg78B6YKpxAE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:da:bc:35:34:84:b0:46:9e:4c:0c:c3:d3:36:9c:04:80:51:
         e2:5c:10:fe:77:87:01:74:db:30:a5:8b:38:e8:c4:fd:85:bc:
         81:52:e2:05:3d:78:07:38:ec:7f:bb:6b:ff:c3:1f:46:bc:cb:
         fc:97:d4:98:f7:81:35:53:18:1b:24:00:b9:e9:61:b5:9d:ec:
         cf:86:bc:05:fd:bf:35:97:c4:2d:c9:76:20:5f:8e:b4:ec:30:
         7e:f5:63:a5:ee:62:c0:8b:19:37:d5:87:4c:55:d2:53:4c:4d:
         a5:50:da:04:34:87:e5:8d:2a:37:41:dd:e6:98:20:d0:1b:95:
         02:f3:e0:51:9d:9a:bf:87:14:88:8a:47:b5:ee:2d:65:3e:3c:
         ab:63:cb:b7:5b:6a:a0:35:60:ad:49:8e:d7:6b:68:41:de:e7:
         a8:3f:ec:18:db:09:cc:e4:2c:d4:1b:ef:d4:45:ce:ad:d6:b0:
         25:4b:7a:ad:d8:7d:4b:ed:aa:98:5f:38:5c:66:11:46:e5:fc:
         46:ce:6f:db:24:14:d3:92:3c:80:14:52:1b:d2:43:b6:1c:09:
         51:77:9f:61:57:3f:13:b1:55:b5:c4:ea:e0:c9:f2:51:ae:b4:
         1e:3b:4f:4e:a6:96:bb:10:fd:42:92:59:f8:01:17:ca:91:84:
         a1:27:ee:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:33:58 2026 by rpki-client