Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft
File:                     lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft (raw, json)
Hash identifier:          49a8UEni97qg3LqoBMh1LDdI/Tu8+9QEjK+7nSVzv+k=
Subject key identifier:   CD:E8:47:A3:02:CD:89:1F:D0:FE:AC:D4:43:97:7D:33:17:2F:F9:D2
Authority key identifier: 94:33:49:FD:B6:DC:0A:F1:5C:D5:74:DA:42:F8:EC:7B:49:DC:0D:B7
Certificate issuer:       /CN=A91DEB01/serialNumber=943349FDB6DC0AF15CD574DA42F8EC7B49DC0DB7
Certificate serial:       FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDNJ_bbcCvFc1XTaQvjse0ncDbc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft
Manifest number:          F6
Signing time:             Tue 27 Oct 2026 06:42:38 +0000
Manifest this update:     Tue 27 Oct 2026 06:42:38 +0000
Manifest next update:     Tue 03 Nov 2026 06:42:38 +0000
Files and hashes:         1: lDNJ_bbcCvFc1XTaQvjse0ncDbc.crl (hash: vRozhNH0Y0+QjcZSKTdfD9Yewjt4164tE3ggYe5vp/8=)
                          2: 76B542B0A84011F194FA91243A11F970.roa (hash: Ikz0D3kqkyqo0E9vWshLiMP6ATZdwtVz365rPjNjhYQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.crl
                          rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDNJ_bbcCvFc1XTaQvjse0ncDbc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 06:42:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253 (0xfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEB01, serialNumber=943349FDB6DC0AF15CD574DA42F8EC7B49DC0DB7
        Validity
            Not Before: Oct 27 06:42:38 2026 GMT
            Not After : Nov  3 06:42:38 2026 GMT
        Subject: CN=6ae047de-20de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9e:2c:8c:b2:44:d2:a2:5d:c1:36:3e:b4:af:
                    b0:fa:3d:fe:9d:7e:ae:2b:42:1a:87:6b:23:85:58:
                    25:74:32:95:96:3b:98:e1:06:45:c9:4e:90:88:38:
                    a1:36:cf:c9:5c:46:a0:54:0d:6f:18:1b:c6:83:85:
                    ec:e2:ae:64:94:19:54:d5:6d:55:b6:86:1d:21:db:
                    25:6f:6d:6c:2f:50:94:e7:5b:26:79:d4:ab:e8:92:
                    6c:28:08:07:ea:52:ee:67:e2:21:09:83:30:49:68:
                    8c:b5:ce:0b:0c:d9:d6:69:80:62:c4:51:cc:41:4f:
                    ad:36:5f:cb:08:88:95:cd:2c:0e:db:8e:a2:bc:7c:
                    cf:6d:ca:55:f7:99:c6:dd:f2:74:b1:c7:4b:59:e4:
                    ef:f0:8c:ae:ff:6d:02:fc:99:02:e6:99:fe:d5:3b:
                    db:2a:a0:b9:33:1f:b2:d1:2c:e7:2d:83:84:5c:5b:
                    dc:55:d1:79:4b:1c:cb:69:90:4c:ac:2b:e6:0f:f2:
                    95:f9:85:94:6f:f7:4f:fb:79:31:a0:0c:77:71:fd:
                    ed:36:19:87:99:44:2c:bf:13:74:57:1d:2f:5e:d6:
                    3a:70:5a:29:94:27:2e:58:3c:39:5e:57:09:42:ad:
                    75:ab:db:e4:27:e4:9b:ab:19:4a:28:97:be:7e:f3:
                    a1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E8:47:A3:02:CD:89:1F:D0:FE:AC:D4:43:97:7D:33:17:2F:F9:D2
            X509v3 Authority Key Identifier:
                keyid:94:33:49:FD:B6:DC:0A:F1:5C:D5:74:DA:42:F8:EC:7B:49:DC:0D:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDNJ_bbcCvFc1XTaQvjse0ncDbc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:83:21:e7:61:e6:b1:1f:be:e5:8a:3f:4b:96:b7:e8:14:cd:
         69:b8:cf:aa:95:a8:d1:9e:01:c5:81:86:e3:85:82:95:a6:f0:
         fc:38:a9:21:c8:63:ab:22:ac:06:89:f2:b5:a7:14:bb:4f:4c:
         ee:28:0b:ca:05:6c:63:fb:b1:33:b9:71:52:d9:36:b7:9a:a0:
         03:4f:08:ec:97:21:31:56:9e:90:e8:46:87:21:9d:5b:57:4e:
         49:06:7a:3d:81:e2:7a:f8:5c:8a:10:57:8e:15:05:4a:50:b2:
         61:f0:28:cd:c8:69:4b:09:3a:bb:8c:87:bd:14:fe:1d:e3:b0:
         f6:1c:a4:0f:f9:16:2d:3f:9c:21:24:e0:50:9a:d7:e7:60:4b:
         ea:8d:b4:73:52:f4:0c:df:0d:08:aa:9c:1e:84:d1:42:1a:53:
         3d:51:04:5c:08:5c:07:3b:25:8e:01:e9:f0:ae:e4:e9:ec:0c:
         2a:7d:bc:16:18:57:51:8a:9d:58:d4:60:69:50:aa:38:3c:24:
         7f:d1:46:eb:22:55:70:fc:34:8a:50:06:e2:ec:20:7a:c3:39:
         ac:22:5a:e2:b2:23:41:38:72:b5:7d:22:d5:82:56:c2:6f:8a:
         03:5d:d1:12:b1:0c:37:8c:53:b4:5a:8e:90:b0:14:52:0f:16:
         50:80:5b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:46:11 2026 by rpki-client