Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
File:                     LnKDqP3Vzws9n6or6XQogZiRk6U.mft (raw, json)
Hash identifier:          AA0tRYH+b3kGw021vfwkg+P/XizrZEOoeJBEbWjlVEM=
Subject key identifier:   01:F4:BD:3B:5A:39:52:5C:B1:DE:00:89:87:83:EA:0F:47:36:F0:42
Authority key identifier: 2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5
Certificate issuer:       /CN=A91DFADF/serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5
Certificate serial:       0AB5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
Manifest number:          0AA1
Signing time:             Fri 02 Oct 2026 19:48:45 +0000
Manifest this update:     Fri 02 Oct 2026 19:48:44 +0000
Manifest next update:     Fri 09 Oct 2026 19:48:44 +0000
Files and hashes:         1: LnKDqP3Vzws9n6or6XQogZiRk6U.crl (hash: TarHbjPhw512mgaDUS1B8ZNl631ASvFFFwdbx0Cd/Zo=)
                          2: 651384A6766811EF96E4115EC4F9AE02.roa (hash: 4tvOJ0DlZvwroxMkIv2YzecHFGQeqL4hT/QTBep3keQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl
                          rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 19:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2741 (0xab5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFADF, serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5
        Validity
            Not Before: Oct  2 19:48:44 2026 GMT
            Not After : Oct  9 19:48:44 2026 GMT
        Subject: CN=6ac00a9d-0f5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b2:41:7f:04:58:6e:70:45:a2:1b:9b:23:69:
                    7a:3a:56:fe:13:95:6d:94:80:7c:64:48:fc:0e:c6:
                    9f:91:9b:30:db:a6:11:e2:4f:24:35:3a:67:84:ad:
                    09:92:04:f5:08:3e:f5:0b:ca:a3:47:1a:bc:f9:dd:
                    03:1b:88:da:4a:3b:8f:9b:a6:dd:6b:ea:a9:1a:56:
                    f3:1b:4d:f7:58:0f:19:a0:c0:3f:84:c7:f1:02:3e:
                    51:02:9c:eb:8d:69:e0:a8:35:63:41:33:cc:b6:99:
                    ef:47:04:f5:e0:eb:a5:4b:4e:66:27:f9:d0:59:5a:
                    95:e6:7e:ff:ad:4a:ee:1b:2e:d5:30:96:37:56:78:
                    6c:44:15:20:c7:7c:7f:85:1a:94:dc:01:ea:26:be:
                    ba:89:e8:95:f3:96:ed:81:38:f9:08:56:3a:0c:46:
                    0f:5a:7f:df:ed:ca:64:c8:6e:e3:bc:c6:80:52:7e:
                    23:7e:ad:72:50:5d:05:dd:b4:4e:02:d8:bb:10:b6:
                    da:b5:ce:ef:bf:38:30:4a:18:ef:8c:ad:2c:b0:64:
                    23:a0:71:fb:65:89:d3:5c:21:30:31:66:7c:bf:50:
                    09:e1:de:3c:2b:66:2c:7d:ea:bc:ee:3a:18:8f:6c:
                    e3:d6:6e:f9:26:52:65:8f:c8:99:12:14:4a:b3:58:
                    cd:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F4:BD:3B:5A:39:52:5C:B1:DE:00:89:87:83:EA:0F:47:36:F0:42
            X509v3 Authority Key Identifier:
                keyid:2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:b4:97:34:07:05:cd:0a:3a:15:2a:27:43:ee:94:8a:e1:7b:
         39:80:4f:10:c2:70:0f:d6:f7:0a:c3:b4:f0:25:d6:d1:97:5b:
         4f:49:97:b0:27:7c:53:68:9f:26:ec:93:d9:60:fd:32:03:b2:
         56:21:2b:db:6d:3e:dc:d4:1b:5e:29:ec:9f:dc:73:17:1c:72:
         f8:8f:64:57:64:8e:17:97:b4:9d:b9:ff:10:99:2b:49:97:f2:
         a0:4d:a1:4e:be:23:88:21:c1:3c:55:98:3f:15:d1:9a:99:29:
         03:0c:30:ba:d9:9c:d6:f4:6c:96:a3:56:9e:67:17:57:bc:5f:
         7f:2b:14:16:0b:78:9f:6f:1a:ac:ef:4f:b7:4b:b1:cd:02:43:
         b6:ec:81:f6:bf:2a:bd:5b:b3:70:49:a5:1c:7f:23:95:9c:d5:
         30:88:52:0c:a6:4f:fb:93:5f:3e:2d:19:2d:38:c0:4e:02:7b:
         9e:a7:6e:e0:b9:92:79:e6:fe:12:21:5a:34:4e:58:25:43:f5:
         c6:14:30:0d:1d:9f:20:f9:05:02:9a:dc:73:2e:d6:ab:19:7b:
         82:fb:f2:99:f4:91:f3:02:a5:8c:65:6b:81:5a:8f:f3:37:f5:
         39:1f:c0:fb:a0:88:ca:51:80:0e:7d:7a:0c:c4:3d:43:6b:d8:
         81:ce:56:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:05:36 2026 by rpki-client