Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft
File:                     lY1wluouaxa8JKHQRXGdLsUUSX4.mft (raw, json)
Hash identifier:          CBg/M5Ken5V9doHEUavOtEUC/1AFpbzQiAtauiOPPGY=
Subject key identifier:   73:0E:BF:3F:61:DE:2E:19:49:0E:49:B9:05:A5:7A:3C:04:B3:28:5B
Authority key identifier: 95:8D:70:96:EA:2E:6B:16:BC:24:A1:D0:45:71:9D:2E:C5:14:49:7E
Certificate issuer:       /CN=A91E28D8/serialNumber=958D7096EA2E6B16BC24A1D045719D2EC514497E
Certificate serial:       035C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft
Manifest number:          0355
Signing time:             Wed 07 Oct 2026 01:04:05 +0000
Manifest this update:     Wed 07 Oct 2026 01:04:04 +0000
Manifest next update:     Wed 14 Oct 2026 01:04:04 +0000
Files and hashes:         1: lY1wluouaxa8JKHQRXGdLsUUSX4.crl (hash: 6/HqrCrPdcgp61QtxZCZ1406is1YgKETkyiML3MknA8=)
                          2: 01109D481B9011EDBC68484CC4F9AE02.roa (hash: kPjzrM1/eZAzjcP1GRQ3L56tBnU6wnmk/MDv4K8Imog=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.crl
                          rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 01:04:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 860 (0x35c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E28D8, serialNumber=958D7096EA2E6B16BC24A1D045719D2EC514497E
        Validity
            Not Before: Oct  7 01:04:04 2026 GMT
            Not After : Oct 14 01:04:04 2026 GMT
        Subject: CN=6ac59a85-abee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:82:7f:28:99:3b:63:0e:9c:fc:6b:6f:58:3e:
                    42:e4:a4:4e:f7:49:29:d9:83:ef:dd:4d:34:51:d8:
                    fd:d7:09:ed:8b:99:e5:b0:e2:3d:27:01:5e:0f:96:
                    6c:3c:3a:d7:6e:06:db:5d:80:ab:36:62:bb:15:b8:
                    4a:7d:a3:f3:17:8b:04:b7:84:1c:ee:b0:9c:54:0d:
                    fd:5f:16:b2:b7:e4:8a:39:b2:6e:d2:b7:69:7e:7b:
                    48:89:55:0c:28:d5:e2:c8:fb:16:d5:d2:b1:07:c4:
                    1e:78:6c:39:28:f0:c7:e1:d6:48:08:a3:6b:a5:f8:
                    34:b5:00:fe:06:58:74:a5:27:cd:82:14:d3:03:bd:
                    d9:e4:21:97:c3:e4:48:2c:d4:9c:15:92:ea:05:1b:
                    18:f7:7c:24:57:7b:5f:62:e5:54:3c:b1:ce:49:37:
                    d2:ee:e0:15:79:78:95:3f:65:01:12:72:e9:12:d8:
                    c0:4a:d4:5d:8a:03:ab:e0:5b:74:3f:ba:b0:e9:ce:
                    27:ca:fe:ba:14:ee:30:16:30:34:e1:5b:bc:8c:49:
                    b0:cb:21:a4:a0:02:46:71:1b:a6:1f:c4:1c:8f:1b:
                    c1:57:70:f3:ee:a8:b8:2e:a3:d1:18:bc:2d:54:e6:
                    f9:ac:7e:f0:c7:f2:d0:62:42:b5:e3:5e:18:2f:f3:
                    5f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:0E:BF:3F:61:DE:2E:19:49:0E:49:B9:05:A5:7A:3C:04:B3:28:5B
            X509v3 Authority Key Identifier:
                keyid:95:8D:70:96:EA:2E:6B:16:BC:24:A1:D0:45:71:9D:2E:C5:14:49:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:a4:f6:e0:2c:fe:83:d9:d8:b4:59:ff:c3:41:7e:dc:62:9b:
         f3:bb:7f:c1:6e:e8:4e:92:c2:7f:2e:16:39:b1:52:1e:89:1f:
         91:ff:8c:aa:8d:db:6b:d3:5d:0b:94:03:05:b7:a0:46:1f:35:
         61:1e:e1:c1:a2:39:7d:e6:23:d6:2a:d7:a8:89:32:dd:d7:ef:
         c0:7c:f4:4d:d0:73:6c:bb:ee:8d:12:d6:71:25:ef:47:19:b9:
         28:c0:4e:e9:8e:3c:f3:48:ad:b6:1c:47:0f:91:90:0c:09:dc:
         f9:4c:70:49:e3:49:a7:93:61:76:e5:c5:37:8a:65:b8:df:6e:
         4a:2a:16:1a:01:a9:2d:b4:ce:85:8b:c2:af:c7:40:24:e5:09:
         d2:62:8c:7b:af:6e:4c:87:0c:1b:74:bb:50:b3:02:e9:37:2a:
         fd:61:1b:7c:d4:33:1d:f6:48:c5:33:d7:a3:a8:cb:d9:a6:4a:
         50:ab:b8:82:5f:d4:b9:b1:d3:e0:0c:bc:49:d6:a0:89:60:c0:
         99:92:76:90:10:23:c2:c1:38:f9:4b:1c:ee:c3:0a:8a:09:3e:
         82:0e:fa:5a:49:06:70:c5:32:26:44:18:27:b6:fd:5b:6c:83:
         01:56:02:37:1c:4d:3c:d1:13:c3:86:62:0a:ef:cb:8a:7f:c5:
         22:59:df:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 22:46:55 2026 by rpki-client