Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft
File:                     lQfxHRNjrFs5Lzb17zgixc_NaPk.mft (raw, json)
Hash identifier:          jYuP+LcEer1WHbvGOQWHNNp74zivQyAVa4l2Vq3W0+Q=
Subject key identifier:   E0:16:95:87:1A:C2:93:D3:E5:29:3D:99:33:58:DF:9C:58:50:52:DB
Authority key identifier: 95:07:F1:1D:13:63:AC:5B:39:2F:36:F5:EF:38:22:C5:CF:CD:68:F9
Certificate issuer:       /CN=A91EE8AC/serialNumber=9507F11D1363AC5B392F36F5EF3822C5CFCD68F9
Certificate serial:       02D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQfxHRNjrFs5Lzb17zgixc_NaPk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft
Manifest number:          04AD
Signing time:             Mon 05 Oct 2026 01:33:10 +0000
Manifest this update:     Mon 05 Oct 2026 01:33:09 +0000
Manifest next update:     Mon 12 Oct 2026 01:33:09 +0000
Files and hashes:         1: lQfxHRNjrFs5Lzb17zgixc_NaPk.crl (hash: udeYuSO6/ORbsX9HsDtlGTbTE9THJTe3LnAgTB5Fe6g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.crl
                          rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQfxHRNjrFs5Lzb17zgixc_NaPk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 01:33:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 720 (0x2d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE8AC, serialNumber=9507F11D1363AC5B392F36F5EF3822C5CFCD68F9
        Validity
            Not Before: Oct  5 01:33:09 2026 GMT
            Not After : Oct 12 01:33:09 2026 GMT
        Subject: CN=6ac2fe56-b510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2d:ed:a1:5d:af:44:94:f8:a2:ec:77:45:b6:
                    85:f1:a7:3f:70:60:3b:11:ec:31:66:5b:e9:48:b8:
                    37:86:df:ea:2c:ed:81:7b:c6:66:94:eb:1d:72:84:
                    48:2a:9a:5e:56:30:4d:41:50:f8:2d:77:34:25:64:
                    13:ac:eb:c0:7d:b3:e7:40:10:94:1b:88:dd:97:8c:
                    82:79:24:5f:a3:20:3a:de:83:2a:9f:d8:2f:51:88:
                    68:a0:53:f0:35:28:7a:95:3b:39:a5:43:7f:54:7f:
                    ce:2f:22:4c:0e:3c:a8:d6:4b:77:c9:78:1a:e0:0c:
                    a2:c7:54:9d:f9:98:31:bb:86:69:92:8b:52:2a:a4:
                    f0:90:27:8d:f0:2a:d1:0a:d2:44:5c:20:57:12:89:
                    bc:03:fb:37:90:c9:a1:ef:80:b1:a5:91:c9:ff:f3:
                    1d:f4:7c:68:d6:69:ce:8a:97:88:61:20:7e:38:fd:
                    5b:c3:d1:73:56:5d:8b:8b:ad:cf:77:4b:38:ff:26:
                    b1:81:99:ce:75:57:05:35:0a:2c:0c:e4:ee:76:f7:
                    92:ad:c8:6c:34:ae:7e:be:94:79:45:d7:6f:fd:ec:
                    df:c5:ae:19:b7:c0:1f:91:08:c4:45:f0:2a:41:02:
                    c7:77:5f:f4:18:c9:ef:bf:ba:0b:24:3f:4f:09:69:
                    7d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:16:95:87:1A:C2:93:D3:E5:29:3D:99:33:58:DF:9C:58:50:52:DB
            X509v3 Authority Key Identifier:
                keyid:95:07:F1:1D:13:63:AC:5B:39:2F:36:F5:EF:38:22:C5:CF:CD:68:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQfxHRNjrFs5Lzb17zgixc_NaPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:86:cc:e9:45:c6:d5:fc:74:7b:4d:e1:af:14:22:00:a0:66:
         72:ba:eb:d9:3c:88:6e:29:9c:46:35:6b:d4:bb:4f:32:81:3e:
         e4:7d:4f:45:9d:30:a4:bc:47:da:64:f6:e8:f1:a9:e7:74:b9:
         6f:0b:b0:94:cc:c1:67:5a:f6:64:f7:f7:fe:79:7c:2a:b9:85:
         63:39:85:30:c7:2a:3f:8b:03:14:34:37:97:29:25:51:11:ad:
         bb:48:dd:1a:0d:ea:88:25:61:9e:97:0d:12:20:5d:ae:89:c4:
         1c:e8:d4:f6:2f:9f:e7:9c:b1:4b:4d:7c:7e:02:71:ef:b5:71:
         72:e6:25:94:95:38:5f:96:58:2d:19:ec:a9:b2:d3:a1:fc:a8:
         9b:2c:2b:bc:39:14:4e:18:d2:fd:cf:4d:20:8c:2a:cf:e7:6d:
         5b:c1:18:85:8e:d7:1b:cc:76:c0:27:b6:7b:9a:0f:bd:08:a8:
         1b:16:be:43:9a:73:80:33:91:a2:4f:a2:dc:a8:89:8a:e2:86:
         ca:e9:e2:9a:7d:30:41:74:fa:44:9e:df:0a:01:81:b1:a6:d0:
         0d:70:ea:e8:b8:51:d2:2b:64:ca:a8:29:31:f4:2e:e2:99:44:
         a1:ea:50:b2:12:7c:99:de:79:a3:d4:fa:43:48:4c:df:ea:b9:
         93:9f:23:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:59:35 2026 by rpki-client