Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft
File:                     LnNTksaGuNjciMDM1Zvyrvun6LA.mft (raw, json)
Hash identifier:          X6oUhbXzmzkQUuDHHjVYZvt8OdeBYwgGEyPty1+Ea10=
Subject key identifier:   7E:FA:2A:CE:47:0E:0F:7A:64:4B:C8:CD:6D:F6:E5:28:C4:35:CC:BF
Authority key identifier: 2E:73:53:92:C6:86:B8:D8:DC:88:C0:CC:D5:9B:F2:AE:FB:A7:E8:B0
Certificate issuer:       /CN=A911D340/serialNumber=2E735392C686B8D8DC88C0CCD59BF2AEFBA7E8B0
Certificate serial:       0C39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft
Manifest number:          0C2D
Signing time:             Sat 10 Oct 2026 18:50:24 +0000
Manifest this update:     Sat 10 Oct 2026 18:50:23 +0000
Manifest next update:     Sat 17 Oct 2026 18:50:23 +0000
Files and hashes:         1: LnNTksaGuNjciMDM1Zvyrvun6LA.crl (hash: kfc14uiRIO2SxyHjXGFyAlPtpZjKQ3LlSJojH+cCCVM=)
                          2: RonV_ZH7gffq70SwkE-oVNNE2fs.asa (hash: ahDjjUm2Eo57aaM+ItoTT6+ClF9gzXp2JEEPRseQol4=)
                          3: 14B2A85C3DA611EAAD093F5EC4F9AE02.roa (hash: 57IyN+j5ROGuU5ynfQIQti4jxcGtYYtyy6B0K7wr+nU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.crl
                          rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 18:50:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3129 (0xc39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D340, serialNumber=2E735392C686B8D8DC88C0CCD59BF2AEFBA7E8B0
        Validity
            Not Before: Oct 10 18:50:23 2026 GMT
            Not After : Oct 17 18:50:23 2026 GMT
        Subject: CN=6aca88f0-fa75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d8:ec:4d:8e:91:80:6e:79:58:e1:2c:03:95:
                    03:b0:c3:ef:d9:c4:62:22:bc:44:91:63:ee:72:86:
                    69:2b:03:3e:9e:ec:be:bb:0c:a9:38:6a:e5:67:e3:
                    65:00:2e:8e:7d:99:83:26:89:d6:8f:5c:80:bf:0e:
                    50:27:86:db:fb:cc:b2:19:a4:e4:75:bc:b9:aa:57:
                    34:52:58:b7:a2:6b:81:97:36:58:eb:e3:d8:39:5b:
                    09:96:5d:c4:f6:28:ff:53:08:ba:10:cd:5e:e3:26:
                    45:1c:2d:1e:fd:f3:28:5a:96:73:2e:52:f1:4a:33:
                    b7:03:e4:8c:b6:55:fa:08:97:ad:85:6e:94:45:82:
                    72:21:69:36:60:27:47:d9:7d:3c:32:74:7d:7e:12:
                    68:00:79:91:61:29:c2:d5:22:1b:59:67:8c:94:b2:
                    52:80:ed:f8:7a:2b:d6:0e:bb:5f:9a:00:47:b9:45:
                    6e:df:8d:ee:66:11:e5:e7:0c:65:18:1a:c2:74:f6:
                    df:86:5c:15:4b:c0:2a:24:58:da:ea:97:e2:dd:36:
                    4d:81:53:3f:73:44:43:75:46:65:84:49:69:a0:e7:
                    a9:e2:8e:73:7a:d7:55:70:ad:f7:cd:76:0c:58:2c:
                    87:6d:97:1d:e8:9d:bc:a2:fa:1d:d9:16:8a:93:72:
                    8a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:FA:2A:CE:47:0E:0F:7A:64:4B:C8:CD:6D:F6:E5:28:C4:35:CC:BF
            X509v3 Authority Key Identifier:
                keyid:2E:73:53:92:C6:86:B8:D8:DC:88:C0:CC:D5:9B:F2:AE:FB:A7:E8:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:6f:2a:61:bd:6d:e2:2f:b8:cf:cb:78:35:59:d8:da:eb:28:
         db:54:2f:8b:a4:05:2d:e8:cd:d2:03:d4:04:85:b8:9c:35:61:
         45:90:77:f7:4b:21:e8:31:b7:2e:29:b3:8a:f7:cf:60:b1:71:
         4a:5d:01:e9:65:6c:5d:f0:15:08:d0:ce:e2:2f:9b:64:0c:70:
         13:be:b8:16:50:fd:72:58:66:59:1a:a1:ad:b4:7d:30:ad:fb:
         ed:39:b7:0c:64:73:d3:2a:d7:1b:b4:a0:56:eb:74:9c:a9:04:
         91:c9:ff:ab:5e:b7:94:48:4f:bd:86:aa:01:12:61:ce:60:f6:
         6f:b5:be:fb:e1:6e:ce:42:31:d9:c4:d5:d8:82:ec:f1:97:85:
         3f:f4:c4:f2:0d:8f:f9:b9:e6:da:2e:70:79:28:c4:5e:49:53:
         c2:90:f2:2f:91:89:41:8a:4b:d3:60:7d:0c:4c:4b:69:d7:06:
         d4:ee:9e:56:0c:c2:fa:8c:78:4a:f4:5f:ce:a1:ed:00:c9:83:
         a5:4f:7d:9a:67:2e:0d:73:06:85:6a:4f:71:e4:39:44:0d:d2:
         19:e7:de:f9:38:74:8b:a5:ad:7d:59:2d:bc:ad:07:b0:e2:ef:
         1a:01:75:0c:71:d0:97:ce:ee:29:cf:39:46:8c:0b:66:71:44:
         62:3f:08:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:31:42 2026 by rpki-client