Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft
File:                     Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft (raw, json)
Hash identifier:          FCWAztlRnPj62h/2wuVTxj/3hNUjyrSuDHPKL6eKTlU=
Subject key identifier:   58:62:79:FE:50:3C:47:3B:97:D6:32:CB:9C:89:64:50:26:A7:DB:54
Authority key identifier: 2E:8D:AF:49:E2:7E:4F:C1:2B:E0:5E:F7:DF:1A:82:BB:28:71:26:A1
Certificate issuer:       /CN=A91325FD/serialNumber=2E8DAF49E27E4FC12BE05EF7DF1A82BB287126A1
Certificate serial:       3605
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft
Manifest number:          35C4
Signing time:             Sun 20 Sep 2026 14:15:38 +0000
Manifest this update:     Sun 20 Sep 2026 14:15:37 +0000
Manifest next update:     Sun 27 Sep 2026 14:15:37 +0000
Files and hashes:         1: Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl (hash: jfhjfqbVJ15Wjysz9mlGScxrDd3dSZPo2hw3rO32/aI=)
                          2: 6A45D74E118811EE88E9FE46C4F9AE02.roa (hash: mRRQUvKxyPfmPaRjVyhQzZiLqbyD63uPoSK3GiULemA=)
                          3: 58C5CA92AF9411EE9774D74CC4F9AE02.roa (hash: aMHBQ0J7YfPV7IMIB5NQWhqNvs3O4UzTOKWMInuGuiI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl
                          rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 14:15:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13829 (0x3605)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91325FD, serialNumber=2E8DAF49E27E4FC12BE05EF7DF1A82BB287126A1
        Validity
            Not Before: Sep 20 14:15:37 2026 GMT
            Not After : Sep 27 14:15:37 2026 GMT
        Subject: CN=6aafea8a-7593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:27:19:0a:c5:a0:be:23:15:15:f2:4b:5e:e4:
                    ab:0d:5b:e9:26:06:8d:92:67:ae:9b:ae:2c:b2:bc:
                    0b:52:30:18:54:24:db:28:48:a8:89:c4:80:ac:ef:
                    68:63:80:92:07:77:b7:58:6a:f6:a4:83:e1:93:37:
                    71:d1:78:00:78:82:2c:b0:63:e6:0c:b5:4a:cf:f4:
                    02:44:0b:1b:e6:d6:ab:5b:0b:e8:06:05:4b:2f:36:
                    db:51:00:09:0d:43:03:d8:b8:ce:e3:57:c6:e6:4d:
                    d4:70:aa:5e:ad:2f:ea:76:3b:c4:5c:47:2b:26:ea:
                    55:db:0f:5b:f0:d7:37:91:93:4a:cf:05:3c:fe:ce:
                    da:fe:40:7a:b2:fb:bf:01:a8:86:a1:8e:75:e2:ac:
                    6a:c9:b1:d4:f7:f4:30:82:1e:40:4f:9a:55:68:ab:
                    af:de:a6:f8:8f:d7:d5:ca:21:e9:41:c0:fa:89:2f:
                    ec:81:18:5e:f7:7a:69:68:b8:0e:04:3b:93:a3:5b:
                    73:a8:f2:00:31:65:3b:ad:bb:7f:f5:98:02:1f:25:
                    d1:09:e8:ee:1b:ec:9a:7b:7e:e2:44:45:44:df:3c:
                    9e:fc:71:52:a3:3c:b6:6e:1e:40:7c:b7:de:20:31:
                    fc:3d:af:41:a4:09:10:79:e0:0e:3f:d3:1a:e5:e4:
                    38:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:62:79:FE:50:3C:47:3B:97:D6:32:CB:9C:89:64:50:26:A7:DB:54
            X509v3 Authority Key Identifier:
                keyid:2E:8D:AF:49:E2:7E:4F:C1:2B:E0:5E:F7:DF:1A:82:BB:28:71:26:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:dd:4f:9d:72:88:5d:b1:28:c8:04:01:64:c4:05:b6:43:b2:
         da:5b:20:b6:f7:d6:40:ca:8a:e1:a6:ca:c0:75:60:cf:d5:90:
         73:9f:0e:ab:91:e5:f7:ea:1c:8e:79:91:90:7f:50:00:09:1d:
         ba:1b:c7:68:c0:88:74:36:0f:c3:23:39:d3:a7:90:9d:c4:33:
         19:c3:6f:eb:b3:3d:6c:4a:1d:ba:e0:1f:c9:16:f2:61:7a:8d:
         44:ef:90:d6:cc:c9:47:88:7b:1b:28:d1:cb:18:47:ce:83:02:
         d4:48:a9:59:cb:41:13:3a:6c:fd:e8:57:d6:80:79:2c:05:4b:
         ae:1d:ba:7f:00:6b:20:41:91:69:68:4c:19:39:9a:94:2a:41:
         01:51:ee:86:39:13:c2:73:bb:8f:1b:32:a1:24:9d:0b:ff:1c:
         0f:00:10:e6:a5:df:08:6f:80:94:94:57:03:11:73:d0:68:e7:
         2c:fc:f5:84:c7:d8:b9:2d:d4:17:a8:be:36:24:3e:77:be:2f:
         b2:54:a5:ea:ab:69:84:83:81:18:a6:fb:96:ce:d4:1a:7b:47:
         5a:5b:fd:ad:4f:18:c4:86:c8:30:d2:a1:ea:41:f0:24:13:40:
         c1:f4:a5:a8:be:43:e9:81:d6:a4:4f:b0:b5:05:ce:5c:fb:d8:
         d8:35:b9:62
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzI1RkQxMTAvBgNVBAUTKDJFOERBRjQ5RTI3RTRGQzEyQkUwNUVGN0RGMUE4MkJC
Mjg3MTI2QTEwHhcNMjYwOTIwMTQxNTM3WhcNMjYwOTI3MTQxNTM3WjAYMRYwFAYD
VQQDEw02YWFmZWE4YS03NTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvicZCsWgviMVFfJLXuSrDVvpJgaNkmeum64ssrwLUjAYVCTbKEioicSArO9o
Y4CSB3e3WGr2pIPhkzdx0XgAeIIssGPmDLVKz/QCRAsb5tarWwvoBgVLLzbbUQAJ
DUMD2LjO41fG5k3UcKperS/qdjvEXEcrJupV2w9b8Nc3kZNKzwU8/s7a/kB6svu/
AaiGoY514qxqybHU9/Qwgh5AT5pVaKuv3qb4j9fVyiHpQcD6iS/sgRhe93ppaLgO
BDuTo1tzqPIAMWU7rbt/9ZgCHyXRCejuG+yae37iREVE3zye/HFSozy2bh5AfLfe
IDH8Pa9BpAkQeeAOP9Ma5eQ44wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFhief5Q
PEc7l9Yyy5yJZFAmp9tUMB8GA1UdIwQYMBaAFC6Nr0nifk/BK+Be998agrsocSah
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjVGRC9CQ0U0RDEwQTFE
NjgxMUUyQUQ2NDk0QTUwOEIwMkNEMi9MbzJ2U2VKLVQ4RXI0RjczM3hxQ3V5aHhK
cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xvMnZTZUotVDhFcjRGNzMzeHFDdXloeEpxRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MjVGRC9CQ0U0RDEwQTFENjgxMUUyQUQ2NDk0QTUwOEIwMkNEMi9MbzJ2U2VKLVQ4
RXI0RjczM3hxQ3V5aHhKcUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARt1PnXKIXbEoyAQBZMQFtkOy2lsgtvfWQMqK4abKwHVgz9WQc58Oq5Hl9+oc
jnmRkH9QAAkduhvHaMCIdDYPwyM506eQncQzGcNv67M9bEoduuAfyRbyYXqNRO+Q
1szJR4h7GyjRyxhHzoMC1EipWctBEzps/ehX1oB5LAVLrh26fwBrIEGRaWhMGTma
lCpBAVHuhjkTwnO7jxsyoSSdC/8cDwAQ5qXfCG+AlJRXAxFz0GjnLPz1hMfYuS3U
F6i+NiQ+d74vslSl6qtphIOBGKb7ls7UGntHWlv9rU8YxIbIMNKh6kHwJBNAwfSl
qL5D6YHWpE+wtQXOXPvY2DW5Yg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 05:17:24 2026 by rpki-client