Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/LtaWwj0zRedLDXNOJLcQqniq5fo.mft
File:                     LtaWwj0zRedLDXNOJLcQqniq5fo.mft (raw, json)
Hash identifier:          kYVWJnWYERhfwWdtDTk6PgBjgk7U0w3CDALi1ET49UM=
Subject key identifier:   15:6E:BE:8D:65:A8:33:63:3E:D5:66:EC:22:99:35:E9:3F:2B:DE:91
Authority key identifier: 2E:D6:96:C2:3D:33:45:E7:4B:0D:73:4E:24:B7:10:AA:78:AA:E5:FA
Certificate issuer:       /CN=A913714B/serialNumber=2ED696C23D3345E74B0D734E24B710AA78AAE5FA
Certificate serial:       B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtaWwj0zRedLDXNOJLcQqniq5fo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/LtaWwj0zRedLDXNOJLcQqniq5fo.mft
Manifest number:          B4
Signing time:             Sun 11 Oct 2026 07:38:56 +0000
Manifest this update:     Sun 11 Oct 2026 07:38:55 +0000
Manifest next update:     Sun 18 Oct 2026 07:38:55 +0000
Files and hashes:         1: LtaWwj0zRedLDXNOJLcQqniq5fo.crl (hash: xKldsFL/eYpAioSnmd4vZpACy2iFBfjXMBYuLeha1tw=)
                          2: 3JtdXwUFgPneqsBaIyOz_Osvdbk.asa (hash: GjCGEQbDNIIqzWwyOaWuf7snXD0olP2aHXwWiud9La8=)
                          3: 5D7ACB26B90811F0ADC46B62C4F9AE02.roa (hash: Fmp31a6vqENn/r0IUJgnXGUeFpusRkGciQ7f9f+aliM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/LtaWwj0zRedLDXNOJLcQqniq5fo.crl
                          rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/LtaWwj0zRedLDXNOJLcQqniq5fo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtaWwj0zRedLDXNOJLcQqniq5fo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 07:38:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185 (0xb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913714B, serialNumber=2ED696C23D3345E74B0D734E24B710AA78AAE5FA
        Validity
            Not Before: Oct 11 07:38:55 2026 GMT
            Not After : Oct 18 07:38:55 2026 GMT
        Subject: CN=6acb3d10-c5a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:09:7a:2e:1c:f7:59:6a:3e:79:6b:da:c7:fe:
                    63:05:ed:dc:79:44:81:71:34:e4:a5:a4:77:61:8f:
                    15:d3:8a:15:75:85:35:d4:66:55:05:c4:dd:ab:86:
                    45:e9:79:b8:82:ac:a4:f2:ea:3b:cc:f5:3f:ea:97:
                    c8:2f:0b:c6:8d:2d:d7:3f:f9:21:96:22:a1:26:13:
                    e0:f0:46:a4:3d:1d:5b:60:0f:c5:3d:56:f8:4d:c9:
                    24:fa:34:e2:7d:c5:50:15:6f:eb:d8:7c:da:5f:50:
                    a9:01:64:4c:d0:03:b5:99:23:d3:44:bd:f3:e3:ee:
                    c4:5c:9e:18:78:40:43:4e:1e:a6:63:a8:92:fe:58:
                    24:66:67:00:27:e4:6e:b1:d1:e7:3f:7a:f1:6a:2d:
                    e7:7e:a0:f2:f8:18:d7:5c:08:9a:06:25:8c:7d:83:
                    64:4c:64:48:7d:72:71:49:a0:83:62:1f:f4:b4:7e:
                    dc:02:2c:07:58:4a:ba:c1:b0:3b:b0:8b:ea:dc:b9:
                    83:c6:ca:35:fe:c8:5f:ab:0d:45:e4:99:c2:83:67:
                    9e:64:80:fb:2e:89:ad:4b:d3:4e:e8:5b:ac:04:86:
                    1d:ee:3d:41:b8:fa:d6:a5:c8:ab:b8:5a:54:c6:ff:
                    c9:50:48:f1:c5:1d:de:42:46:36:dc:94:42:7e:eb:
                    d7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:6E:BE:8D:65:A8:33:63:3E:D5:66:EC:22:99:35:E9:3F:2B:DE:91
            X509v3 Authority Key Identifier:
                keyid:2E:D6:96:C2:3D:33:45:E7:4B:0D:73:4E:24:B7:10:AA:78:AA:E5:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/LtaWwj0zRedLDXNOJLcQqniq5fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtaWwj0zRedLDXNOJLcQqniq5fo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/LtaWwj0zRedLDXNOJLcQqniq5fo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:20:79:94:16:73:a9:db:1f:18:57:c3:fe:08:cf:c5:53:80:
         56:ab:7d:4b:f5:10:a0:d7:bf:c8:53:b8:b8:99:00:0e:d8:de:
         37:c8:8e:11:68:4f:29:08:63:c6:96:7d:f6:10:1c:0f:4e:d0:
         6f:1c:8a:ec:56:82:87:ee:62:30:86:a1:0e:08:23:73:0a:c9:
         24:0a:b5:6d:b6:3f:c2:4b:32:d1:fe:b7:fc:43:ab:f1:11:d2:
         e3:dc:14:2e:4d:b0:c9:96:b0:ee:19:ea:08:64:55:53:b4:ba:
         f5:24:2c:f4:58:9b:84:38:93:85:b6:f6:af:59:32:e5:c7:4a:
         c1:17:73:28:2d:16:cd:6b:e4:d2:78:d6:fb:c1:3c:6b:d5:a6:
         2d:5b:a4:5e:71:7a:f4:33:79:74:b9:4c:d5:12:bc:04:9c:fd:
         78:d4:2a:9e:af:de:17:1e:19:67:68:dd:54:c9:46:e8:83:b3:
         5f:47:40:eb:81:54:29:ff:ec:34:d2:da:f7:57:47:44:4f:b3:
         d4:88:12:4d:03:a5:9f:d3:8d:26:1e:28:b4:57:38:95:4d:7b:
         51:23:4b:a2:c5:2b:89:86:7f:c3:70:c9:1f:de:ae:d4:64:47:
         8d:48:89:2c:4a:d8:7e:80:3e:bb:d8:de:09:55:07:8a:f1:49:
         34:d7:78:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:20:20 2026 by rpki-client