Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
File:                     d1_lofYadAjf7tR_FEfjRk2lCyo.mft (raw, json)
Hash identifier:          omCNtMhR3oO4CiOGpBzxQ2Fv8C/zv/2gS+rXIwYqzyI=
Subject key identifier:   C7:F4:35:BB:67:7B:DE:0D:6F:77:2D:72:BC:60:DA:D1:65:2C:51:52
Authority key identifier: 77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A
Certificate issuer:       /CN=A91398A3/serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A
Certificate serial:       054C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
Manifest number:          050C
Signing time:             Thu 24 Sep 2026 23:30:16 +0000
Manifest this update:     Thu 24 Sep 2026 23:30:15 +0000
Manifest next update:     Thu 01 Oct 2026 23:30:15 +0000
Files and hashes:         1: d1_lofYadAjf7tR_FEfjRk2lCyo.crl (hash: bzvAtp8Wt9FhfcZKYjt+iqLumPljkiKipJ1WXq6bk3Q=)
                          2: 5B17230CDE9B11EC9AE23269C4F9AE02.roa (hash: epvnNXqY0NKQ5ppRcRBfLXB95BUJnWRwELFme7G+FAQ=)
                          3: 2D6288A4AE0611F1BEA6785E4B11F970.roa (hash: XFW6SnFPAV4WXehvZc70rBV7iQTFvf7ToBkJjvUsDGg=)
                          4: DEE5E3C49F0511EC9DA80B77C4F9AE02.roa (hash: AXOdS8FamXWGpVb8dVSV9L7c5bFjLM5GeduJrKDw4hE=)
                          5: 5879949ADE9B11EC9AE23269C4F9AE02.roa (hash: mdyDpI7YmoUcuIMuxi6wkeIY7XAJvlplT7aCIokh1+s=)
                          6: 59230714DE9B11EC9AE23269C4F9AE02.roa (hash: RpVDZMT+Nv0Axr1oqRBB0G9hqkFqlnTO9St/IWj3aAQ=)
                          7: 59D82E00DE9B11EC9AE23269C4F9AE02.roa (hash: E0If5HXOtdFlh/a2uN5bsvDoD3Zc0q3mzSBVdzz2GG8=)
                          8: 57B53F64DE9B11EC9AE23269C4F9AE02.roa (hash: YBgWSZPd12SzkSv6+Yvkd/eLTpeiObJO+DoAErrQY6Q=)
                          9: ABDFBE34A75A11F1AF10EB3B3411F970.roa (hash: lcUds1gRLf7ptoRIc8Q0v3/2oJ+IL+a0fqYf/i4R1v8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl
                          rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 23:30:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1356 (0x54c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91398A3, serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A
        Validity
            Not Before: Sep 24 23:30:15 2026 GMT
            Not After : Oct  1 23:30:15 2026 GMT
        Subject: CN=6ab5b288-a03a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:23:bd:36:4a:6f:06:63:9c:8d:f2:1a:1f:ed:
                    c8:57:9f:fe:39:a7:c5:6e:55:75:f9:6b:22:5c:3c:
                    fc:a6:fd:34:69:6a:40:21:cd:ba:1e:34:4e:03:bb:
                    0b:ed:a6:a1:36:e1:bc:69:a3:b6:bf:84:b2:bf:2f:
                    fe:77:16:a3:09:f0:f5:1b:8e:4c:10:55:ad:3a:5c:
                    23:4e:26:85:b2:aa:60:75:47:a9:b9:6d:75:de:df:
                    99:91:54:03:16:d7:27:cb:10:ca:51:09:24:e8:e8:
                    3f:d7:16:df:eb:04:97:08:b3:56:2c:a4:8d:8c:56:
                    c1:e9:37:d3:5b:aa:e2:ad:2b:b8:53:60:01:75:30:
                    42:f5:84:8a:0b:06:3b:db:03:4f:6d:a3:49:e6:15:
                    9f:f3:47:5c:59:eb:4c:6e:98:57:20:2d:8e:bb:97:
                    e1:4a:ce:f3:8f:97:89:e7:ab:0b:53:6d:ce:c7:be:
                    28:bf:5e:f7:5e:d4:3f:e2:6a:39:bf:e8:fb:b3:bd:
                    7d:36:bf:b4:4b:9e:60:13:c0:32:7a:cc:5b:0d:a4:
                    21:e5:eb:d3:b5:1d:d9:f5:92:dd:65:52:58:f3:9a:
                    51:3a:7c:35:8d:2e:9b:c2:73:d9:6a:24:89:b7:30:
                    18:03:e1:7e:92:b8:7f:26:0f:32:3f:72:5f:cb:b6:
                    50:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F4:35:BB:67:7B:DE:0D:6F:77:2D:72:BC:60:DA:D1:65:2C:51:52
            X509v3 Authority Key Identifier:
                keyid:77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:d2:17:83:00:e5:bc:cd:cc:ef:8a:98:9c:a0:97:52:41:ee:
         13:af:61:6d:ae:22:2c:92:a6:ca:3e:30:28:24:e1:ec:3d:9d:
         a8:c9:f7:11:a4:84:4d:f4:93:48:7e:6d:b2:87:3a:12:d0:cd:
         d6:22:5c:a6:14:4d:67:94:5a:46:5b:90:02:ae:79:41:40:7c:
         51:64:31:90:86:de:15:45:4f:10:df:ce:15:00:a2:d5:e9:b5:
         91:9d:c5:5e:f0:9c:9c:1b:9d:79:52:01:77:94:97:8a:5d:15:
         78:26:82:c9:f7:d2:0c:03:09:f2:08:f2:05:5e:ef:fe:39:69:
         88:be:76:fc:63:f4:d9:b9:a0:17:de:0c:38:cf:09:29:b6:b1:
         ef:99:b1:2c:3f:7c:0d:f2:91:06:19:46:95:30:4f:b7:ed:63:
         16:e7:ac:b3:38:93:5c:d0:27:22:49:ee:64:46:f0:c6:ac:a9:
         44:e9:87:14:da:51:c8:04:a2:00:85:93:ca:9c:d1:8e:8b:1a:
         0a:3a:14:be:a7:46:cf:91:e9:6b:cb:53:e7:a2:9a:85:c4:ea:
         b5:7c:de:d4:a6:56:17:57:ad:8e:54:75:c0:ee:3e:dd:5a:4c:
         6a:50:42:3e:39:dc:cb:ef:3f:86:a8:06:fc:34:3c:d6:0d:67:
         82:e0:b4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:53:16 2026 by rpki-client