Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft
File:                     LzabRI0hcVlrosk82-JY6vMxdZQ.mft (raw, json)
Hash identifier:          vy+Obr5uKTl2M3ltCmnFQQyN35W6XhwEThplhK3RPWA=
Subject key identifier:   D4:0C:5C:40:E2:DB:79:A7:F7:71:F2:87:D5:CD:62:D8:68:53:BE:D4
Authority key identifier: 2F:36:9B:44:8D:21:71:59:6B:A2:C9:3C:DB:E2:58:EA:F3:31:75:94
Certificate issuer:       /CN=A9161A5A/serialNumber=2F369B448D2171596BA2C93CDBE258EAF3317594
Certificate serial:       07C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LzabRI0hcVlrosk82-JY6vMxdZQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft
Manifest number:          07B4
Signing time:             Thu 08 Oct 2026 21:38:49 +0000
Manifest this update:     Thu 08 Oct 2026 21:38:49 +0000
Manifest next update:     Thu 15 Oct 2026 21:38:49 +0000
Files and hashes:         1: LzabRI0hcVlrosk82-JY6vMxdZQ.crl (hash: zMxyDD53ec1VpKZxync5J2+QHPBbGLaxzt41QzfRIik=)
                          2: 79D611D265E711EBB6FD8A0DC4F9AE02.roa (hash: lSWEMS2uEe71aU2Bsm1/P/1Jz0cRE4RsE/WEknnL1vU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.crl
                          rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LzabRI0hcVlrosk82-JY6vMxdZQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 21:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1991 (0x7c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161A5A, serialNumber=2F369B448D2171596BA2C93CDBE258EAF3317594
        Validity
            Not Before: Oct  8 21:38:49 2026 GMT
            Not After : Oct 15 21:38:49 2026 GMT
        Subject: CN=6ac80d69-3c9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2c:ae:ea:e3:e9:cd:1a:01:b7:16:17:51:bf:
                    4e:f1:27:93:4c:ca:15:07:47:7c:66:44:7d:f1:23:
                    c8:ad:a6:d5:b7:94:e4:da:3a:1f:63:1d:a9:b8:b3:
                    6c:14:21:d6:ab:81:82:21:44:e0:c9:24:bf:93:ae:
                    81:08:cd:4f:d6:ce:af:b7:a3:52:73:93:4b:f1:17:
                    3f:34:41:9b:fc:c0:24:4a:71:19:99:9c:ce:20:3c:
                    dc:28:24:07:76:f2:c4:9b:5f:e9:b0:eb:12:5c:69:
                    f9:e0:ad:68:c2:07:94:7a:81:69:db:d1:a3:c1:5e:
                    5d:fb:ff:7d:55:76:a0:ee:ae:4f:95:c5:ed:5a:29:
                    8a:60:55:d6:ce:13:5c:3c:b6:25:e6:35:9e:3a:16:
                    ae:51:01:df:95:13:75:47:c2:f7:58:45:12:6b:ee:
                    0e:17:e1:82:99:b4:e7:5e:9a:3f:29:57:c8:04:e3:
                    5c:d1:48:fe:ef:0f:ef:7c:dd:b8:d7:3f:15:25:de:
                    30:34:95:52:b7:02:90:70:49:35:f0:f5:4d:3c:98:
                    ac:32:0e:aa:e9:69:bd:90:da:85:58:68:c6:49:49:
                    f3:c8:61:48:3b:93:c6:64:72:08:a7:d3:dc:a8:26:
                    75:9e:52:84:8f:bd:70:0c:ea:c7:b6:4e:76:d1:22:
                    49:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:0C:5C:40:E2:DB:79:A7:F7:71:F2:87:D5:CD:62:D8:68:53:BE:D4
            X509v3 Authority Key Identifier:
                keyid:2F:36:9B:44:8D:21:71:59:6B:A2:C9:3C:DB:E2:58:EA:F3:31:75:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LzabRI0hcVlrosk82-JY6vMxdZQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:d7:bd:98:4f:6a:0e:0b:b3:80:55:5c:fc:75:e0:96:ff:8d:
         7f:5d:7f:a4:3d:86:b1:d1:8d:8b:d9:38:31:d4:8b:6f:e5:21:
         d5:ae:53:32:83:9f:20:f2:5d:5e:9d:0e:42:c3:81:f5:5e:98:
         3d:66:8a:56:63:85:ac:df:77:6d:75:57:5f:44:2a:a7:6c:ac:
         b1:a6:fc:8f:37:6c:b8:79:4b:d6:c0:21:6f:1f:74:eb:54:f0:
         d2:7d:6d:98:98:02:75:9d:16:db:a9:46:ec:60:5f:5e:b4:39:
         8d:c6:c2:c8:e7:13:25:21:3d:31:fb:04:bf:08:55:a4:3b:93:
         25:25:68:30:ee:4e:dc:9b:d9:a1:fb:da:1d:31:81:26:19:7f:
         4c:5c:84:82:e9:c9:9a:34:c9:2a:bc:f0:f0:3f:f5:ae:52:4f:
         23:da:dd:0a:ca:01:f4:80:18:50:50:81:31:af:71:e0:3c:22:
         d2:d1:19:6a:e0:c9:ca:5b:51:bd:c9:aa:80:11:5a:86:fa:69:
         d5:ed:2b:10:19:aa:fc:01:54:2a:62:55:b0:07:45:3c:a2:2e:
         7a:38:92:79:11:13:73:08:2a:ad:ba:d8:75:7b:83:41:a2:89:
         40:a5:44:53:ca:98:9d:26:b3:c8:2e:c1:6f:08:27:b3:a2:b9:
         73:a3:8e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:48:06 2026 by rpki-client