Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
File:                     n4LbyUZjEsW6LpISeTAkAJVqmCo.mft (raw, json)
Hash identifier:          BbA2DI1rb413fxcztC7tikDtvoviXBpIl6IXKbeYUt8=
Subject key identifier:   E1:CF:CE:94:4B:20:58:C0:7B:43:49:DA:37:BB:F2:CC:4E:68:13:05
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Certificate issuer:       /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial:       3731
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
Manifest number:          35D6
Signing time:             Mon 12 Oct 2026 14:22:57 +0000
Manifest this update:     Mon 12 Oct 2026 14:22:56 +0000
Manifest next update:     Mon 19 Oct 2026 14:22:56 +0000
Files and hashes:         1: n4LbyUZjEsW6LpISeTAkAJVqmCo.crl (hash: p0Ys9vSqbdkU1X78yDk3AK9feMn8izDgtro099orwrA=)
                          2: 4D21FB36F7DB11EE92D1E11FC4F9AE02.roa (hash: lhXPMVTt2UFIZj0lCq6prRReMQPmTP0Uw35+7SMlNXg=)
                          3: 402418C08DB811E98ACC9F7EC4F9AE02.roa (hash: AUyJYR9QGiCOAWUVNK5KTw7HkCYvvX/Ds53zwEXsEuA=)
                          4: 49EECD288DB811E98ACC9F7EC4F9AE02.roa (hash: YOIkxF9cx34dX4M5hEuz3uSOepnStr/h7wGeR0bvSs0=)
                          5: 4A71D7E08DB811E98ACC9F7EC4F9AE02.roa (hash: 0ehtVh7qrnpCP2HNZmYRMc2RbckLARZJZajak2lZeps=)
                          6: 1827B7E0605411EFA8069323C4F9AE02.roa (hash: I7NyIEE63t1lDroN8tpLNudfVSP/ghhR0ds+7lSznds=)
                          7: F3A41ADEC0E411EFA19F644CC4F9AE02.roa (hash: vhVJuPrt2WMbeuT1nfT4sHOscgQloynHYGoOSaZ4llM=)
                          8: F6D9C45E7B1811EF82C90D2AC4F9AE02.roa (hash: p0kTeOWWtou4hbwVLi+Qwc9t73FKXY9t3nkgc42760I=)
                          9: 48ED106A8DB811E98ACC9F7EC4F9AE02.roa (hash: z9mQ+QhTbrpVKcWfvXXeEwZeLNlN4O7lm2+1usNkzYg=)
                          10: 1BA16D001F8211EC8FC82E73C4F9AE02.roa (hash: 6Q7oCnYdIQMyYV7GSDRlqmiCxPyyamvaDbgj1LeE6hE=)
                          11: 47A6C8E08DB811E98ACC9F7EC4F9AE02.roa (hash: Y4eL5Gz9hvKZwu3s5cr/XWHTZT7n0B+5hZ7DUDmg+8I=)
                          12: 4AEE35608DB811E98ACC9F7EC4F9AE02.roa (hash: 2dRAoHVYxoRgqEjV0RgZrY5WSKV9nv8KT/1w3CfIKmA=)
                          13: B2FF274A00EC11EDBC60AA4FC4F9AE02.roa (hash: 2NKu0kGcFcNHvXAlK5ciHNw5Db9jbuuiRIvvd8fDxds=)
                          14: A3601D70C2A511EBB2025B36C4F9AE02.roa (hash: v9idX2nUBElrpsWO8/4PoDuWvFqBy1rmMNsMQvtwjKY=)
                          15: 441E60E88DB811E98ACC9F7EC4F9AE02.roa (hash: B0KcYf7auAbwm/XE4KlVLxzjH/gLCl42YJ4hG9Eg+jc=)
                          16: 4495856A8DB811E98ACC9F7EC4F9AE02.roa (hash: UMojJJ+HqHFs5L1VIMkkM535Pv8nrBXzcPcJghVjlVE=)
                          17: F7318C2CBA3E11ECA0543F6BC4F9AE02.roa (hash: uTKeKs7LBN3FhtcOBV42PDPrdJ0IBDQ3Fzs9Ipyn7N4=)
                          18: EBD5A3CA6B8711EFB0476280C4F9AE02.roa (hash: 1nNYytPUh1I02DJvpauOI7ouJq6g/LEJ1tFSi6IALFU=)
                          19: 5B917C28A2E011E9A98B0235C4F9AE02.roa (hash: yyDH6NeCH82e1nObqCubXAYAUWcMb4d+loYb4JT3IzQ=)
                          20: 453F8E988DB811E98ACC9F7EC4F9AE02.roa (hash: uDeVchxEdNUTap4BRcPRH59lrzaNl9YDYFNKt8sx5Tg=)
                          21: 439638A88DB811E98ACC9F7EC4F9AE02.roa (hash: /jqV+A0MsQ85V2FA5N5fsbaCrpOVHjFLHAeXG/A99oI=)
                          22: CEC68F44973211E9954F0565C4F9AE02.roa (hash: kFvEU1sBx2v9u00o7M6vLkd+IZa0dJEcb2rZMVFeoNs=)
                          23: 46800A948DB811E98ACC9F7EC4F9AE02.roa (hash: Wg4tgLpwdeYBdsyjdAeGgZtXAPAhs+Gm9tcLHxmPv0k=)
                          24: 482C95F68DB811E98ACC9F7EC4F9AE02.roa (hash: IWs/A+FYXIH78+4xF8at9mmqTgWh8t1JE1vVrzAw3yw=)
                          25: B580AA94013D11EBBC81306AC4F9AE02.roa (hash: R051ecoTEDf4tp0QDcyVXIOsR/Z6KDWGtCmJAV5FoHs=)
                          26: 3ED710C68DB811E98ACC9F7EC4F9AE02.roa (hash: /PpSkevkJJNsZbB8blKJDWOGqEQN21XKZVSsyGPH4sM=)
                          27: EC8209420EB411EFAE1CF63BC4F9AE02.roa (hash: NbnrpuPdjaJ9/qwyVFj1+pG7R+Jwde17taoEW0C3p7w=)
                          28: 4107DF748DB811E98ACC9F7EC4F9AE02.roa (hash: S8S+91q9dQPL7ZeLDFqiWmTSkB9/OeQP2HoVlwZObVE=)
                          29: 9DB6EBB4972E11E9B776A755C4F9AE02.roa (hash: anud056i0pXYbRncgVJTkdjRCUcpxpVeDT3/UVMnGCM=)
                          30: 42EBE8D08DB811E98ACC9F7EC4F9AE02.roa (hash: sKAmAaXkVkSwky9iW1NOiTy4baioWOcrkXFzpI5epW4=)
                          31: 471E9C908DB811E98ACC9F7EC4F9AE02.roa (hash: orYv1OKaU29M4Ne+KHXNUOifDh8/09Tj4r+taY2EwcQ=)
                          32: 4EE07E481F7F11ECA7242F6CC4F9AE02.roa (hash: Bc9bPOXxLa7s5PBO0OfOl7CrgYQeg8aSrLHDflvzJqs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
                          rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 14:22:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14129 (0x3731)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
        Validity
            Not Before: Oct 12 14:22:56 2026 GMT
            Not After : Oct 19 14:22:56 2026 GMT
        Subject: CN=6acced40-40b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:75:87:7c:87:ae:2f:8e:bb:6a:0e:fd:5c:ae:
                    99:3f:f9:65:73:4f:58:2f:4e:b9:74:8a:6d:30:9d:
                    72:90:18:03:7f:1f:e5:b0:32:1b:3c:08:5c:f8:86:
                    08:6f:9f:cf:3b:fb:6c:67:1f:de:82:dc:b9:14:f2:
                    0b:24:68:a2:67:d7:e9:ef:c3:35:38:c7:1b:3c:6d:
                    f2:8c:0e:cb:c0:df:2f:23:1b:34:ac:e0:56:68:da:
                    0b:6d:bb:b6:85:32:53:98:bd:7e:8a:21:14:f3:e2:
                    52:6e:3b:c2:cc:d8:27:55:f6:bc:3e:b0:5f:07:47:
                    3b:b8:eb:26:e4:db:3a:28:c4:8d:f5:01:4f:cd:96:
                    69:79:31:1c:3e:20:4f:22:5e:55:7f:77:ae:1c:bb:
                    ac:31:ec:a4:5f:1b:c3:c1:c3:31:81:a9:43:fe:ce:
                    c0:71:ba:19:e2:b6:bd:d4:c9:40:5b:bf:b9:b7:ee:
                    b3:b9:90:00:ca:57:ad:b6:48:5e:dd:84:86:71:4f:
                    1d:bd:a1:01:a3:64:51:03:38:5e:bd:56:94:71:52:
                    95:2d:db:3a:dc:91:a6:56:cb:ba:7c:17:c2:47:90:
                    11:cc:ee:6d:a5:fe:d6:24:cd:4e:5e:ca:a6:08:db:
                    0a:a5:b1:fe:18:3f:12:6a:79:20:10:46:4b:f6:58:
                    03:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:CF:CE:94:4B:20:58:C0:7B:43:49:DA:37:BB:F2:CC:4E:68:13:05
            X509v3 Authority Key Identifier:
                keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:4e:d0:6f:2b:e7:52:ae:b1:46:cc:1f:ac:f7:af:d8:5e:d4:
         9e:c4:d9:79:78:bc:49:39:03:8a:e4:07:a0:1c:cb:43:d1:57:
         ab:cc:fc:52:26:b4:f2:1d:1f:e7:65:17:21:48:c8:39:96:1b:
         fd:1d:23:ec:78:1d:d7:c2:3f:5d:1c:3e:da:38:62:62:99:45:
         89:3b:0d:99:d8:14:99:ef:97:ea:37:85:ab:a0:41:a5:32:93:
         6c:35:b6:e8:76:f8:76:af:86:c2:f2:67:99:81:8c:05:d1:96:
         1e:ae:1a:bb:42:6c:15:d7:b9:bd:5c:4e:93:57:ac:16:56:f3:
         87:d3:d5:ca:b0:7a:0f:df:47:ff:09:f8:94:63:80:ee:0f:66:
         7d:da:49:e6:4a:b5:6c:50:bf:b8:9c:80:37:a8:eb:94:28:50:
         0a:55:65:df:9e:cf:1e:9a:b3:76:eb:a3:5e:4a:0c:54:a7:59:
         18:d3:f0:ce:1a:6e:c4:c2:39:0e:a8:5f:df:a1:d3:21:55:f7:
         fe:c9:a7:8b:46:37:4c:ce:d4:c7:b1:d0:2a:f3:45:35:79:c8:
         30:d4:00:7a:e0:1f:53:dc:3d:da:a5:22:24:b9:03:f6:19:f7:
         46:b9:d1:98:16:38:34:84:e9:f8:bc:9c:21:e9:39:92:54:33:
         9e:12:0d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:22:56 2026 by rpki-client