Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft
File:                     lvYxs3stzK--57Cb_fRxXhocUFs.mft (raw, json)
Hash identifier:          UAwSj7rG9/8etj/bZyMieZru5Qr5yN64MWjzsBumQpU=
Subject key identifier:   45:16:8F:93:90:6D:C9:35:AB:CA:9D:5B:5A:03:67:8E:93:66:A2:C8
Authority key identifier: 96:F6:31:B3:7B:2D:CC:AF:BE:E7:B0:9B:FD:F4:71:5E:1A:1C:50:5B
Certificate issuer:       /CN=A9171DB9/serialNumber=96F631B37B2DCCAFBEE7B09BFDF4715E1A1C505B
Certificate serial:       058D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvYxs3stzK--57Cb_fRxXhocUFs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft
Manifest number:          0585
Signing time:             Thu 08 Oct 2026 23:27:24 +0000
Manifest this update:     Thu 08 Oct 2026 23:27:23 +0000
Manifest next update:     Thu 15 Oct 2026 23:27:23 +0000
Files and hashes:         1: lvYxs3stzK--57Cb_fRxXhocUFs.crl (hash: B+SKOGA3UN97GATmP8Tk2uKdZChysDE6we3h0EbP3sQ=)
                          2: 6EC5F1A8420611ECB8345E7DC4F9AE02.roa (hash: QL8eCd1UUQ8tPRua7/qYkbeS3Uvn3JGTL2tO1zoMLLE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.crl
                          rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvYxs3stzK--57Cb_fRxXhocUFs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 23:27:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1421 (0x58d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171DB9, serialNumber=96F631B37B2DCCAFBEE7B09BFDF4715E1A1C505B
        Validity
            Not Before: Oct  8 23:27:23 2026 GMT
            Not After : Oct 15 23:27:23 2026 GMT
        Subject: CN=6ac826dc-a2f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f3:fd:09:12:87:19:af:c4:ec:d4:8b:0d:41:
                    87:a7:41:37:2f:6b:9f:b6:e6:a2:11:a6:4e:f3:8d:
                    2f:eb:42:eb:9c:c7:47:17:1b:a0:4d:f9:af:f1:96:
                    e6:c0:26:74:f0:a3:84:44:36:a1:72:ec:1d:2a:b0:
                    28:ac:ba:19:17:bb:3d:1c:58:34:3e:3c:0a:6a:6e:
                    be:b9:57:39:4f:91:26:6f:75:c9:3b:d6:78:ea:3e:
                    54:66:79:f1:fc:2b:91:7e:48:14:41:7e:b5:aa:44:
                    13:5c:5d:b2:7a:ca:c2:06:61:e0:3b:64:0a:2a:0a:
                    8b:0e:58:8e:1d:5b:c6:be:e2:6d:95:a0:20:64:82:
                    97:c2:b3:05:e3:be:60:e3:0c:67:4e:7b:d3:7e:ca:
                    de:b9:18:f4:26:fe:8a:24:0c:34:f6:12:41:f5:81:
                    08:64:69:9b:1c:bc:07:9d:70:37:2f:93:b2:b4:94:
                    b4:2b:83:b2:1d:90:de:dc:b0:21:46:45:dc:b3:e7:
                    77:aa:02:f9:ae:03:22:77:ab:4b:a9:a9:fd:2a:b5:
                    5e:0e:2c:c6:93:cc:39:f2:96:32:38:97:07:49:52:
                    2f:09:29:4d:c0:ab:50:4e:7e:2b:d2:32:3c:23:17:
                    94:d4:55:e6:58:d8:7c:5b:e8:9f:79:81:90:18:db:
                    d6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:16:8F:93:90:6D:C9:35:AB:CA:9D:5B:5A:03:67:8E:93:66:A2:C8
            X509v3 Authority Key Identifier:
                keyid:96:F6:31:B3:7B:2D:CC:AF:BE:E7:B0:9B:FD:F4:71:5E:1A:1C:50:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvYxs3stzK--57Cb_fRxXhocUFs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:70:9e:09:3c:ab:15:0a:b9:49:dd:87:c6:be:fc:2b:c0:32:
         b3:7e:30:38:e7:9e:98:65:17:52:c0:eb:12:c9:66:0d:97:75:
         2c:b8:08:bb:b4:e1:ab:35:8c:81:a6:03:a3:cd:42:47:bf:ae:
         20:65:98:d9:13:b9:33:2d:da:63:cd:3f:2d:96:5f:6e:bf:d4:
         d7:d3:f6:dd:9f:46:88:fe:df:45:be:81:c5:cf:30:1d:39:60:
         4d:bc:d8:4e:88:9b:23:64:c4:79:e3:5a:a7:cb:a9:fb:01:92:
         e6:a6:eb:48:7c:8d:9b:43:b6:69:4e:b6:3f:6d:6e:d0:30:5a:
         5b:ab:b4:c6:d3:97:3f:03:5d:60:5e:0a:93:67:78:12:03:88:
         d2:6f:c0:ab:c1:38:b3:3d:ba:ac:1a:ab:8c:fe:44:c1:a6:c5:
         bf:48:3b:a3:a8:f7:78:13:67:d3:f6:26:dd:1a:2c:46:e0:30:
         56:80:ee:1e:ab:f2:a9:56:ff:cc:b1:26:69:ec:fd:b6:fc:79:
         48:63:4b:77:9d:a3:44:3a:9c:48:3f:be:b4:41:ae:d6:d4:ce:
         6b:13:e5:57:46:0c:19:5a:cc:af:a2:eb:12:ec:45:73:d6:fd:
         1f:04:ce:2c:a6:12:84:9b:87:0d:35:b1:3f:76:c1:a1:ba:64:
         8e:10:c4:06
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzFEQjkxMTAvBgNVBAUTKDk2RjYzMUIzN0IyRENDQUZCRUU3QjA5QkZERjQ3MTVF
MUExQzUwNUIwHhcNMjYxMDA4MjMyNzIzWhcNMjYxMDE1MjMyNzIzWjAYMRYwFAYD
VQQDEw02YWM4MjZkYy1hMmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3fP9CRKHGa/E7NSLDUGHp0E3L2uftuaiEaZO840v60LrnMdHFxugTfmv8Zbm
wCZ08KOERDahcuwdKrAorLoZF7s9HFg0PjwKam6+uVc5T5Emb3XJO9Z46j5UZnnx
/CuRfkgUQX61qkQTXF2yesrCBmHgO2QKKgqLDliOHVvGvuJtlaAgZIKXwrMF475g
4wxnTnvTfsreuRj0Jv6KJAw09hJB9YEIZGmbHLwHnXA3L5OytJS0K4OyHZDe3LAh
RkXcs+d3qgL5rgMid6tLqan9KrVeDizGk8w58pYyOJcHSVIvCSlNwKtQTn4r0jI8
IxeU1FXmWNh8W+ifeYGQGNvWOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEUWj5OQ
bck1q8qdW1oDZ46TZqLIMB8GA1UdIwQYMBaAFJb2MbN7Lcyvvuewm/30cV4aHFBb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MURCOS9BOUM5MEYxNDQy
MDIxMUVDQkEyNjE5NzZDNEY5QUUwMi9sdll4czNzdHpLLS01N0NiX2ZSeFhob2NV
RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2x2WXhzM3N0ekstLTU3Q2JfZlJ4WGhvY1VGcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MURCOS9BOUM5MEYxNDQyMDIxMUVDQkEyNjE5NzZDNEY5QUUwMi9sdll4czNzdHpL
LS01N0NiX2ZSeFhob2NVRnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVHCeCTyrFQq5Sd2Hxr78K8Ays34wOOeemGUXUsDrEslmDZd1LLgIu7ThqzWM
gaYDo81CR7+uIGWY2RO5My3aY80/LZZfbr/U19P23Z9GiP7fRb6Bxc8wHTlgTbzY
ToibI2TEeeNap8up+wGS5qbrSHyNm0O2aU62P21u0DBaW6u0xtOXPwNdYF4Kk2d4
EgOI0m/Aq8E4sz26rBqrjP5EwabFv0g7o6j3eBNn0/Ym3RosRuAwVoDuHqvyqVb/
zLEmaez9tvx5SGNLd52jRDqcSD++tEGu1tTOaxPlV0YMGVrMr6LrEuxFc9b9HwTO
LKYShJuHDTWxP3bBobpkjhDEBg==
-----END CERTIFICATE-----
Generated at Sat Oct 10 14:27:23 2026 by rpki-client