Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft
File:                     LR4Op3rKP-WX3vMZYh70DRLUwdw.mft (raw, json)
Hash identifier:          DZ7wZAuoMRJj4fphi6i1J5Y1aIsi6IEYf/OSIHXKn3s=
Subject key identifier:   29:1D:82:C2:58:54:32:80:67:10:03:46:98:1C:F5:DD:D2:6C:3E:5D
Authority key identifier: 2D:1E:0E:A7:7A:CA:3F:E5:97:DE:F3:19:62:1E:F4:0D:12:D4:C1:DC
Certificate issuer:       /CN=A91939DA/serialNumber=2D1E0EA77ACA3FE597DEF319621EF40D12D4C1DC
Certificate serial:       01B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft
Manifest number:          01AB
Signing time:             Mon 21 Sep 2026 04:06:37 +0000
Manifest this update:     Mon 21 Sep 2026 04:06:37 +0000
Manifest next update:     Mon 28 Sep 2026 04:06:37 +0000
Files and hashes:         1: LR4Op3rKP-WX3vMZYh70DRLUwdw.crl (hash: uwP7vwCBmLkN8Omxwv3F8c4CEAVD+w2yrZzvY983Cwk=)
                          2: 056F0FFA2FAC11EFA4D45C6BC4F9AE02.roa (hash: lYBNMPIGwdmg3hahCp/0TuyobmaHK3vnQLBxguRZNCc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.crl
                          rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 04:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 435 (0x1b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91939DA, serialNumber=2D1E0EA77ACA3FE597DEF319621EF40D12D4C1DC
        Validity
            Not Before: Sep 21 04:06:37 2026 GMT
            Not After : Sep 28 04:06:37 2026 GMT
        Subject: CN=6ab0ad4d-5403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f7:df:ae:cb:96:10:bb:9d:85:fc:11:80:c9:
                    63:94:ba:15:68:97:d3:dc:1b:52:26:8d:fc:b0:ee:
                    ab:f8:9c:30:b9:9a:08:9f:7d:f9:66:ba:63:c2:0a:
                    1c:07:55:8f:15:bb:52:ad:ff:c8:62:1a:a3:40:55:
                    9e:20:ed:85:4b:05:bc:f3:52:89:c4:34:c8:d1:a3:
                    61:90:ae:95:02:c9:f0:81:24:4b:66:3f:75:11:6e:
                    ce:a9:09:69:a4:48:97:b5:38:91:92:89:04:45:a0:
                    9d:2d:0d:b2:52:73:57:f4:73:e4:1b:f1:91:6b:e0:
                    06:be:34:30:bb:df:02:da:be:68:fb:c5:2a:21:65:
                    5e:a0:c9:de:39:c4:56:55:8e:1f:68:c2:a6:0b:1a:
                    37:f7:d0:26:95:41:31:28:be:d9:a3:c5:f9:0f:02:
                    88:91:f1:43:8a:90:c5:98:aa:fe:a5:27:6e:11:1d:
                    79:50:5e:05:90:8f:86:16:e5:0f:b1:47:a4:05:1a:
                    d3:6d:fd:07:f5:1b:36:f9:35:60:d7:08:e3:f2:50:
                    d2:82:b1:f1:3d:34:f6:23:e7:5f:93:e8:da:90:88:
                    2b:c0:1c:46:f7:68:c9:b7:ab:7d:97:c6:94:df:dd:
                    6f:df:ad:32:09:e9:87:82:0a:fc:ae:1d:48:46:eb:
                    68:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:1D:82:C2:58:54:32:80:67:10:03:46:98:1C:F5:DD:D2:6C:3E:5D
            X509v3 Authority Key Identifier:
                keyid:2D:1E:0E:A7:7A:CA:3F:E5:97:DE:F3:19:62:1E:F4:0D:12:D4:C1:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:8f:f5:36:8f:3e:1a:2d:8a:5b:81:f7:82:c9:07:60:34:e7:
         34:5d:d9:44:9d:eb:36:c8:5d:7f:28:c0:96:b2:89:99:92:72:
         9d:96:1e:9b:42:87:19:af:68:4c:f4:c2:b4:4d:a1:7b:86:29:
         0f:0e:c6:e3:33:dc:bd:45:ef:72:7f:a9:b5:19:76:5d:37:2a:
         a3:c0:de:b9:45:11:be:05:2b:79:78:a8:41:4a:70:54:d1:19:
         13:52:6c:57:92:ec:bf:10:90:35:02:e2:7d:60:d2:2e:c9:d8:
         f5:25:d7:ce:d9:27:00:a4:21:2a:88:fe:d6:f3:da:b2:17:e0:
         1a:a4:b8:47:cd:bc:f8:3d:c8:ba:a4:6d:d8:32:16:17:f2:36:
         06:ae:66:bf:1e:71:3f:e6:c9:e2:de:ad:ae:63:90:67:12:11:
         85:ed:c9:73:26:27:90:cc:d2:03:73:03:57:43:b2:92:2f:d6:
         a5:3a:4c:9f:3e:df:78:b3:b9:62:4f:51:b3:13:b2:e8:77:96:
         6e:80:30:af:cb:94:e1:df:ba:3e:67:c1:93:bb:2d:4e:5c:6e:
         ea:2e:6d:60:40:12:39:c5:a3:c1:44:e7:9a:4b:77:20:09:45:
         20:6e:21:5d:73:6d:f3:cc:e2:b8:f7:74:bb:94:0e:58:20:14:
         2c:5e:e3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:07:31 2026 by rpki-client