Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft
File:                     -luvRrfLLI40Y4OqgMs5ayuBxkw.mft (raw, json)
Hash identifier:          avImqXWkCcogvnvqWtks9Rr+TYNsSsObWeJzs3uSFUU=
Subject key identifier:   76:9A:9E:69:DC:58:DE:ED:08:01:8C:B0:1F:BF:CC:B2:CF:1D:78:C4
Authority key identifier: FA:5B:AF:46:B7:CB:2C:8E:34:63:83:AA:80:CB:39:6B:2B:81:C6:4C
Certificate issuer:       /CN=A91A29D7/serialNumber=FA5BAF46B7CB2C8E346383AA80CB396B2B81C64C
Certificate serial:       BC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft
Manifest number:          B4
Signing time:             Mon 21 Sep 2026 07:03:51 +0000
Manifest this update:     Mon 21 Sep 2026 07:03:51 +0000
Manifest next update:     Mon 28 Sep 2026 07:03:51 +0000
Files and hashes:         1: -luvRrfLLI40Y4OqgMs5ayuBxkw.crl (hash: 5SEqZSl9yb2zVdUpBrOZf6UfDC5LOcRqowpcOC5CxIs=)
                          2: 753E1B20B1B311F0BD0C0785C4F9AE02.roa (hash: ED82Gz6lXOAzlBWFeylwQ9Gjq7iIkbcvN+6T0EoH08c=)
                          3: 4AAED6B23C1211F19A15FB09B6833773.roa (hash: zaCJCnJ8P+IQJ9n9t86hTBhempUXa3QuJJB9ZKjuD4o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.crl
                          rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:03:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A29D7, serialNumber=FA5BAF46B7CB2C8E346383AA80CB396B2B81C64C
        Validity
            Not Before: Sep 21 07:03:51 2026 GMT
            Not After : Sep 28 07:03:51 2026 GMT
        Subject: CN=6ab0d6d7-265c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f4:30:41:77:30:55:29:ad:f5:54:28:42:a8:
                    1d:49:d8:ab:1f:5c:2b:39:9a:52:7b:f8:c7:2c:51:
                    df:26:11:bf:4e:1b:e9:f6:fa:e2:5a:5e:7b:f0:6f:
                    07:5a:0a:a6:17:f1:29:06:a3:eb:9b:23:c0:cf:d0:
                    ee:b6:f7:24:6a:d0:7a:ad:4f:13:2c:32:2c:7e:ad:
                    c5:65:0f:cb:d2:51:b1:4f:82:e6:ff:8f:d7:fb:96:
                    50:44:b2:5a:a1:e6:f2:e3:7e:86:14:5a:ce:70:65:
                    2f:4d:f8:6f:01:5d:66:e8:03:3a:2d:b3:30:72:4f:
                    be:0c:33:c0:9a:c1:80:a7:b1:38:3a:76:de:9e:2c:
                    60:bc:43:e2:79:43:16:b8:ca:f9:91:25:b3:2d:95:
                    1d:a2:ad:b0:5c:19:3a:89:49:e4:0b:21:0d:b8:42:
                    29:54:e2:0d:4e:75:e0:83:1c:c8:2f:63:01:bd:f8:
                    c8:7d:32:7a:2c:63:07:a8:44:74:cc:1e:91:7c:ed:
                    45:c2:c2:72:89:e6:63:76:86:6a:ff:39:02:19:c9:
                    35:5a:d0:e7:b0:86:e1:79:05:b7:b5:14:c3:80:0b:
                    53:ad:b8:1c:05:ae:85:1c:28:a7:05:e9:0b:85:6d:
                    ea:b3:6d:aa:0d:cc:60:50:d9:ff:dc:b8:89:dc:d0:
                    20:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:9A:9E:69:DC:58:DE:ED:08:01:8C:B0:1F:BF:CC:B2:CF:1D:78:C4
            X509v3 Authority Key Identifier:
                keyid:FA:5B:AF:46:B7:CB:2C:8E:34:63:83:AA:80:CB:39:6B:2B:81:C6:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:aa:a2:90:8f:8a:04:af:6b:3d:62:48:66:87:b9:ea:eb:28:
         b2:67:ba:87:73:44:0e:78:fe:68:6c:58:bc:ce:1e:56:2d:7b:
         ce:fe:3b:61:4e:5f:6b:0c:f4:8b:ed:10:7d:b1:1d:97:df:a1:
         32:0a:9c:e8:1d:48:75:23:f0:40:4d:01:a0:df:79:59:11:ba:
         df:67:08:a7:86:cd:77:6f:16:1f:80:03:db:30:bb:c1:37:0f:
         2e:69:22:86:77:b9:21:48:ef:4c:61:b5:68:c1:f6:c8:ef:d1:
         6d:71:c1:25:69:9b:b3:cc:e0:ae:5e:92:ef:4e:fb:79:c7:b1:
         f2:c3:a9:98:e8:bf:0e:6e:7f:0f:3d:63:8f:b5:35:e6:cd:f4:
         2d:0b:e6:b6:a2:e1:35:f0:ac:21:fa:20:88:ad:74:54:bb:6f:
         5d:2f:8e:3f:ee:e7:7e:ee:23:27:e2:36:4c:c0:4d:f5:6d:2e:
         d8:d4:1a:be:c7:5a:7d:99:e4:1d:80:c7:03:98:3b:24:84:98:
         20:ef:c0:ce:dc:e8:be:d9:74:94:ff:99:d7:46:eb:3b:78:cd:
         80:a3:9f:8a:ba:3e:82:35:27:b8:df:58:80:ab:36:65:97:ed:
         ba:be:32:38:f3:d8:f6:d6:23:1d:a2:65:c9:59:37:48:68:1d:
         c7:2c:62:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:55:16 2026 by rpki-client