Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft
File:                     lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft (raw, json)
Hash identifier:          7mufX2DK0r64rQSeAVRj34t5pY38Wyqz7nP1/g8KWFU=
Subject key identifier:   EB:C0:44:6D:D4:2B:A4:5F:D0:76:49:F7:8B:BF:C2:5F:73:C8:BF:4D
Authority key identifier: 96:73:B5:CC:F0:A8:EA:5C:E4:1A:2E:47:63:11:F3:75:CD:83:C0:D2
Certificate issuer:       /CN=A91A58AA/serialNumber=9673B5CCF0A8EA5CE41A2E476311F375CD83C0D2
Certificate serial:       0106
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnO1zPCo6lzkGi5HYxHzdc2DwNI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft
Manifest number:          0106
Signing time:             Wed 23 Sep 2026 05:53:06 +0000
Manifest this update:     Wed 23 Sep 2026 05:53:06 +0000
Manifest next update:     Wed 30 Sep 2026 05:53:06 +0000
Files and hashes:         1: lnO1zPCo6lzkGi5HYxHzdc2DwNI.crl (hash: FwYoYbmIY7S8vlwPptFQqQd3VSWLRrL84O7vpXvDtfY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.crl
                          rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnO1zPCo6lzkGi5HYxHzdc2DwNI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 05:53:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 262 (0x106)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A58AA, serialNumber=9673B5CCF0A8EA5CE41A2E476311F375CD83C0D2
        Validity
            Not Before: Sep 23 05:53:06 2026 GMT
            Not After : Sep 30 05:53:06 2026 GMT
        Subject: CN=6ab36942-c013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:77:03:a9:88:29:25:c4:81:6c:9d:b5:78:f0:
                    c8:9e:cb:22:35:bd:62:08:fd:c0:c8:89:52:39:88:
                    0a:a0:29:d4:08:ea:56:de:86:e0:81:bf:df:21:ad:
                    0b:83:18:70:46:c6:4f:9a:c0:ec:23:15:29:f6:7f:
                    a5:82:53:f1:4b:d8:8a:72:54:43:58:63:81:20:c0:
                    48:6f:f4:4d:d7:d8:05:82:2c:8f:bf:a9:25:08:cc:
                    9a:1f:14:f8:08:e1:71:73:2a:7c:17:e2:19:cf:2d:
                    01:58:2b:4f:e0:17:2d:ba:a4:ec:79:b9:34:e5:9d:
                    ea:c3:62:9c:61:b8:57:c4:23:a4:c5:88:11:94:cb:
                    b8:18:15:a7:0e:a7:fa:b5:30:ae:c9:f4:b4:ce:2d:
                    fa:39:10:e4:ec:0b:b8:8d:df:9a:b3:9c:ab:2e:f1:
                    67:d0:9f:b2:30:69:1a:93:10:ae:dc:a0:fe:cf:c3:
                    26:e9:f3:85:3c:34:ef:cd:5a:d2:28:15:f5:9c:78:
                    e0:9f:28:02:8b:87:ce:96:3f:ea:8b:a9:29:5d:76:
                    28:6e:0f:b7:4e:91:87:64:fe:cc:43:43:dd:cc:d6:
                    bf:08:d1:3b:b8:1d:68:ee:eb:1c:33:2c:83:75:b7:
                    0f:76:fe:6c:9e:f4:60:3e:be:93:28:6c:4b:45:8b:
                    0f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C0:44:6D:D4:2B:A4:5F:D0:76:49:F7:8B:BF:C2:5F:73:C8:BF:4D
            X509v3 Authority Key Identifier:
                keyid:96:73:B5:CC:F0:A8:EA:5C:E4:1A:2E:47:63:11:F3:75:CD:83:C0:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnO1zPCo6lzkGi5HYxHzdc2DwNI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:5f:ca:26:28:d5:23:bd:a7:22:f1:11:f7:44:4f:7b:89:3c:
         82:db:a4:8d:1b:b7:3e:18:c8:34:ee:93:fd:9c:70:ca:8b:ca:
         7c:ae:73:b9:08:65:9a:95:15:15:5a:e7:58:a3:b3:67:fa:72:
         7a:2e:95:21:0f:2f:c5:b3:b9:78:22:6a:9a:a3:23:9f:83:8f:
         87:07:5d:10:a6:94:71:89:90:83:fd:03:68:03:15:fa:aa:e1:
         d4:c7:60:ab:48:d2:e5:57:6b:ba:45:58:b6:18:b2:5b:ad:56:
         a6:60:70:9a:07:f3:47:38:aa:93:0a:60:af:dd:f6:ed:08:55:
         d4:1f:45:6f:59:0c:e0:e5:65:84:a6:22:64:39:a5:44:87:25:
         c1:c1:9a:1c:e0:0a:80:f1:3f:71:e5:9b:e5:a6:01:a2:2d:ca:
         31:e0:7e:e0:f3:71:26:92:da:80:e9:80:0c:18:2a:9c:3c:f6:
         8c:69:91:32:c1:9d:7f:0f:d5:5b:e9:c3:20:97:0e:e6:a2:31:
         f2:a8:59:bd:71:49:37:6a:20:b1:68:86:79:ac:c7:a7:5b:09:
         92:9a:91:46:9a:c1:67:22:f2:e2:7c:a1:ef:d8:72:58:50:ad:
         96:92:5e:38:c9:a7:65:d9:78:f3:da:49:1a:42:8b:fd:e0:c8:
         88:fc:54:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:22:39 2026 by rpki-client