Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft
File:                     LT4_u8fCsSzVNMi57TeG-2qlVQY.mft (raw, json)
Hash identifier:          CXnpT75k216CUJHqm1Yp2JvOASTdLTfpZiOosm6ezoc=
Subject key identifier:   74:61:32:EB:80:00:F2:F1:10:38:47:A2:6E:73:6B:77:CC:0F:EB:A3
Authority key identifier: 2D:3E:3F:BB:C7:C2:B1:2C:D5:34:C8:B9:ED:37:86:FB:6A:A5:55:06
Certificate issuer:       /CN=A91A7B36/serialNumber=2D3E3FBBC7C2B12CD534C8B9ED3786FB6AA55506
Certificate serial:       A9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft
Manifest number:          A6
Signing time:             Wed 15 Apr 2026 06:51:12 +0000
Manifest this update:     Wed 15 Apr 2026 06:51:11 +0000
Manifest next update:     Wed 22 Apr 2026 06:51:11 +0000
Files and hashes:         1: LT4_u8fCsSzVNMi57TeG-2qlVQY.crl (hash: 36XzmsMpKgzki3ZX6RehST17DWUkqTZelHk/HlgL+sA=)
                          2: D055AA08480111F098A44B5CC4F9AE02.roa (hash: 271bGx5p6cweTatnCk/v53X55aXxOr6gavN3HpXZVTs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.crl
                          rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 06:51:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7B36, serialNumber=2D3E3FBBC7C2B12CD534C8B9ED3786FB6AA55506
        Validity
            Not Before: Apr 15 06:51:11 2026 GMT
            Not After : Apr 22 06:51:11 2026 GMT
        Subject: CN=69df355f-ff0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:9f:db:b2:d8:a0:a1:d4:fa:f6:f8:54:b9:50:
                    56:f5:77:d5:5b:7b:0d:11:95:d1:70:ca:d2:a1:7c:
                    60:45:99:aa:3f:f2:a9:0b:68:e4:7c:bc:07:d2:04:
                    17:23:76:e5:20:22:b5:bd:7b:5e:24:0f:f9:5a:22:
                    5a:b6:af:2f:ef:1a:fd:25:99:0b:82:0c:9b:49:29:
                    1d:0f:fa:92:c1:05:e4:00:dc:15:b7:10:38:c2:3e:
                    63:56:4c:56:74:97:b7:50:7b:d8:3a:a7:87:12:62:
                    5f:32:4c:81:30:f9:aa:67:f8:0b:42:49:9b:54:83:
                    58:0d:e4:a0:4b:fa:1c:6a:9b:6d:d8:e5:cd:00:9e:
                    3d:f1:11:ce:8a:b2:26:97:38:3a:13:74:bf:45:0e:
                    fc:53:6c:5d:e8:06:da:c5:8e:93:9d:24:4f:66:91:
                    a9:18:d0:82:bc:ca:7f:11:b1:5d:fc:79:7d:73:7a:
                    50:ee:e5:ae:f7:7a:1a:b9:6c:e7:bd:31:b6:f7:93:
                    c0:c1:b3:ed:c3:7d:a3:da:2b:f0:1c:78:9e:0f:fc:
                    a3:8f:62:89:ba:1d:e5:13:e1:af:39:79:a0:1f:02:
                    f1:39:43:b9:ec:4e:e9:6e:3b:d9:17:5c:17:2d:96:
                    79:98:eb:a1:88:61:bc:f6:7c:88:6d:d4:d6:a8:3c:
                    38:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:61:32:EB:80:00:F2:F1:10:38:47:A2:6E:73:6B:77:CC:0F:EB:A3
            X509v3 Authority Key Identifier:
                keyid:2D:3E:3F:BB:C7:C2:B1:2C:D5:34:C8:B9:ED:37:86:FB:6A:A5:55:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:00:f2:c1:7c:8f:3a:4d:3d:ed:ae:5a:82:c7:d3:e4:bc:0d:
         21:95:05:35:78:3e:46:02:07:52:c7:29:d4:82:59:e1:bb:83:
         8b:d7:74:7d:1b:c4:b7:8b:76:ae:65:91:11:48:41:84:e2:c7:
         ee:c9:26:33:37:8d:bb:5b:74:62:1c:23:46:9c:37:0c:70:cf:
         22:34:80:ab:b6:38:2a:dd:e3:a4:da:b6:24:16:3c:10:ef:1f:
         42:8e:75:5b:b8:fc:f5:c9:4f:42:21:99:4a:4a:2f:c5:57:3b:
         2e:59:34:e1:f9:90:68:9a:b6:ac:1b:78:de:69:90:19:aa:e5:
         dd:ec:c6:5e:5e:35:2b:25:31:3a:d8:23:11:95:96:e7:b9:88:
         1f:61:b9:24:6a:ef:51:43:f8:d2:35:9f:94:5c:6e:18:79:4e:
         2a:f8:c7:c7:f6:68:63:a9:89:15:81:13:bb:30:8e:c9:59:cd:
         47:87:53:2d:70:a3:ad:8c:ff:72:3d:7d:8c:ed:d8:cb:b5:43:
         b4:35:b6:ad:3d:89:1d:78:df:46:d2:5a:8e:55:02:21:4c:4b:
         3a:18:54:ed:fe:10:0a:61:d8:70:57:58:d6:3a:96:d9:ae:a0:
         08:bb:9c:3d:d1:c3:ce:a9:85:f8:d1:04:0e:9c:7a:f4:c1:be:
         7b:a1:2e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:10:45 2026 by rpki-client