Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft
File:                     LT4_u8fCsSzVNMi57TeG-2qlVQY.mft (raw, json)
Hash identifier:          44KCvGxp+suF71jaiZsoBVYSBaB1N3iNQO0NDMmBSl8=
Subject key identifier:   43:82:0D:57:CD:63:3B:04:36:E0:36:95:43:20:B4:A1:1A:E8:94:A7
Authority key identifier: 2D:3E:3F:BB:C7:C2:B1:2C:D5:34:C8:B9:ED:37:86:FB:6A:A5:55:06
Certificate issuer:       /CN=A91A7B36/serialNumber=2D3E3FBBC7C2B12CD534C8B9ED3786FB6AA55506
Certificate serial:       FB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft
Manifest number:          F7
Signing time:             Sat 19 Sep 2026 06:24:38 +0000
Manifest this update:     Sat 19 Sep 2026 06:24:38 +0000
Manifest next update:     Sat 26 Sep 2026 06:24:38 +0000
Files and hashes:         1: LT4_u8fCsSzVNMi57TeG-2qlVQY.crl (hash: awCCVcUGiMTa5u4UxqUj8Vg9X0JQUclLJVbJWqsvLgA=)
                          2: D055AA08480111F098A44B5CC4F9AE02.roa (hash: XsH+IJ5SSw5cAUWIZZhkMzbgbFC8kkMlwg6uRhNZXvk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.crl
                          rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7B36, serialNumber=2D3E3FBBC7C2B12CD534C8B9ED3786FB6AA55506
        Validity
            Not Before: Sep 19 06:24:38 2026 GMT
            Not After : Sep 26 06:24:38 2026 GMT
        Subject: CN=6aae2aa6-4c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cd:5d:a2:a0:8e:3b:c6:fe:df:df:ee:62:85:
                    7e:50:19:36:c6:02:5c:40:25:d2:e3:2b:06:91:71:
                    4b:86:90:b1:c0:ab:e6:5b:6f:92:91:bb:01:1e:cb:
                    56:e8:38:68:ea:81:4d:ce:86:a6:c9:e3:23:f7:57:
                    ba:96:28:81:ee:0c:c2:44:a3:c4:c4:13:ff:0d:56:
                    5d:b6:bd:e1:5c:6a:31:74:8f:bf:73:84:4a:4b:44:
                    ec:4a:8a:de:a2:f8:46:a7:04:25:ca:25:89:fb:eb:
                    ed:7e:ba:1f:98:09:e7:3b:fb:aa:6c:00:5e:8f:54:
                    61:45:ff:f7:b7:a4:a8:9c:06:a6:67:08:e8:16:c7:
                    ea:2a:46:ff:c6:2d:75:61:ea:b8:f2:3d:4a:ee:eb:
                    64:05:85:e5:0d:90:c6:e7:80:aa:e5:d5:a9:2d:9e:
                    31:3a:18:9d:1e:2b:9f:20:16:0e:dc:5a:e0:90:74:
                    a1:b2:60:f3:a7:ec:8b:9f:29:24:8a:ba:a4:76:83:
                    11:c0:a2:9b:17:5f:6a:fd:21:eb:d3:f5:2a:4a:07:
                    ae:1c:ab:cf:51:28:9e:b2:0a:7e:62:d2:c6:8d:bd:
                    05:ab:0c:ec:74:aa:e4:2c:49:95:33:a3:b4:90:d1:
                    f7:3b:6f:74:65:12:19:c3:93:75:b3:2e:2e:cf:e9:
                    c3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:82:0D:57:CD:63:3B:04:36:E0:36:95:43:20:B4:A1:1A:E8:94:A7
            X509v3 Authority Key Identifier:
                keyid:2D:3E:3F:BB:C7:C2:B1:2C:D5:34:C8:B9:ED:37:86:FB:6A:A5:55:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:c7:9b:a5:02:2a:3b:dc:23:9d:07:f1:48:4d:19:b7:a0:a2:
         54:8a:61:86:b4:8d:34:87:e8:9e:f5:dc:c7:f9:44:b0:1a:02:
         b5:e6:f5:e6:38:27:71:f7:27:28:ad:84:6e:fd:50:e4:76:a6:
         d1:6f:25:31:89:d3:a1:a9:58:ad:38:8f:81:32:25:75:e7:fe:
         0d:1a:64:8b:43:d0:80:48:f4:7e:5c:46:ed:b6:43:46:06:34:
         9c:91:3d:09:55:07:16:77:5d:c5:17:35:be:20:82:0c:d8:2c:
         39:98:3f:26:0c:55:39:4d:ca:b8:5f:82:27:a1:8c:4c:2f:9c:
         b3:a4:1e:ab:80:cf:70:fa:41:5b:4f:8b:a9:fd:e7:78:74:1e:
         35:92:d7:51:25:fb:ab:0a:1a:06:c4:d3:91:21:dd:22:16:ea:
         87:64:01:7b:24:52:94:2a:49:fa:55:95:33:89:30:83:9f:6a:
         cf:b0:0c:c1:8d:3d:d3:4c:fe:fd:bd:40:d5:73:3b:b4:6b:5d:
         1e:d1:0f:32:4b:e3:68:35:24:a1:62:1a:31:f3:28:10:79:8e:
         26:04:a3:3b:c8:76:07:dc:66:49:c1:5d:38:97:14:51:31:75:
         57:31:35:a8:6a:64:52:d5:c2:38:98:f6:f2:2a:4e:f6:95:71:
         b6:0b:76:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:31:16 2026 by rpki-client