Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft
File:                     LT4_u8fCsSzVNMi57TeG-2qlVQY.mft (raw, json)
Hash identifier:          rc6lNeRZ6Qjk15zL9EdGhkjmpgYm8aRiaA/2kfDg+2k=
Subject key identifier:   86:CB:B5:26:1B:92:AC:CA:75:89:E3:78:A0:6A:35:86:EE:1C:F3:C7
Authority key identifier: 2D:3E:3F:BB:C7:C2:B1:2C:D5:34:C8:B9:ED:37:86:FB:6A:A5:55:06
Certificate issuer:       /CN=A91A7B36/serialNumber=2D3E3FBBC7C2B12CD534C8B9ED3786FB6AA55506
Certificate serial:       DF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft
Manifest number:          DB
Signing time:             Mon 27 Jul 2026 08:46:19 +0000
Manifest this update:     Mon 27 Jul 2026 08:46:18 +0000
Manifest next update:     Mon 03 Aug 2026 08:46:18 +0000
Files and hashes:         1: LT4_u8fCsSzVNMi57TeG-2qlVQY.crl (hash: TBoqxzwe/nDtdRw0aRwLLROkZxGyBuCssHfbCcxg7ys=)
                          2: D055AA08480111F098A44B5CC4F9AE02.roa (hash: XsH+IJ5SSw5cAUWIZZhkMzbgbFC8kkMlwg6uRhNZXvk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.crl
                          rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:46:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223 (0xdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7B36, serialNumber=2D3E3FBBC7C2B12CD534C8B9ED3786FB6AA55506
        Validity
            Not Before: Jul 27 08:46:18 2026 GMT
            Not After : Aug  3 08:46:18 2026 GMT
        Subject: CN=6a671adb-113e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:95:4f:fd:93:f4:f7:2f:97:4f:84:d1:fe:c7:
                    a0:b7:7c:e0:c5:eb:0e:94:aa:6c:bc:ff:0e:a6:5a:
                    a3:a5:bd:7f:af:18:3f:79:0a:64:f3:7d:8f:d9:50:
                    e3:e0:40:71:8c:25:fb:a9:a7:f6:f5:fa:bf:d2:65:
                    65:fb:11:fe:c1:5c:97:9c:f1:8a:7e:12:19:83:b0:
                    ac:ec:fc:5b:2b:61:05:b8:36:9a:5e:44:e8:31:65:
                    2a:0b:c1:e9:37:46:79:6d:db:5b:ec:90:9a:39:fb:
                    b8:28:6f:73:10:75:d4:3c:1d:7e:c3:1f:12:81:a3:
                    37:3e:9f:a1:a1:0c:9b:cd:bd:da:3f:5a:e2:a0:14:
                    66:c8:94:73:89:42:64:0b:5c:6b:20:c7:73:e5:ea:
                    08:f6:39:7d:db:18:71:05:98:bb:a5:ff:dd:6f:35:
                    03:05:4c:87:ad:20:cc:87:b3:af:68:d5:67:45:0c:
                    12:ce:b8:a8:4f:95:ee:27:b1:27:fc:c9:cb:c5:fb:
                    72:f9:29:1a:49:3e:2e:16:c8:ab:10:b8:e4:05:83:
                    2f:4c:a8:d2:37:38:d8:d6:55:68:3a:7d:58:d5:c6:
                    58:47:8c:13:b8:d3:0f:b1:27:8a:ea:8c:62:8b:62:
                    c4:5e:73:1b:7f:6a:0a:e4:62:2e:d3:98:66:29:79:
                    aa:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:CB:B5:26:1B:92:AC:CA:75:89:E3:78:A0:6A:35:86:EE:1C:F3:C7
            X509v3 Authority Key Identifier:
                keyid:2D:3E:3F:BB:C7:C2:B1:2C:D5:34:C8:B9:ED:37:86:FB:6A:A5:55:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:32:cc:75:10:46:f5:02:0b:1a:e0:b1:af:e4:dc:85:76:bb:
         3b:78:9a:75:2b:e7:b4:79:20:af:5b:42:da:a2:5b:81:02:f9:
         4b:ba:68:36:9a:1d:76:ae:ba:ef:cc:85:5f:14:87:83:df:55:
         56:0c:05:b1:fd:3e:c4:96:dd:6b:18:a1:4c:d6:aa:b0:0a:0b:
         10:62:d6:3a:7a:a9:39:6c:fe:05:ec:a0:23:8d:75:79:7a:ef:
         84:f8:10:9f:78:9f:ea:a0:41:73:f3:a2:b9:ae:61:af:d9:4c:
         6f:44:0d:11:42:31:dc:cf:21:9a:b7:6d:7a:8b:cc:5f:14:3e:
         d3:35:65:ea:56:cf:d8:42:bc:2b:91:69:2d:30:c6:34:5f:58:
         dc:a3:e6:94:cc:62:bd:ec:68:2c:5a:d4:ec:d5:9e:6d:76:d4:
         bd:c1:cb:24:4e:e8:86:be:fb:e7:e8:b9:68:df:4d:f9:60:d5:
         99:f5:94:ec:76:6f:a6:4f:b9:06:e6:37:57:da:82:b4:55:ba:
         94:74:cd:18:47:d2:53:d1:fc:fa:ff:14:66:79:9e:b0:74:fb:
         7a:d3:4d:f1:88:dd:48:65:2c:d5:af:a2:98:71:46:89:33:c5:
         b8:a3:80:1a:89:07:73:24:93:7e:71:30:12:ac:2b:c7:c1:eb:
         bb:93:73:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:28:55 2026 by rpki-client