Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft
File:                     LT4_u8fCsSzVNMi57TeG-2qlVQY.mft (raw, json)
Hash identifier:          LQKd08zevNFj129fFEs/TFkOYGIa14qoSeqVs7tooyI=
Subject key identifier:   53:1C:0E:08:E5:12:7D:BD:BB:8F:15:31:60:9D:98:66:75:43:D8:98
Authority key identifier: 2D:3E:3F:BB:C7:C2:B1:2C:D5:34:C8:B9:ED:37:86:FB:6A:A5:55:06
Certificate issuer:       /CN=A91A7B36/serialNumber=2D3E3FBBC7C2B12CD534C8B9ED3786FB6AA55506
Certificate serial:       0113
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft
Manifest number:          010F
Signing time:             Thu 05 Nov 2026 06:56:28 +0000
Manifest this update:     Thu 05 Nov 2026 06:56:28 +0000
Manifest next update:     Thu 12 Nov 2026 06:56:28 +0000
Files and hashes:         1: LT4_u8fCsSzVNMi57TeG-2qlVQY.crl (hash: CduoNZFQRQHLVwcosPPn2SNTJy9K6i2NqPBfsD660IE=)
                          2: D055AA08480111F098A44B5CC4F9AE02.roa (hash: XsH+IJ5SSw5cAUWIZZhkMzbgbFC8kkMlwg6uRhNZXvk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.crl
                          rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Nov 2026 06:56:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 275 (0x113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7B36, serialNumber=2D3E3FBBC7C2B12CD534C8B9ED3786FB6AA55506
        Validity
            Not Before: Nov  5 06:56:28 2026 GMT
            Not After : Nov 12 06:56:28 2026 GMT
        Subject: CN=6aec289c-f375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2f:ea:50:06:92:78:55:a7:ab:fa:31:73:a6:
                    0c:ba:d3:5f:f6:8b:4e:91:98:d2:09:5c:04:ab:12:
                    45:b6:51:dc:5b:a5:b4:aa:c9:a4:b4:1f:87:f3:4f:
                    f5:20:d4:b9:60:2d:90:55:75:87:c9:1f:c1:a6:8f:
                    cf:d4:03:f2:ae:b4:fc:ef:88:0d:f8:4e:40:2b:11:
                    a6:cd:41:bd:64:00:e2:f6:21:59:65:23:e3:9a:e6:
                    a5:17:0f:a4:a9:10:d2:80:37:73:fa:77:5d:be:57:
                    f8:3d:63:2f:98:40:83:b1:40:e3:ca:3a:0e:f7:82:
                    98:a6:4b:5a:8d:36:08:fd:34:ce:30:6c:e7:20:ae:
                    83:1f:a9:5e:9f:fa:4c:b5:f3:ae:9b:7d:c5:45:15:
                    9d:9b:93:cc:9c:c8:09:5f:73:31:8e:ee:23:15:e0:
                    2e:0e:f7:f5:02:7c:11:ff:fd:42:92:85:c5:d8:5d:
                    7b:60:c9:dd:6a:31:61:33:2f:88:96:a5:18:95:fb:
                    92:eb:08:05:35:b6:7c:43:cc:f7:9c:ef:6f:2a:99:
                    ed:2f:9b:64:56:b8:87:09:00:41:cb:08:f4:26:21:
                    75:37:a4:12:74:fe:40:a9:f3:20:ba:5b:f4:c9:d1:
                    bb:57:68:85:70:04:58:0c:55:6d:a0:af:b3:8e:7c:
                    e3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:1C:0E:08:E5:12:7D:BD:BB:8F:15:31:60:9D:98:66:75:43:D8:98
            X509v3 Authority Key Identifier:
                keyid:2D:3E:3F:BB:C7:C2:B1:2C:D5:34:C8:B9:ED:37:86:FB:6A:A5:55:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:9d:16:ac:2c:24:6f:7f:e7:8d:76:06:62:16:d2:25:ce:ab:
         3a:e4:5b:5a:b4:1a:8f:95:ca:a3:ed:14:06:ca:21:ba:ab:f5:
         1d:a5:8d:fb:22:60:de:1c:b4:2e:9d:c8:54:97:2d:20:2d:71:
         90:40:db:dd:8a:0d:a8:88:06:20:35:00:12:98:85:2d:9c:2d:
         19:85:ba:8a:59:d2:56:60:16:37:c9:38:44:df:72:5a:5b:b9:
         c9:73:32:a1:b0:b5:ee:6c:80:de:96:91:71:0a:7b:9b:5c:af:
         fa:c2:e6:7d:4d:0e:1e:00:b1:5c:47:e7:29:f0:33:c3:ea:c0:
         1d:57:6b:83:35:b3:6d:12:6b:03:b2:d6:65:45:b0:16:fd:b5:
         c6:15:60:05:80:79:4a:f1:82:2f:45:79:7c:72:2a:1f:9b:bc:
         c3:e3:6f:06:4f:ad:10:f5:2a:eb:28:ae:79:13:01:6d:8b:d4:
         ef:a4:6e:ae:a8:76:08:6e:7d:f5:b4:8e:f1:05:a4:d3:d3:28:
         6a:7e:bd:fd:30:e2:be:6c:0f:65:5c:3c:f8:9e:59:87:de:b4:
         4c:6e:52:ee:9b:e4:84:53:ba:44:40:db:0f:fb:fd:73:17:2d:
         29:60:28:68:1d:9a:38:e7:1b:8f:40:f7:e3:c9:88:47:82:50:
         92:8a:d5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:03:22 2026 by rpki-client