Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft
File:                     LjBKPZJJnZ19M4o-oC98U0hCWxc.mft (raw, json)
Hash identifier:          881O5V7bMRboSA1ccFbksNkFPjFr71rA0jma1q/mt5A=
Subject key identifier:   D3:7C:F1:38:9A:3C:97:36:17:F6:4A:B3:CC:51:DA:24:15:6C:5E:FE
Authority key identifier: 2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17
Certificate issuer:       /CN=A91B5486/serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17
Certificate serial:       0A69
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft
Manifest number:          0A35
Signing time:             Sun 04 Oct 2026 19:50:27 +0000
Manifest this update:     Sun 04 Oct 2026 19:50:26 +0000
Manifest next update:     Sun 11 Oct 2026 19:50:26 +0000
Files and hashes:         1: LjBKPZJJnZ19M4o-oC98U0hCWxc.crl (hash: yBeQiitZWKxYbM394+qzqfGZfRgDdwDY+q0islEx5kY=)
                          2: 570B25FA305111F0BED81784C4F9AE02.roa (hash: qA6m0DYMiRUmJ031ZSlgBYMv/3TYzZQxA8v1f3tCGXk=)
                          3: E206DC460DEA11F0A924CF5CC4F9AE02.roa (hash: TwfOtqELROfwbdGW94mJ46Jldk9YfuE63pysMVGHVgU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl
                          rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 19:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2665 (0xa69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5486, serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17
        Validity
            Not Before: Oct  4 19:50:26 2026 GMT
            Not After : Oct 11 19:50:26 2026 GMT
        Subject: CN=6ac2ae02-d5fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:08:1d:e1:96:6c:c6:7c:18:d3:df:34:6f:a8:
                    81:44:2d:e7:ff:7c:4e:11:37:a3:a6:cb:93:7c:f7:
                    c2:63:06:99:af:5f:03:30:f7:d8:98:20:95:bd:bc:
                    21:c8:3f:99:0a:43:79:ff:b8:8e:90:85:12:17:0b:
                    77:94:8e:46:61:ea:6b:c3:db:85:c9:a2:18:0b:3c:
                    fb:1a:e3:e3:5b:34:d9:32:bd:1c:16:de:70:33:61:
                    3a:fe:24:f6:6c:ed:46:c5:f1:1b:d5:41:3c:ee:6d:
                    45:13:47:ee:16:03:91:93:fa:da:66:a1:73:23:02:
                    21:38:91:f6:dd:68:c4:16:d8:c3:44:e4:ac:46:91:
                    94:cb:6c:ee:88:86:1a:c8:81:2c:2d:cc:21:a3:2f:
                    9d:f1:2c:14:4d:d4:34:46:bd:63:2b:70:a1:c8:e1:
                    8f:e6:c2:22:0e:c7:d8:ee:71:d5:6a:dc:06:49:c2:
                    7a:5e:8b:bc:ad:c0:09:ce:da:fa:ff:ae:83:4a:24:
                    ba:4d:42:bf:05:c2:1e:d5:ff:1b:38:37:d3:91:df:
                    8c:d6:1e:ea:a3:89:57:cc:8f:28:29:49:d2:3a:7e:
                    04:37:a6:d8:99:ed:64:4d:54:53:11:0d:f5:c8:d9:
                    da:e4:d9:57:70:21:89:81:55:65:52:b1:33:4f:35:
                    f8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:7C:F1:38:9A:3C:97:36:17:F6:4A:B3:CC:51:DA:24:15:6C:5E:FE
            X509v3 Authority Key Identifier:
                keyid:2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:77:2a:03:12:6d:1e:4b:19:d5:65:9d:1b:23:4c:a2:ce:e6:
         b2:ce:fd:ca:ae:53:43:c1:e0:b1:ab:83:70:7d:2d:18:9e:5c:
         ff:7c:26:da:f9:0a:d5:22:4c:7b:f0:de:63:c2:e8:f6:15:f2:
         25:1c:68:29:43:b1:53:2b:40:4f:1c:ee:f0:27:a0:bf:c4:41:
         61:49:35:1f:d6:b5:92:4e:f3:dd:15:67:6b:7c:98:bd:54:cc:
         c1:f6:92:5d:7a:6a:33:45:e8:85:0e:12:6e:28:07:14:23:93:
         d2:c7:aa:a8:1e:1a:f5:e0:39:10:14:f3:47:ff:d0:3d:a0:d3:
         9c:0f:9e:22:2c:ab:ec:09:41:9d:1a:8d:d7:46:72:43:6a:8d:
         52:ce:ae:a8:38:7f:6b:78:d5:d5:a4:dc:23:22:a3:53:25:53:
         04:96:3b:29:8e:6d:e1:51:9b:db:24:c4:a4:8d:d8:4c:af:63:
         12:9c:18:18:a9:c6:16:4b:32:55:bb:4e:49:40:bd:38:42:90:
         20:8b:a8:1f:9f:f2:dd:36:fd:11:90:a2:b5:c2:b5:c8:8a:f3:
         9b:c5:84:cd:e2:22:0b:37:e3:af:02:7c:3f:c8:cb:99:09:8f:
         0a:75:3a:78:f1:59:3f:26:f9:4f:16:de:6c:ff:ff:30:33:4a:
         4b:1b:e5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 00:28:52 2026 by rpki-client