Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft
File:                     lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft (raw, json)
Hash identifier:          NE4kv3gu1VNAOyCHZSEg10f2FEUQ8gQfijelAuLj1pc=
Subject key identifier:   48:F9:1C:45:B7:2E:27:E9:86:BC:D6:DB:25:4F:07:59:D1:7B:87:77
Authority key identifier: 96:C1:BC:98:7A:D6:64:39:13:F6:5E:05:D1:A6:63:F6:4C:4A:E1:B6
Certificate issuer:       /CN=A91C6A87/serialNumber=96C1BC987AD6643913F65E05D1A663F64C4AE1B6
Certificate serial:       11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsG8mHrWZDkT9l4F0aZj9kxK4bY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft
Manifest number:          10
Signing time:             Fri 17 Apr 2026 08:45:55 +0000
Manifest this update:     Fri 17 Apr 2026 08:45:55 +0000
Manifest next update:     Fri 24 Apr 2026 08:45:55 +0000
Files and hashes:         1: lsG8mHrWZDkT9l4F0aZj9kxK4bY.crl (hash: aVvp10nmelt4LSPm+hQkAwZqWpIvcYVBRTKlQMyae+0=)
                          2: 20763B5024C611F191287557A6833773.roa (hash: 0r6vS9qeg1815ILGWf03i2uDlWfL7ibwuznjphtmkNw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.crl
                          rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsG8mHrWZDkT9l4F0aZj9kxK4bY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:45:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6A87, serialNumber=96C1BC987AD6643913F65E05D1A663F64C4AE1B6
        Validity
            Not Before: Apr 17 08:45:55 2026 GMT
            Not After : Apr 24 08:45:55 2026 GMT
        Subject: CN=69e1f343-724e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bb:1d:b1:a5:25:59:81:83:5d:a7:b9:7c:d3:
                    e4:47:0c:a1:da:fd:71:07:db:78:86:29:f1:1f:6f:
                    a8:4e:69:1f:ee:4d:74:e4:04:62:45:73:70:e9:a9:
                    5b:89:f3:c7:8a:e2:61:b2:40:af:60:d0:e8:3f:07:
                    53:14:5f:3e:4b:a9:21:12:3a:21:79:4b:93:0b:cb:
                    d8:ed:d6:bc:95:0c:b3:fb:3d:cf:dc:1b:97:40:42:
                    d7:19:28:79:c9:0e:5a:89:8e:e0:47:79:a6:0f:58:
                    40:59:e2:04:a3:fa:41:23:07:54:97:13:8e:55:ed:
                    65:11:e5:d7:9a:92:0b:9b:f7:a3:77:68:52:14:47:
                    cd:c8:c7:1f:28:ed:88:88:64:12:8d:0a:dc:5b:11:
                    bf:b1:d2:c9:26:88:bc:67:7c:94:99:87:26:1d:c2:
                    73:46:ec:94:ef:d5:9a:a5:e3:e6:56:3f:f4:ce:29:
                    af:bb:6f:7d:09:a2:d0:57:f6:89:b4:64:77:83:be:
                    37:03:77:eb:05:5f:7d:78:e0:a7:1b:ee:f4:c0:78:
                    0d:2e:09:a6:b5:0f:a8:7f:bb:04:ea:cf:dd:99:a4:
                    69:7e:20:16:85:a2:5f:53:8e:0b:74:ac:b5:c3:ad:
                    0d:e9:05:88:00:16:3b:0b:aa:f0:1d:df:67:db:35:
                    90:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F9:1C:45:B7:2E:27:E9:86:BC:D6:DB:25:4F:07:59:D1:7B:87:77
            X509v3 Authority Key Identifier:
                keyid:96:C1:BC:98:7A:D6:64:39:13:F6:5E:05:D1:A6:63:F6:4C:4A:E1:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsG8mHrWZDkT9l4F0aZj9kxK4bY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:14:21:53:bf:47:57:1b:27:58:df:05:71:78:05:a8:bc:24:
         1b:cd:37:34:41:d3:35:57:bf:a1:31:2a:16:4f:0e:a8:39:3c:
         3b:16:62:9e:d7:ea:bc:7f:e8:51:e7:98:b1:b0:7b:1e:1c:a9:
         53:d0:10:cd:9f:ab:b1:5c:b5:ea:6c:9f:52:33:d5:36:78:f0:
         17:74:3d:36:d6:2c:45:a0:70:67:59:cc:d0:92:0a:b7:af:0a:
         ba:cf:69:98:c8:65:58:8f:f4:72:f5:81:df:a2:0d:7f:46:22:
         85:b7:e7:ee:9d:20:c9:f3:d8:6e:28:47:48:a8:4d:1c:0a:7a:
         eb:a1:da:28:92:46:8d:ab:85:e3:0e:c2:d9:e8:74:b6:46:c4:
         f3:99:a8:3c:3e:02:32:c7:4d:64:8c:fc:35:fc:a8:19:6c:54:
         46:ec:9d:48:0e:b7:ef:79:00:69:8e:14:98:8e:4b:1c:b7:1c:
         52:91:03:4b:ea:85:ea:a3:0c:f5:2c:58:ec:b3:75:10:86:d2:
         8a:44:8b:a5:08:ca:84:26:e3:02:38:a9:6d:8e:0c:7e:89:f0:
         f7:9c:2d:da:13:87:f1:e6:ac:41:e5:fe:e1:bd:92:01:6b:27:
         6e:31:55:35:9f:64:ae:3b:69:8d:e5:d2:eb:63:e6:0c:50:1c:
         97:7b:db:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:35:09 2026 by rpki-client