Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft
File:                     lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft (raw, json)
Hash identifier:          3WDhHv4VCdkCVDLYUZXLggONQR/t0QJxbsXDQiWC/L4=
Subject key identifier:   84:A9:4C:C3:02:83:52:6E:27:94:D3:F7:07:B7:55:40:0D:A9:A5:27
Authority key identifier: 96:C1:BC:98:7A:D6:64:39:13:F6:5E:05:D1:A6:63:F6:4C:4A:E1:B6
Certificate issuer:       /CN=A91C6A87/serialNumber=96C1BC987AD6643913F65E05D1A663F64C4AE1B6
Certificate serial:       6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsG8mHrWZDkT9l4F0aZj9kxK4bY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft
Manifest number:          69
Signing time:             Wed 07 Oct 2026 08:33:35 +0000
Manifest this update:     Wed 07 Oct 2026 08:33:34 +0000
Manifest next update:     Wed 14 Oct 2026 08:33:34 +0000
Files and hashes:         1: lsG8mHrWZDkT9l4F0aZj9kxK4bY.crl (hash: uqhNp9o7x+CKaes8OogRHOmYuJ/GsKmJYzlYlmjLPKs=)
                          2: 0190D9DAB27811F1901667443511F970.roa (hash: FYWhAcq7Avqujd9P2u3A9dXiOLrYNlsp2Zn1y3CZTn8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.crl
                          rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsG8mHrWZDkT9l4F0aZj9kxK4bY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 08:33:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6A87, serialNumber=96C1BC987AD6643913F65E05D1A663F64C4AE1B6
        Validity
            Not Before: Oct  7 08:33:34 2026 GMT
            Not After : Oct 14 08:33:34 2026 GMT
        Subject: CN=6ac603df-d5a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5b:4e:11:ac:b9:fd:a0:50:a1:ed:8c:96:fc:
                    ae:e5:94:ee:56:77:d0:b1:9a:b8:1b:fa:4e:ec:96:
                    fe:84:c1:6b:20:03:de:7a:cf:83:5d:b3:94:ce:7d:
                    ce:2b:f7:5a:9a:b2:a9:81:b8:af:5b:db:30:17:2a:
                    f8:31:6b:07:90:41:33:06:bd:51:c6:7f:1e:bc:3c:
                    90:73:fb:6f:ed:38:0d:29:0e:68:5b:42:e1:aa:3e:
                    a7:74:4d:a5:c5:80:52:18:57:1b:83:13:f1:4d:c4:
                    51:5f:ee:5c:ee:b7:03:94:19:22:08:46:24:d0:b5:
                    45:2f:63:02:29:ac:57:c4:52:56:f6:ca:4f:34:b7:
                    17:a3:dd:9e:96:a5:d1:d2:e8:5b:6f:3b:45:b4:46:
                    ad:d3:1d:69:a4:8e:6f:e0:15:39:4a:1c:ba:b2:dc:
                    e0:d7:ec:85:ae:d8:ed:4b:ba:90:23:d7:36:18:09:
                    52:d3:da:7a:87:10:68:6d:92:f7:8c:7f:0c:21:eb:
                    bc:4b:d8:62:05:80:b7:3a:7d:2c:f7:23:6b:36:e4:
                    e3:fd:52:f1:ba:00:df:bb:ea:0d:1c:00:5b:fc:be:
                    09:fe:8e:85:43:37:14:26:ca:32:00:e9:58:88:cc:
                    37:56:20:df:95:35:5f:dd:38:9c:a9:2b:06:f5:9f:
                    da:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A9:4C:C3:02:83:52:6E:27:94:D3:F7:07:B7:55:40:0D:A9:A5:27
            X509v3 Authority Key Identifier:
                keyid:96:C1:BC:98:7A:D6:64:39:13:F6:5E:05:D1:A6:63:F6:4C:4A:E1:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsG8mHrWZDkT9l4F0aZj9kxK4bY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:03:d2:ca:e1:bb:89:70:d2:9e:17:e4:38:53:6c:e7:29:03:
         a7:d1:78:b9:90:e5:8e:9d:b5:c6:4f:d8:e1:16:ad:94:70:42:
         c6:42:28:c5:22:23:3d:83:a6:aa:25:fb:e9:7a:55:ff:a6:c6:
         e4:a4:b1:94:c9:a6:79:7a:30:6b:12:7c:58:1f:73:88:5a:e9:
         64:e8:50:d2:77:18:4a:58:c6:e5:9b:8a:9b:f0:a6:11:a9:20:
         dc:3f:99:db:86:bf:82:7b:f3:98:0e:9a:ff:86:71:2c:63:3f:
         c6:43:9f:ee:a4:4a:41:82:b9:ea:a5:5c:63:24:a8:48:ff:a5:
         70:2c:87:ae:e4:15:ae:74:c1:cf:ac:ae:53:f9:ea:02:4d:30:
         91:b6:72:67:66:86:be:8d:8e:a4:5b:cd:01:03:b8:b6:83:aa:
         b2:39:45:e2:bd:63:c4:90:94:6a:11:84:46:9c:62:4e:ec:4c:
         a6:a4:ad:70:b1:3e:08:c5:32:78:a2:8b:06:2a:0d:04:57:27:
         e1:c7:c7:d2:11:66:3b:a9:e7:e8:b7:41:a9:7d:82:60:ff:65:
         0d:e3:5e:93:b3:6f:b9:a7:ac:5d:d6:62:9a:1c:46:e0:52:b3:
         ac:8e:11:76:2a:6b:76:66:7d:92:c1:48:1f:0c:79:c1:03:6b:
         6a:63:86:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:28:23 2026 by rpki-client