Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
File:                     LnKDqP3Vzws9n6or6XQogZiRk6U.mft (raw, json)
Hash identifier:          hWcrUcr6AJ66iLI3tY7VfIr+NVS6MLu19b5ddNTIdFE=
Subject key identifier:   B7:AA:46:C9:0B:F8:1F:06:6E:DA:4A:9D:B3:13:0C:70:73:A3:1E:73
Authority key identifier: 2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5
Certificate issuer:       /CN=A91DFADF/serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5
Certificate serial:       0ABA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
Manifest number:          0AA6
Signing time:             Mon 12 Oct 2026 19:41:06 +0000
Manifest this update:     Mon 12 Oct 2026 19:41:06 +0000
Manifest next update:     Mon 19 Oct 2026 19:41:06 +0000
Files and hashes:         1: LnKDqP3Vzws9n6or6XQogZiRk6U.crl (hash: MdPQ1vOYGClyzb5YyFEAEeHW/S8DfqnFsG3nlXrQzv4=)
                          2: 651384A6766811EF96E4115EC4F9AE02.roa (hash: 4tvOJ0DlZvwroxMkIv2YzecHFGQeqL4hT/QTBep3keQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl
                          rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 19:41:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2746 (0xaba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFADF, serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5
        Validity
            Not Before: Oct 12 19:41:06 2026 GMT
            Not After : Oct 19 19:41:06 2026 GMT
        Subject: CN=6acd37d2-76b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6d:30:5a:06:e4:e1:54:fb:f5:fc:60:42:cc:
                    c1:16:dc:15:c1:91:b2:08:43:8d:9d:ac:c7:c9:b7:
                    e5:f1:02:2b:f1:34:5d:ef:15:29:8a:42:da:59:25:
                    5f:64:67:be:c2:39:72:ff:62:6d:cd:33:42:4e:54:
                    bc:db:92:d7:20:a8:8c:49:f6:46:1e:dc:cc:45:63:
                    87:ca:ae:58:39:ff:92:1c:4b:e4:d7:ba:a3:02:fa:
                    7e:e4:99:5e:25:6a:9b:15:4d:14:d2:17:ce:32:3e:
                    52:cf:8e:30:3a:e3:42:a9:3f:35:63:46:a7:74:ff:
                    ac:bf:23:e6:bb:0a:8c:d3:28:6b:54:a5:bf:5e:4d:
                    53:d8:f6:9b:b4:7a:97:8e:7c:50:37:ab:89:20:ce:
                    40:31:4d:4b:40:c5:93:df:da:25:b4:30:19:8f:0d:
                    23:75:77:3f:43:da:d8:c3:41:46:36:f7:14:9d:38:
                    86:37:e5:9a:ab:4f:2b:bc:f3:44:44:a2:89:5a:19:
                    68:a4:ca:37:ce:75:29:11:8c:6d:5d:97:df:66:d6:
                    3d:4c:13:d1:84:12:ad:c0:13:3f:39:eb:6f:75:ac:
                    70:24:dd:10:c3:db:35:c0:e4:db:31:01:e4:a1:f3:
                    b8:86:90:23:07:6d:bd:74:63:61:18:2c:1e:1a:ba:
                    b3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:AA:46:C9:0B:F8:1F:06:6E:DA:4A:9D:B3:13:0C:70:73:A3:1E:73
            X509v3 Authority Key Identifier:
                keyid:2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:ff:19:9f:f2:9d:f6:7e:0b:a2:2a:f4:5d:03:0f:45:ef:7e:
         12:90:39:87:dc:47:5f:6b:be:8d:63:56:c4:db:f0:9d:23:d7:
         9d:a3:46:3e:d8:19:37:0d:a1:b4:ff:53:ed:14:60:b3:b1:07:
         05:1b:b5:3f:ce:d8:b9:9e:00:ad:c9:d5:69:22:0a:fb:94:9b:
         d0:b8:0e:b5:3e:e5:b9:86:0e:4f:03:97:33:a5:0b:75:5f:7c:
         27:5d:5f:ba:76:ca:78:ca:de:9c:a2:18:ba:b2:64:b2:8c:48:
         4a:20:e5:6c:cf:e6:41:1d:b7:24:c3:e5:c7:50:9b:a7:b3:fb:
         9e:5a:ef:f2:14:70:67:78:bb:fa:14:b6:44:0d:9f:c1:c2:bb:
         cd:ae:f5:c7:7f:7a:59:73:e0:7b:b4:3d:51:ab:63:68:93:e5:
         f7:06:48:45:cb:3f:bd:c0:c3:7a:7d:07:34:6c:cf:35:e1:c5:
         e2:80:99:1f:15:65:45:c6:27:17:c6:a8:db:78:81:4f:d2:7b:
         7e:61:5c:33:55:71:e1:31:84:16:5e:7b:4c:da:ab:27:72:e8:
         c5:15:8f:9f:a4:b9:66:82:8a:0f:3a:23:ad:9a:1c:09:bd:07:
         05:bf:52:2e:87:87:07:da:5c:6f:74:69:26:5d:60:19:1a:b2:
         cb:10:8c:23
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCrowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REZBREYxMTAvBgNVBAUTKDJFNzI4M0E4RkRENUNGMEIzRDlGQUEyQkU5NzQyODgx
OTg5MTkzQTUwHhcNMjYxMDEyMTk0MTA2WhcNMjYxMDE5MTk0MTA2WjAYMRYwFAYD
VQQDEw02YWNkMzdkMi03NmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyW0wWgbk4VT79fxgQszBFtwVwZGyCEONnazHybfl8QIr8TRd7xUpikLaWSVf
ZGe+wjly/2JtzTNCTlS825LXIKiMSfZGHtzMRWOHyq5YOf+SHEvk17qjAvp+5Jle
JWqbFU0U0hfOMj5Sz44wOuNCqT81Y0andP+svyPmuwqM0yhrVKW/Xk1T2PabtHqX
jnxQN6uJIM5AMU1LQMWT39oltDAZjw0jdXc/Q9rYw0FGNvcUnTiGN+Waq08rvPNE
RKKJWhlopMo3znUpEYxtXZffZtY9TBPRhBKtwBM/OetvdaxwJN0Qw9s1wOTbMQHk
ofO4hpAjB229dGNhGCweGrqzTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLeqRskL
+B8GbtpKnbMTDHBzox5zMB8GA1UdIwQYMBaAFC5yg6j91c8LPZ+qK+l0KIGYkZOl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkFERi81ODUzMjBERThC
RDgxMUVBOTVBQUVCODNDNEY5QUUwMi9MbktEcVAzVnp3czluNm9yNlhRb2daaVJr
NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xuS0RxUDNWendzOW42b3I2WFFvZ1ppUms2VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RkFERi81ODUzMjBERThCRDgxMUVBOTVBQUVCODNDNEY5QUUwMi9MbktEcVAzVnp3
czluNm9yNlhRb2daaVJrNlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANf8Zn/Kd9n4Loir0XQMPRe9+EpA5h9xHX2u+jWNWxNvwnSPXnaNGPtgZNw2h
tP9T7RRgs7EHBRu1P87YuZ4ArcnVaSIK+5Sb0LgOtT7luYYOTwOXM6ULdV98J11f
unbKeMrenKIYurJksoxISiDlbM/mQR23JMPlx1Cbp7P7nlrv8hRwZ3i7+hS2RA2f
wcK7za71x396WXPge7Q9UatjaJPl9wZIRcs/vcDDen0HNGzPNeHF4oCZHxVlRcYn
F8ao23iBT9J7fmFcM1Vx4TGEFl57TNqrJ3LoxRWPn6S5ZoKKDzojrZocCb0HBb9S
LoeHB9pcb3RpJl1gGRqyyxCMIw==
-----END CERTIFICATE-----
Generated at Tue Oct 13 13:38:36 2026 by rpki-client