Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
File:                     lMjvPyqSLuFEqm8LZkNspGbMSwo.mft (raw, json)
Hash identifier:          ChSa1XH1I7wFJPWK/g40AGpC+tiXjDerOFRfrhAzX2A=
Subject key identifier:   86:B2:38:B5:0C:F8:32:AD:84:61:80:CF:A1:E4:3C:B8:70:A1:BC:8C
Authority key identifier: 94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A
Certificate issuer:       /CN=A91F37AB/serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A
Certificate serial:       011E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
Manifest number:          010B
Signing time:             Sat 19 Sep 2026 06:11:27 +0000
Manifest this update:     Sat 19 Sep 2026 06:11:26 +0000
Manifest next update:     Sat 26 Sep 2026 06:11:26 +0000
Files and hashes:         1: lMjvPyqSLuFEqm8LZkNspGbMSwo.crl (hash: 6Mv0Q1PGtr5B4mNesihXx7nDLVonLRznFiwLLUQ7U1o=)
                          2: 3B5A1BBA21F411F0848CDE7EC4F9AE02.roa (hash: uwAj/+Du5C1qEvZtOUqf44R0VMo9+4/mthpipOHyiGw=)
                          3: 3C2E004221F411F0848CDE7EC4F9AE02.roa (hash: 5NNtAQyFropb/Z6y0svtRqsWdy6ThB8osPzJl9uYO4k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl
                          rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 286 (0x11e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F37AB, serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A
        Validity
            Not Before: Sep 19 06:11:26 2026 GMT
            Not After : Sep 26 06:11:26 2026 GMT
        Subject: CN=6aae278e-129b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:65:58:f2:af:0f:86:a2:7b:4f:4e:cb:1e:94:
                    b7:4c:f6:06:bf:5c:27:d5:0d:f6:dc:ab:d8:7d:94:
                    9c:8a:d0:b1:c4:bc:bd:2d:a4:18:08:84:0e:ae:a2:
                    bb:c3:83:d8:89:6e:10:f8:68:06:32:b2:a4:ad:92:
                    5f:01:f2:39:3d:7f:1c:d9:b9:09:af:08:82:4a:a7:
                    d9:77:ab:13:28:49:87:82:2b:46:f4:21:88:81:55:
                    38:6a:81:38:c8:6b:f1:ea:62:b0:bd:ac:be:62:9f:
                    20:75:81:09:9c:d3:f4:b3:07:18:3b:cf:37:5f:f0:
                    52:1b:37:06:7e:7e:73:44:3b:0b:35:84:68:a5:4c:
                    cb:bd:99:9e:5d:65:77:db:cb:73:51:b1:d5:ca:9b:
                    20:12:f6:90:bb:1e:6f:3b:fe:e3:57:33:74:ea:5f:
                    dc:33:5e:ac:f4:a5:36:57:70:58:1d:c4:bd:ca:e6:
                    c0:b0:90:a6:51:53:8e:e1:7a:a6:71:95:70:09:e4:
                    fc:df:ab:48:34:2b:76:c9:81:f1:88:6f:00:90:08:
                    55:46:8c:82:50:5a:be:84:31:18:49:c4:08:ab:d7:
                    22:65:e3:ea:86:fc:24:a7:18:dd:f2:38:90:8a:89:
                    75:cf:9f:66:e8:90:a8:94:98:eb:ed:d0:c5:d6:71:
                    d0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:B2:38:B5:0C:F8:32:AD:84:61:80:CF:A1:E4:3C:B8:70:A1:BC:8C
            X509v3 Authority Key Identifier:
                keyid:94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:ab:6b:b0:a1:65:0c:eb:c0:13:08:05:bc:3a:cc:a2:c9:f3:
         17:9b:bd:8d:4e:3d:19:9d:02:a4:c8:9a:fa:a9:27:17:ab:d3:
         5b:8b:85:9d:99:89:fa:d9:f1:ca:5d:69:5d:eb:ce:3d:15:19:
         a1:f1:2c:1a:c2:86:bb:40:41:3b:a3:e3:17:47:9b:07:ad:1b:
         a9:7e:3d:6d:17:02:de:fb:91:f4:77:a6:6b:c4:ad:48:d7:8c:
         d0:20:5f:3d:68:69:2b:74:0c:03:08:50:94:6e:cd:bf:80:25:
         13:44:e2:b0:90:53:f2:90:74:fb:a0:10:60:f5:95:cb:8a:13:
         84:02:59:d8:5b:2c:fe:bc:2d:5e:4d:f9:3b:f2:87:8c:67:ce:
         65:da:af:94:cf:b3:49:51:be:83:b4:04:99:41:ac:29:58:7e:
         c8:5d:f1:e6:9a:c2:1d:f1:35:27:49:2e:4b:64:a2:d3:70:d7:
         6c:99:9b:09:14:1d:04:92:72:1d:3f:5b:0a:bd:e4:2c:12:a6:
         80:5b:32:8e:a9:6d:0a:18:8b:86:90:ce:ab:4e:17:7a:94:2c:
         dc:82:d6:94:55:ee:6c:49:30:e4:5e:0e:e4:ea:f6:03:50:cf:
         8d:c7:1a:82:af:bd:57:87:c7:dd:36:79:fc:98:16:47:84:ae:
         9b:b5:4d:4c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjM3QUIxMTAvBgNVBAUTKDk0QzhFRjNGMkE5MjJFRTE0NEFBNkYwQjY2NDM2Q0E0
NjZDQzRCMEEwHhcNMjYwOTE5MDYxMTI2WhcNMjYwOTI2MDYxMTI2WjAYMRYwFAYD
VQQDEw02YWFlMjc4ZS0xMjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6WVY8q8PhqJ7T07LHpS3TPYGv1wn1Q323KvYfZScitCxxLy9LaQYCIQOrqK7
w4PYiW4Q+GgGMrKkrZJfAfI5PX8c2bkJrwiCSqfZd6sTKEmHgitG9CGIgVU4aoE4
yGvx6mKwvay+Yp8gdYEJnNP0swcYO883X/BSGzcGfn5zRDsLNYRopUzLvZmeXWV3
28tzUbHVypsgEvaQux5vO/7jVzN06l/cM16s9KU2V3BYHcS9yubAsJCmUVOO4Xqm
cZVwCeT836tINCt2yYHxiG8AkAhVRoyCUFq+hDEYScQIq9ciZePqhvwkpxjd8jiQ
iol1z59m6JColJjr7dDF1nHQnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIayOLUM
+DKthGGAz6HkPLhwobyMMB8GA1UdIwQYMBaAFJTI7z8qki7hRKpvC2ZDbKRmzEsK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzdBQi8yNjQ4NDU5MDIx
RjMxMUYwQTI4MTM1N0FDNEY5QUUwMi9sTWp2UHlxU0x1RkVxbThMWmtOc3BHYk1T
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xNanZQeXFTTHVGRXFtOExaa05zcEdiTVN3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MzdBQi8yNjQ4NDU5MDIxRjMxMUYwQTI4MTM1N0FDNEY5QUUwMi9sTWp2UHlxU0x1
RkVxbThMWmtOc3BHYk1Td28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARqtrsKFlDOvAEwgFvDrMosnzF5u9jU49GZ0CpMia+qknF6vTW4uFnZmJ+tnx
yl1pXevOPRUZofEsGsKGu0BBO6PjF0ebB60bqX49bRcC3vuR9Hema8StSNeM0CBf
PWhpK3QMAwhQlG7Nv4AlE0TisJBT8pB0+6AQYPWVy4oThAJZ2Fss/rwtXk35O/KH
jGfOZdqvlM+zSVG+g7QEmUGsKVh+yF3x5prCHfE1J0kuS2Si03DXbJmbCRQdBJJy
HT9bCr3kLBKmgFsyjqltChiLhpDOq04XepQs3ILWlFXubEkw5F4O5Or2A1DPjcca
gq+9V4fH3TZ5/JgWR4Sum7VNTA==
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:28:19 2026 by rpki-client