Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/L6lxpjvCY6602uvyDC_HEYPKZI8.mft
File:                     L6lxpjvCY6602uvyDC_HEYPKZI8.mft (raw, json)
Hash identifier:          fWxerWaujTlY4abKrTpuCIzo8lIfQXYHVC695vZMyQo=
Subject key identifier:   34:2A:75:EA:61:5E:13:0C:C4:C8:88:5D:0C:F0:B4:68:0C:46:42:0C
Authority key identifier: 2F:A9:71:A6:3B:C2:63:AE:B4:DA:EB:F2:0C:2F:C7:11:83:CA:64:8F
Certificate issuer:       /CN=A91F5DFB/serialNumber=2FA971A63BC263AEB4DAEBF20C2FC71183CA648F
Certificate serial:       80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L6lxpjvCY6602uvyDC_HEYPKZI8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/L6lxpjvCY6602uvyDC_HEYPKZI8.mft
Manifest number:          7D
Signing time:             Mon 21 Sep 2026 07:46:39 +0000
Manifest this update:     Mon 21 Sep 2026 07:46:39 +0000
Manifest next update:     Mon 28 Sep 2026 07:46:39 +0000
Files and hashes:         1: L6lxpjvCY6602uvyDC_HEYPKZI8.crl (hash: FhITkiogsU+/khXtUHBpfdNh4cq+oFMFgiU4c7F73HA=)
                          2: 3C5B5EF4FDC011F0B8AD40E9676F56BC.roa (hash: z+YkDVCxHIqN3QUlYGYvRtLpkeGO91vbNLFc9h3UONw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/L6lxpjvCY6602uvyDC_HEYPKZI8.crl
                          rsync://rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/L6lxpjvCY6602uvyDC_HEYPKZI8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L6lxpjvCY6602uvyDC_HEYPKZI8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:46:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5DFB, serialNumber=2FA971A63BC263AEB4DAEBF20C2FC71183CA648F
        Validity
            Not Before: Sep 21 07:46:39 2026 GMT
            Not After : Sep 28 07:46:39 2026 GMT
        Subject: CN=6ab0e0df-ab51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3a:d5:64:a9:81:1a:75:35:e2:89:b3:6f:dd:
                    74:da:bf:c9:fb:f2:31:bc:e8:48:e1:77:d6:79:cc:
                    e9:96:e9:84:62:8d:4a:95:f3:ae:bb:19:e6:33:a7:
                    70:e7:7f:6d:c9:2b:58:53:33:44:0a:32:a5:6c:4a:
                    e5:db:f3:b9:64:2b:83:a1:5f:c5:bd:51:59:f1:8d:
                    37:4e:13:9d:36:61:ba:23:aa:24:19:c6:ce:2d:5e:
                    32:0e:06:48:f8:0a:04:95:b3:f3:59:5f:62:67:0c:
                    b1:8d:9d:8c:10:a1:21:96:5d:bc:cc:14:2a:91:8f:
                    2e:70:d5:d9:42:bb:3b:d7:11:9f:f5:76:4c:64:87:
                    9c:e8:f7:83:fc:27:5e:a1:b1:26:c8:21:9b:b5:b8:
                    03:50:7a:9b:90:81:80:74:04:c6:33:85:97:31:f2:
                    7b:e6:a7:e1:7a:7c:e9:42:9d:fe:32:a9:d5:55:27:
                    88:f8:5d:4d:81:20:01:7a:a0:a1:38:96:66:c5:86:
                    3c:c1:8c:b8:02:d5:5d:aa:ee:4c:51:18:1b:8c:81:
                    70:55:ed:93:3f:ba:82:c3:63:8c:b5:51:b3:74:47:
                    79:12:18:63:c9:c9:6a:7a:da:a9:23:e9:ea:15:ba:
                    13:93:c5:4c:93:50:23:98:c2:ad:68:83:f7:cb:f8:
                    b3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:2A:75:EA:61:5E:13:0C:C4:C8:88:5D:0C:F0:B4:68:0C:46:42:0C
            X509v3 Authority Key Identifier:
                keyid:2F:A9:71:A6:3B:C2:63:AE:B4:DA:EB:F2:0C:2F:C7:11:83:CA:64:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/L6lxpjvCY6602uvyDC_HEYPKZI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L6lxpjvCY6602uvyDC_HEYPKZI8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5DFB/47F74DE6FDBF11F0A5FE8CE6676F56BC/L6lxpjvCY6602uvyDC_HEYPKZI8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:ed:65:af:d1:b7:3a:04:e8:5e:60:25:0b:59:da:a8:9e:44:
         b4:d5:53:34:dd:c7:6a:a9:94:0e:fa:9a:af:af:f5:cc:ca:c2:
         ce:e9:77:6b:74:25:1e:7e:12:a0:a2:5d:30:6f:86:9c:e2:04:
         bc:2f:8c:c7:78:e0:97:36:e0:1e:de:c5:21:1b:27:1b:91:24:
         3d:26:00:03:c2:a3:ff:bc:62:b6:c1:07:b7:51:e3:17:65:76:
         f6:66:5c:3a:09:3a:80:f7:a4:bb:41:3b:78:08:3c:cc:f5:6f:
         44:82:fe:d9:b6:aa:5a:93:af:6b:12:23:34:94:78:b3:37:da:
         c6:03:12:5e:bb:b1:c5:d4:3a:b8:19:ee:34:c8:5d:85:ee:5b:
         e2:75:82:e3:75:3a:98:07:02:85:c2:fc:5a:45:82:ed:7b:d1:
         08:1f:84:25:ed:f6:01:6b:3a:fb:cc:2d:b9:d4:f2:ba:bc:78:
         63:33:57:69:fd:16:1c:91:c7:e8:3d:d9:92:22:80:a9:aa:3e:
         ad:68:13:31:43:30:7b:8c:12:00:3c:1d:d5:b4:93:c9:36:dc:
         6d:c4:ba:e4:6b:ef:97:96:0d:ec:b8:5c:b0:26:56:4c:c1:92:
         70:03:97:69:af:11:b7:64:1a:3b:7c:29:35:5c:24:b9:42:dd:
         f1:3b:26:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:10:35 2026 by rpki-client