Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft
File:                     L3LcETktqlBahWLidjiGBgPNvr8.mft (raw, json)
Hash identifier:          zDUlJR/WaYNovxevbBirSiRdJ3rEPHdQh/u58hxruOQ=
Subject key identifier:   11:97:62:21:11:A4:02:85:E8:4A:B5:93:93:B2:1C:92:5C:0C:CF:FE
Authority key identifier: 2F:72:DC:11:39:2D:AA:50:5A:85:62:E2:76:38:86:06:03:CD:BE:BF
Certificate issuer:       /CN=A91FD59F/serialNumber=2F72DC11392DAA505A8562E27638860603CDBEBF
Certificate serial:       0102
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft
Manifest number:          FF
Signing time:             Mon 21 Sep 2026 06:12:36 +0000
Manifest this update:     Mon 21 Sep 2026 06:12:35 +0000
Manifest next update:     Mon 28 Sep 2026 06:12:35 +0000
Files and hashes:         1: L3LcETktqlBahWLidjiGBgPNvr8.crl (hash: agJo64WgJlrvwjmtjkejC+722iCYuv4EDzqADngcDYc=)
                          2: 2917F838011D11F19AF518A8476F56BC.roa (hash: xJYWdy3vw+vjD1PJdLPXMUN2+mPgPI/QMzbJ06GDJ8E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.crl
                          rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 06:12:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD59F, serialNumber=2F72DC11392DAA505A8562E27638860603CDBEBF
        Validity
            Not Before: Sep 21 06:12:35 2026 GMT
            Not After : Sep 28 06:12:35 2026 GMT
        Subject: CN=6ab0cad4-7e28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5e:09:82:a2:3f:03:c3:ae:9c:84:2c:55:a9:
                    8f:64:98:5e:c4:b1:80:23:37:3e:81:ee:7e:a3:5c:
                    c3:70:9f:de:ea:de:8c:1b:15:78:19:48:bb:b5:5b:
                    c9:66:f8:02:ed:1d:f7:f5:0c:c9:d5:71:16:0a:42:
                    b7:35:51:79:58:22:da:c2:45:a3:ef:e5:7d:59:f2:
                    78:ae:7d:7c:69:87:62:fb:c1:53:89:b3:db:e5:ad:
                    be:0b:f7:34:cc:c1:4b:8b:7a:a5:89:3a:b4:7a:e9:
                    65:d4:7c:0e:d5:aa:b2:aa:c9:39:31:f7:ea:9c:71:
                    5c:61:16:54:6f:4b:7f:58:d9:e6:d0:4d:b0:ae:13:
                    8f:f4:c0:e7:96:fe:bd:fd:d7:a7:36:8d:e8:36:21:
                    f3:ad:6f:71:dc:aa:08:f2:9e:e9:68:fd:63:a5:61:
                    d8:51:1f:ab:76:44:7c:1c:e0:66:65:20:15:cd:3e:
                    e2:2f:6a:ca:01:73:d6:25:84:ad:b3:83:c8:45:5b:
                    85:10:8f:c8:dd:62:3c:16:4e:85:b4:36:7f:e5:3d:
                    4d:22:af:51:33:0a:ab:d0:e6:7c:b6:d1:aa:cb:da:
                    46:08:2f:72:b0:1e:71:b7:9c:c7:16:66:f0:77:ab:
                    b4:19:82:21:c2:9c:23:fc:59:e3:57:01:cf:15:14:
                    af:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:97:62:21:11:A4:02:85:E8:4A:B5:93:93:B2:1C:92:5C:0C:CF:FE
            X509v3 Authority Key Identifier:
                keyid:2F:72:DC:11:39:2D:AA:50:5A:85:62:E2:76:38:86:06:03:CD:BE:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:52:19:4c:16:35:25:8c:9b:2f:fb:14:00:4f:d0:3c:0b:b3:
         4a:c9:3e:4b:f7:fb:9b:a2:7b:82:8f:fd:0a:3e:c6:44:97:15:
         07:98:82:b8:de:5d:1c:4b:94:80:07:10:5c:09:a1:c9:5b:36:
         78:68:45:ce:24:a2:4b:dd:56:39:c8:38:f3:d7:fc:f5:bf:a6:
         90:e3:b3:c8:2d:68:64:70:ce:e4:61:11:7c:44:6b:13:ca:f3:
         35:3c:89:1b:a5:a0:62:fe:91:7c:65:0f:87:ee:73:86:6c:68:
         f3:fc:35:63:c0:3f:05:be:aa:3f:8f:96:9f:13:84:91:26:0c:
         96:0c:b7:16:de:23:d1:e9:96:22:97:06:1f:ac:cc:05:c6:b4:
         18:39:27:00:27:a8:ce:c8:cb:48:b4:06:5d:19:a8:c5:2e:e4:
         41:15:03:9b:21:d8:92:52:6a:96:b5:83:f9:38:0c:cb:75:57:
         f3:57:bb:e3:49:23:24:ed:95:ef:86:e8:c2:77:1b:bd:a7:b2:
         d4:0a:c7:3d:1b:d6:7f:23:c3:97:5f:38:c5:a0:68:f8:2a:ed:
         e6:57:18:32:3b:a3:21:97:6a:99:63:64:cf:08:c6:71:93:62:
         ed:66:11:66:79:8d:05:c6:ff:ab:18:d6:2a:9f:59:39:c4:18:
         91:7b:45:36
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkQ1OUYxMTAvBgNVBAUTKDJGNzJEQzExMzkyREFBNTA1QTg1NjJFMjc2Mzg4NjA2
MDNDREJFQkYwHhcNMjYwOTIxMDYxMjM1WhcNMjYwOTI4MDYxMjM1WjAYMRYwFAYD
VQQDEw02YWIwY2FkNC03ZTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlF4JgqI/A8OunIQsVamPZJhexLGAIzc+ge5+o1zDcJ/e6t6MGxV4GUi7tVvJ
ZvgC7R339QzJ1XEWCkK3NVF5WCLawkWj7+V9WfJ4rn18aYdi+8FTibPb5a2+C/c0
zMFLi3qliTq0eull1HwO1aqyqsk5MffqnHFcYRZUb0t/WNnm0E2wrhOP9MDnlv69
/denNo3oNiHzrW9x3KoI8p7paP1jpWHYUR+rdkR8HOBmZSAVzT7iL2rKAXPWJYSt
s4PIRVuFEI/I3WI8Fk6FtDZ/5T1NIq9RMwqr0OZ8ttGqy9pGCC9ysB5xt5zHFmbw
d6u0GYIhwpwj/FnjVwHPFRSvcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBGXYiER
pAKF6Eq1k5OyHJJcDM/+MB8GA1UdIwQYMBaAFC9y3BE5LapQWoVi4nY4hgYDzb6/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDU5Ri8wMTkwNDNGMDMz
RjYxMUYwOUNFMzhFNDFDNEY5QUUwMi9MM0xjRVRrdHFsQmFoV0xpZGppR0JnUE52
cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0wzTGNFVGt0cWxCYWhXTGlkamlHQmdQTnZyOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RDU5Ri8wMTkwNDNGMDMzRjYxMUYwOUNFMzhFNDFDNEY5QUUwMi9MM0xjRVRrdHFs
QmFoV0xpZGppR0JnUE52cjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvVIZTBY1JYybL/sUAE/QPAuzSsk+S/f7m6J7go/9Cj7GRJcVB5iCuN5dHEuU
gAcQXAmhyVs2eGhFziSiS91WOcg489f89b+mkOOzyC1oZHDO5GERfERrE8rzNTyJ
G6WgYv6RfGUPh+5zhmxo8/w1Y8A/Bb6qP4+WnxOEkSYMlgy3Ft4j0emWIpcGH6zM
Bca0GDknACeozsjLSLQGXRmoxS7kQRUDmyHYklJqlrWD+TgMy3VX81e740kjJO2V
74bowncbvaey1ArHPRvWfyPDl184xaBo+Crt5lcYMjujIZdqmWNkzwjGcZNi7WYR
ZnmNBcb/qxjWKp9ZOcQYkXtFNg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 20:01:45 2026 by rpki-client