Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft
File:                     PR_LclXFJQPhCuWEsRiaFc9WB04.mft (raw, json)
Hash identifier:          Xrm74i8I4ebWMHUFdR5lYpQCKU6yTKH3dpvrLxvEZXA=
Subject key identifier:   85:ED:A3:3C:7C:87:B9:C1:3D:16:18:93:F6:A1:42:55:89:28:4A:87
Authority key identifier: 3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E
Certificate issuer:       /CN=A9112FE1/serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E
Certificate serial:       015D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft
Manifest number:          013A
Signing time:             Fri 25 Sep 2026 05:58:44 +0000
Manifest this update:     Fri 25 Sep 2026 05:58:44 +0000
Manifest next update:     Fri 02 Oct 2026 05:58:44 +0000
Files and hashes:         1: PR_LclXFJQPhCuWEsRiaFc9WB04.crl (hash: 6IwnOtYYAcIABQ3wbMI8fSQhF85ndEWwLsZK570bF8M=)
                          2: C8171E8EC04D11F081466417C4F9AE02.roa (hash: F2rHWA0aG3jOYck+BArfetJHmQYT8RWz4zDyWgQQ0/Q=)
                          3: 81F3BDC2B71911F18A35C1CA6C11F970.roa (hash: 7CMUjNcN2vZ5HiaJ5aDEnSDfrFEzwgxh0aCrN4y9pH0=)
                          4: 76FCBDA6353311F0BE188334C4F9AE02.roa (hash: PannZ6VHlnMlbIAiTwMXrhZQx+rOzoDIuG7Svi8FR6k=)
                          5: 7E99DBC2F73711F0916171B3376F56BC.roa (hash: UEW2XtX4KBzm17TH1yp1jERmuGNV8b8OsPHmzbPq8eg=)
                          6: F6A8B3960A1511F0BB6C770DC4F9AE02.roa (hash: KGNNcKyC/9ZNG33rV3+WnydQa40FOtfcMASpCbQGvcA=)
                          7: A679A90E6ACA11F19C5D49226847A888.roa (hash: HlE4/rCdBHaYQMrVtMYhseWs8raS1AuMlQ1WnzgrFwc=)
                          8: D87376860A1511F09D97420DC4F9AE02.roa (hash: 8lzuSsXoeVTLO94cZnbjFM82UzyIWVo6xrDZpzd/rnI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl
                          rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 05:58:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 349 (0x15d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112FE1, serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E
        Validity
            Not Before: Sep 25 05:58:44 2026 GMT
            Not After : Oct  2 05:58:44 2026 GMT
        Subject: CN=6ab60d94-f0ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e4:86:8a:65:23:ea:d9:30:ac:f4:a0:65:f0:
                    f9:9f:72:ff:44:80:db:dc:cc:3d:27:c7:09:1b:f7:
                    37:4c:b0:9c:99:4a:19:80:ab:58:fb:a2:5c:6b:c0:
                    e7:9d:44:2c:b0:3d:06:4a:67:be:f2:22:d4:79:9c:
                    4a:39:aa:e5:aa:c8:64:6c:be:65:96:fe:c8:36:f8:
                    31:5d:d9:00:df:89:26:63:39:18:70:6b:5d:09:d7:
                    47:e2:ee:dd:dc:08:38:42:19:b2:0b:95:04:1d:f0:
                    2a:a1:f2:47:c9:97:8e:1f:cf:1d:79:d4:72:80:c4:
                    6b:d5:56:47:1f:58:54:1b:2d:84:d1:df:97:c2:3c:
                    cc:69:c7:29:40:48:58:ad:5d:f6:c0:fe:10:b2:33:
                    19:8d:4e:37:58:cd:59:ac:c2:56:85:d0:62:47:f7:
                    22:12:fd:f2:4b:6b:08:6f:6f:2a:24:67:ae:f9:ef:
                    82:37:e5:5c:e7:77:03:99:ff:64:48:09:79:d0:cd:
                    bd:80:ec:f7:4e:eb:37:5a:5d:45:15:80:88:ef:a8:
                    7a:7f:db:d4:b5:de:6c:61:cc:d2:a2:54:ec:bf:24:
                    75:ef:f5:08:6e:75:f7:ce:76:90:78:34:6d:d7:22:
                    bb:e7:18:01:dd:73:cc:53:a4:79:87:ee:f4:a2:e2:
                    45:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:ED:A3:3C:7C:87:B9:C1:3D:16:18:93:F6:A1:42:55:89:28:4A:87
            X509v3 Authority Key Identifier:
                keyid:3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:6d:1d:06:98:f2:7b:31:43:bd:9a:d7:63:3f:9b:04:e3:09:
         1c:7d:6b:5b:1a:57:c1:6b:49:36:4c:f9:a1:21:64:ec:2b:44:
         91:8e:15:21:1e:71:2d:bb:1d:9c:a5:a8:d0:f4:bc:8e:dd:b6:
         b2:fa:5d:80:07:9f:a1:51:91:71:bf:6c:36:c2:7c:70:60:ea:
         d7:c8:23:31:13:78:19:9a:13:40:9e:61:26:62:be:6b:e3:ef:
         97:50:8b:06:80:7a:67:31:08:58:81:60:5a:c6:34:76:b4:fa:
         1b:bc:74:42:8f:9b:86:c7:a6:9e:d3:f3:60:61:e2:2e:1e:ed:
         5d:21:61:3f:b7:c4:13:e6:06:fd:f2:1d:e2:02:c1:72:70:f6:
         57:1b:07:af:86:a6:f4:aa:60:16:49:b2:c7:21:b4:1c:c8:5a:
         5d:11:2e:c3:38:c2:f9:68:3a:26:71:56:99:7f:39:e0:8f:1c:
         f9:03:a6:41:2d:50:63:fe:9e:e7:f6:f5:41:ba:fc:18:f4:59:
         21:96:48:5a:85:9e:39:ac:53:11:93:42:ee:90:1d:ed:56:43:
         d7:eb:79:46:73:14:5b:bf:bc:97:73:32:1f:bb:f4:ff:3d:b3:
         62:82:36:34:e2:eb:d9:de:67:c0:1e:2a:0f:35:bb:fd:ad:5f:
         84:77:d9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 11:09:23 2026 by rpki-client