Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.mft
File:                     lqeZovSzCLIlIrzkXjGNanAmKSs.mft (raw, json)
Hash identifier:          M9xMfZQd/c/ioOaM6DTeHqRtlMotWfzsI8MUQiexWFQ=
Subject key identifier:   45:28:DB:70:56:7A:DA:CB:73:01:68:59:87:EC:C7:60:EE:CE:BC:49
Authority key identifier: 96:A7:99:A2:F4:B3:08:B2:25:22:BC:E4:5E:31:8D:6A:70:26:29:2B
Certificate issuer:       /CN=A911BA4B/serialNumber=96A799A2F4B308B22522BCE45E318D6A7026292B
Certificate serial:       128D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqeZovSzCLIlIrzkXjGNanAmKSs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.mft
Manifest number:          127D
Signing time:             Tue 22 Sep 2026 17:01:06 +0000
Manifest this update:     Tue 22 Sep 2026 17:01:05 +0000
Manifest next update:     Tue 29 Sep 2026 17:01:05 +0000
Files and hashes:         1: lqeZovSzCLIlIrzkXjGNanAmKSs.crl (hash: kqTlD+ivs6hp+TPN0JnmUkMxn2B+AnZpgM4qjD34e5c=)
                          2: 318BC266FEA911E8BF138B59C4F9AE02.roa (hash: S+enzldOi/Tk8VhBxK9J1PD1ALiMccvtC2k5b2Y8TNc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.crl
                          rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqeZovSzCLIlIrzkXjGNanAmKSs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 17:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4749 (0x128d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BA4B, serialNumber=96A799A2F4B308B22522BCE45E318D6A7026292B
        Validity
            Not Before: Sep 22 17:01:05 2026 GMT
            Not After : Sep 29 17:01:05 2026 GMT
        Subject: CN=6ab2b452-b20f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:29:f3:8f:07:8f:b4:66:f8:bc:93:23:05:d6:
                    fa:65:53:e0:85:9d:3f:8d:26:ce:a2:de:93:4c:d0:
                    b7:bf:82:54:97:34:7a:8e:d8:e0:19:94:65:4c:ce:
                    93:a6:d9:d5:e2:44:cb:2b:f5:aa:98:ba:53:d0:6d:
                    7f:58:17:cf:71:74:8b:40:33:eb:b8:d1:e5:cc:04:
                    e1:b1:77:a0:bc:f7:97:bd:ac:f3:36:bf:c1:b3:c2:
                    10:7f:d2:fd:81:67:6b:5e:c0:79:94:17:01:7d:97:
                    94:10:43:31:44:57:f6:c0:71:84:12:e0:4d:8a:e7:
                    ba:cf:4f:11:61:1f:ac:ca:7e:5b:be:55:cc:83:f8:
                    23:9b:17:95:d1:0f:e7:f8:83:32:11:b8:3d:ff:ad:
                    c0:0a:5e:79:10:ff:7e:55:eb:30:13:aa:8a:a9:db:
                    32:71:73:20:91:48:cc:e2:1b:66:60:52:da:18:7f:
                    de:39:2d:e1:dd:8d:c1:14:35:62:14:0a:c3:65:7a:
                    98:c8:dc:10:5a:0e:43:b5:46:99:0f:49:95:61:bb:
                    eb:2e:d9:c7:c4:44:b9:11:5c:c7:ab:84:f9:c7:5f:
                    db:74:26:ef:a8:a8:02:e6:bc:3e:0e:df:d2:a4:b5:
                    19:36:fa:56:5b:a1:e6:21:52:86:52:56:88:56:2e:
                    40:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:28:DB:70:56:7A:DA:CB:73:01:68:59:87:EC:C7:60:EE:CE:BC:49
            X509v3 Authority Key Identifier:
                keyid:96:A7:99:A2:F4:B3:08:B2:25:22:BC:E4:5E:31:8D:6A:70:26:29:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqeZovSzCLIlIrzkXjGNanAmKSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:5c:0b:3d:18:59:c6:ed:80:3b:e5:45:f5:37:af:e7:7f:8c:
         b9:aa:78:f1:66:83:38:da:bf:82:5e:87:31:96:ec:08:c5:c0:
         3c:44:0f:38:9d:1d:93:0b:cb:b7:6b:44:73:ec:48:3e:cc:27:
         30:1d:07:e9:6d:88:f6:23:7f:38:90:21:24:d4:a3:bb:20:7e:
         c5:a8:a1:4c:50:9a:f4:38:e3:65:cd:62:b8:bb:7d:22:89:a7:
         d3:b3:ae:c3:4f:b9:f5:a3:66:33:34:47:f1:83:97:61:3c:34:
         38:0b:58:e4:3b:3e:e3:2a:97:3f:92:76:cc:72:54:b6:e1:4f:
         ca:11:7a:89:08:7b:6f:d2:0d:b3:6c:65:fa:ad:1c:cc:e1:94:
         7e:aa:ab:ff:5b:aa:4b:93:14:52:b2:1a:df:c2:03:cd:e9:af:
         08:77:26:0c:b2:06:9f:5e:d1:58:c2:70:31:66:0e:be:6f:15:
         e5:1d:af:5b:ec:1a:b2:45:59:0f:a3:9d:7c:fc:ac:ac:bf:40:
         73:52:ca:e2:69:95:c2:80:75:04:25:67:a6:b9:6f:7a:46:e0:
         92:42:ae:8b:f1:3b:bd:a6:a4:1b:2d:fc:03:f1:01:f4:f5:9e:
         df:7e:e7:03:3a:61:13:32:de:5d:7a:11:5e:e8:2b:7c:ca:c7:
         9e:87:ce:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:32:19 2026 by rpki-client