Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft
File:                     1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft (raw, json)
Hash identifier:          BA8s9p3Rq1jJlstv8+RqV7YH9BSeijy1MwSWBfTdrRQ=
Subject key identifier:   97:6D:DF:BC:27:A0:AF:76:11:E6:69:B7:4C:29:26:48:88:45:85:9B
Authority key identifier: D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52
Certificate issuer:       /CN=A911C2E1/serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52
Certificate serial:       0247
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft
Manifest number:          0241
Signing time:             Wed 23 Sep 2026 02:19:39 +0000
Manifest this update:     Wed 23 Sep 2026 02:19:39 +0000
Manifest next update:     Wed 30 Sep 2026 02:19:39 +0000
Files and hashes:         1: 1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl (hash: 9/uH5P3hzEINcMtix2uJjj/HB1rLM97l4pAPi8x/F34=)
                          2: 3FE30722468C11EE9462EC3AC4F9AE02.roa (hash: tL7P2RncA3mmgPqw2/8wmwVB+1+aBnG9adB0bXjPSFc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl
                          rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 02:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 583 (0x247)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C2E1, serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52
        Validity
            Not Before: Sep 23 02:19:39 2026 GMT
            Not After : Sep 30 02:19:39 2026 GMT
        Subject: CN=6ab3373b-4397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b4:7f:32:51:fe:70:ff:a7:10:cc:f0:47:67:
                    11:5d:8b:8a:7a:ba:1f:ca:5e:19:18:f3:06:70:10:
                    d0:1c:57:c5:47:15:52:c1:82:7a:4f:25:dc:b1:33:
                    62:15:e4:db:55:06:b4:8c:74:ed:4e:94:c4:6b:6b:
                    4a:e2:bf:2e:4a:a7:1f:06:66:c4:9c:3d:b5:19:88:
                    26:12:3e:65:dc:da:2a:ed:d0:37:7a:6c:12:21:33:
                    c3:0c:a3:4d:93:79:65:d4:e0:c3:04:cc:fb:94:d4:
                    22:56:7a:41:a9:8f:87:3e:ca:f5:7b:b3:4e:fc:32:
                    1b:f8:33:2c:e8:6b:33:15:5f:34:a1:75:a0:e7:41:
                    bb:06:d9:2b:41:0c:77:7c:b5:f6:f2:0a:54:a8:cf:
                    1f:fe:f5:69:a7:1f:01:91:b7:e7:a6:05:e2:06:b2:
                    61:f8:13:56:29:b8:5f:24:49:cd:37:0b:5a:b6:ad:
                    50:5b:5a:97:63:05:15:fc:35:bc:3b:40:54:72:ff:
                    0e:04:7d:2c:9e:98:c3:19:34:23:70:90:9f:73:52:
                    c0:7a:b3:e0:fe:ce:22:c2:17:2e:17:15:27:55:ca:
                    7a:4e:72:69:8c:f6:a3:cd:46:09:61:5b:e8:30:2c:
                    9f:2a:e3:23:3c:2e:64:ee:1e:6d:29:9b:32:4c:93:
                    55:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:6D:DF:BC:27:A0:AF:76:11:E6:69:B7:4C:29:26:48:88:45:85:9B
            X509v3 Authority Key Identifier:
                keyid:D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:28:70:12:d8:a0:10:de:45:ea:36:dc:89:61:67:16:9c:06:
         cd:c6:bd:1d:5c:5f:21:3a:74:9c:0d:0a:e6:96:c4:e8:b4:8c:
         c5:de:b3:92:fe:6c:cb:5c:2e:3f:0f:04:46:ca:4f:bf:0b:4c:
         09:bd:a6:42:db:9b:f4:4c:48:df:e5:58:4d:52:b5:0b:af:c2:
         d8:a9:7c:16:26:ff:2c:27:ca:22:e2:f9:73:f8:45:9f:9f:d2:
         89:eb:87:87:ac:03:ac:ab:83:10:15:d0:8a:0a:a5:28:55:92:
         4a:bf:7b:ee:24:b1:ca:b5:d2:d8:c7:ae:c6:5f:f7:ba:d4:4e:
         66:30:d5:aa:7b:a2:59:36:22:09:89:31:f5:20:5e:ee:d0:63:
         24:a6:a9:e9:04:11:51:8b:f2:ad:26:f0:8a:f1:cc:04:f3:73:
         76:e1:8d:3a:82:f5:07:08:4e:6d:73:93:97:22:cc:bf:0f:63:
         c2:5f:e3:aa:23:9d:17:fc:4e:c1:ee:50:10:00:8f:03:94:5c:
         ea:40:fa:b5:6a:cb:f7:cb:0a:e9:6b:56:e7:8f:9c:75:87:bb:
         b6:d0:d9:ff:97:0e:87:1d:45:4a:6a:f4:b6:d8:8f:ca:ec:77:
         eb:c0:e5:6c:06:9a:ee:e7:01:44:d9:51:02:55:c2:9f:04:5b:
         2a:cf:c7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:17:23 2026 by rpki-client