Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft
File:                     l1LdGhX17GHZdpHLXszr7L06YTc.mft (raw, json)
Hash identifier:          THB9g1p2FNbp4sL6O2WzcPze/jOxtBV438CQCtg9IlU=
Subject key identifier:   7E:64:FD:CC:F9:3F:9D:29:DD:12:AC:55:69:10:94:4A:9B:EC:E7:75
Authority key identifier: 97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37
Certificate issuer:       /CN=A9126259/serialNumber=9752DD1A15F5EC61D97691CB5ECCEBECBD3A6137
Certificate serial:       0865
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft
Manifest number:          0859
Signing time:             Wed 22 Jul 2026 21:29:13 +0000
Manifest this update:     Wed 22 Jul 2026 21:29:13 +0000
Manifest next update:     Wed 29 Jul 2026 21:29:13 +0000
Files and hashes:         1: l1LdGhX17GHZdpHLXszr7L06YTc.crl (hash: KcTFP0EHAYzKhVMszFC6htDpM4imoacQJhN4Y/6ob+0=)
                          2: 4E1F212A15C711EB8720DC71C4F9AE02.roa (hash: yum8wC57OlDbLTsoFYFFmg3G0eHaYFBCQhxgQarxJdE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl
                          rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:29:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2149 (0x865)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126259, serialNumber=9752DD1A15F5EC61D97691CB5ECCEBECBD3A6137
        Validity
            Not Before: Jul 22 21:29:13 2026 GMT
            Not After : Jul 29 21:29:13 2026 GMT
        Subject: CN=6a613629-a756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8e:65:87:b9:a6:54:8c:bb:b6:52:97:f9:7d:
                    79:7c:5a:42:5c:f2:3b:13:7f:78:0f:3c:07:8a:7b:
                    21:c3:15:e5:29:83:6e:e1:05:00:bd:fb:ed:4b:c6:
                    70:cd:1c:c0:78:88:b9:53:54:76:1a:30:28:bf:ca:
                    d5:ff:db:c2:a7:63:8d:1b:48:20:73:eb:c8:b4:c7:
                    3d:a8:c8:ee:a5:05:f9:ba:9e:88:4e:dc:ed:64:be:
                    ba:e2:23:c2:e8:6e:1c:62:17:7a:55:80:9f:27:c9:
                    a0:38:a0:90:79:e0:65:2b:c2:f6:0c:06:54:5a:a4:
                    a5:3d:10:ab:50:48:34:fe:24:a9:68:73:e7:79:4b:
                    6a:b8:26:a2:f9:f4:d5:20:d2:ae:7b:63:0a:52:ac:
                    f9:09:36:45:1d:50:2f:6d:f1:68:7e:23:f5:78:7d:
                    60:f7:8c:ae:55:a4:3a:08:5a:96:34:90:68:8e:19:
                    4c:22:94:f0:1e:17:0c:eb:69:cc:db:ad:8b:58:1e:
                    ed:60:af:7b:3b:a8:ba:ea:b2:ee:cf:b0:c8:9b:d7:
                    0c:7e:12:7b:fd:cd:0d:01:2a:d1:d3:28:3c:7c:8e:
                    3e:9c:f1:8a:30:fc:d6:69:a0:3e:27:32:5c:a0:2c:
                    57:26:03:6c:06:cc:ab:34:2f:ce:02:33:34:15:f3:
                    f6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:64:FD:CC:F9:3F:9D:29:DD:12:AC:55:69:10:94:4A:9B:EC:E7:75
            X509v3 Authority Key Identifier:
                keyid:97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:94:da:e1:2e:44:23:f3:85:7a:1f:13:28:c2:1e:fb:b8:2f:
         ac:4c:33:3d:9d:67:00:af:26:49:a3:20:7f:58:f9:c7:7a:b3:
         ba:26:fe:21:5c:b8:98:66:97:28:16:f5:4f:2d:bc:b1:a2:78:
         ec:c3:4a:8e:b6:ca:c1:c6:a7:7c:f6:ea:54:8b:e8:51:e8:83:
         d9:c4:90:53:24:d3:c8:47:9a:7c:2a:82:2f:1a:26:a3:a9:de:
         1e:f3:bf:e5:88:03:a8:3f:61:d0:52:14:ca:07:20:19:75:23:
         83:b6:fd:ed:a0:a7:f8:1d:82:c1:5e:99:72:44:cc:8f:20:e9:
         62:01:15:ea:1e:db:de:2d:99:aa:ac:46:d2:db:b7:d5:28:a4:
         ab:b6:3a:b7:0b:ee:38:5b:c4:60:0e:10:f9:d9:0d:e5:fa:e9:
         d9:f6:75:6c:07:03:53:b2:e5:68:0e:45:a2:87:9e:4a:01:0f:
         68:72:08:93:c8:c7:71:26:3c:22:e2:88:c3:3a:b6:6d:45:44:
         19:02:e5:54:ea:a7:cb:b2:ae:2c:cc:10:5e:f7:08:5b:90:19:
         a3:95:f1:bc:19:16:73:c8:ab:59:bd:ba:00:43:b7:79:51:ba:
         ef:dd:38:dc:d6:92:8f:01:00:bc:64:d6:3d:2a:d9:cb:be:22:
         10:ee:25:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:30:52 2026 by rpki-client