Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft
File:                     l1LdGhX17GHZdpHLXszr7L06YTc.mft (raw, json)
Hash identifier:          fldLKg7SbaVe+lAx8RQmGTF2B9m37oMNTSrxkUoKLRc=
Subject key identifier:   69:50:9D:65:A7:77:48:D2:F9:2F:7B:D8:0C:0A:7C:BD:9C:38:C5:6F
Authority key identifier: 97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37
Certificate issuer:       /CN=A9126259/serialNumber=9752DD1A15F5EC61D97691CB5ECCEBECBD3A6137
Certificate serial:       0886
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft
Manifest number:          087A
Signing time:             Thu 24 Sep 2026 20:47:08 +0000
Manifest this update:     Thu 24 Sep 2026 20:47:08 +0000
Manifest next update:     Thu 01 Oct 2026 20:47:08 +0000
Files and hashes:         1: l1LdGhX17GHZdpHLXszr7L06YTc.crl (hash: VjRijRTtFoMkMcUl8knTUk9hUoGAycwMhc/FOA74fQk=)
                          2: 4E1F212A15C711EB8720DC71C4F9AE02.roa (hash: yum8wC57OlDbLTsoFYFFmg3G0eHaYFBCQhxgQarxJdE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl
                          rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 20:47:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2182 (0x886)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126259, serialNumber=9752DD1A15F5EC61D97691CB5ECCEBECBD3A6137
        Validity
            Not Before: Sep 24 20:47:08 2026 GMT
            Not After : Oct  1 20:47:08 2026 GMT
        Subject: CN=6ab58c4c-30ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:05:81:86:44:89:eb:1a:b8:43:3a:26:aa:de:
                    24:c6:c4:e8:b3:bc:24:af:d8:c1:ca:82:32:d8:88:
                    87:6c:4c:6e:2f:aa:5d:fc:45:07:36:53:be:19:01:
                    cb:d3:76:52:63:32:05:f3:a0:5e:28:df:41:c7:08:
                    44:f7:66:1a:c8:ce:dd:d6:12:ce:52:74:1a:a3:d8:
                    d6:47:b6:da:bc:17:03:56:b5:1d:f8:5c:3a:80:17:
                    e8:f3:3c:dd:7e:d2:d8:9e:49:cc:29:61:f4:e1:6e:
                    ae:de:61:f9:92:f6:ce:29:fc:fc:ea:67:f0:5d:05:
                    3d:77:38:8f:cd:90:e2:a0:91:85:b9:11:aa:4f:72:
                    f6:f2:89:2d:cc:cd:0b:40:d0:20:61:bf:a4:7e:c7:
                    33:fb:84:bf:3a:d0:ea:5e:02:c0:82:55:25:bf:55:
                    78:0f:a8:a7:11:8e:0b:aa:83:68:4d:eb:c4:ff:c1:
                    ad:62:c7:2b:63:32:28:83:0d:c8:fa:4d:50:ae:e9:
                    ad:59:c1:10:e7:cf:a4:cc:c2:e1:e8:48:72:aa:c8:
                    a5:99:ac:ce:7b:50:84:e8:aa:f7:f2:af:4a:82:73:
                    d6:df:c7:b4:3b:f9:3e:f7:6e:7b:b3:32:68:2b:b6:
                    e7:65:9e:04:d4:05:9b:83:80:d3:55:14:a7:6b:55:
                    ac:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:50:9D:65:A7:77:48:D2:F9:2F:7B:D8:0C:0A:7C:BD:9C:38:C5:6F
            X509v3 Authority Key Identifier:
                keyid:97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:0c:f4:54:6e:32:82:b9:fa:c3:19:26:01:77:a8:c9:fa:50:
         3d:8f:e7:5c:f1:0c:46:c3:b9:d5:ae:0f:7a:55:39:11:f6:82:
         af:00:bb:92:4a:48:5e:a2:fb:a7:77:d7:76:82:c8:71:c2:95:
         c0:09:fa:c9:c5:ab:94:3c:2f:a3:ed:84:46:91:3c:b2:f4:23:
         fc:53:a7:85:67:1c:ef:01:82:e1:17:64:f7:9f:34:b0:14:19:
         d7:4c:a9:47:17:65:43:f7:e1:04:b7:67:a3:24:96:72:b3:e7:
         02:57:7e:7b:e2:4f:56:c5:c3:b2:e4:0b:4e:8d:62:2f:b2:a7:
         aa:64:06:49:eb:43:4b:e9:c1:03:03:79:db:26:77:da:2c:81:
         07:eb:44:32:35:b0:35:3b:63:7a:9c:82:26:5e:99:84:4e:84:
         73:ed:9e:98:5c:a3:92:05:4c:44:30:15:ed:8f:95:47:db:c4:
         8f:d2:78:f9:ed:d9:ea:ae:0a:8c:5e:ee:62:b6:4c:39:88:01:
         1f:5c:9b:77:50:ed:53:1e:6f:d9:83:02:66:46:a0:77:aa:23:
         b0:65:cc:b4:e0:b9:6d:33:c3:a3:ca:7d:c1:bb:ba:fc:5b:14:
         a3:cb:50:fa:39:54:d7:fb:86:53:42:d9:fd:c2:e0:3a:37:1a:
         43:1b:e8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:36:57 2026 by rpki-client