Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft
File:                     2lA_lyy8k6jIHflfVKLLKjjxPHc.mft (raw, json)
Hash identifier:          ttu7FaB/sqVyxDhrxkB7d4Wm0ZiSNrDQkfUgKLo5Mc4=
Subject key identifier:   3A:44:20:A0:A9:78:2C:34:8B:FB:73:86:A6:88:D7:39:AA:21:5C:DA
Authority key identifier: DA:50:3F:97:2C:BC:93:A8:C8:1D:F9:5F:54:A2:CB:2A:38:F1:3C:77
Certificate issuer:       /CN=A9144717/serialNumber=DA503F972CBC93A8C81DF95F54A2CB2A38F13C77
Certificate serial:       0ABD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft
Manifest number:          0AB3
Signing time:             Thu 24 Sep 2026 19:26:32 +0000
Manifest this update:     Thu 24 Sep 2026 19:26:31 +0000
Manifest next update:     Thu 01 Oct 2026 19:26:31 +0000
Files and hashes:         1: 2lA_lyy8k6jIHflfVKLLKjjxPHc.crl (hash: cvgqbXigIhSilykPJT2qSMP1++l1/6JFn53J81yW884=)
                          2: F38DEBFC83E911EA993D9515C4F9AE02.roa (hash: gfXrnN3jQkJVV0wj646OBjzyC1W/Dpnz2lbxL1Z1Wig=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.crl
                          rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 19:26:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2749 (0xabd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144717, serialNumber=DA503F972CBC93A8C81DF95F54A2CB2A38F13C77
        Validity
            Not Before: Sep 24 19:26:31 2026 GMT
            Not After : Oct  1 19:26:31 2026 GMT
        Subject: CN=6ab57968-4128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c0:a5:02:fa:fb:1b:85:6f:95:66:9e:25:46:
                    45:24:7f:96:c9:77:46:ca:da:89:72:31:78:4e:bb:
                    d2:12:8a:e8:d9:5b:1e:c0:cf:ea:e5:4d:95:2d:7d:
                    c1:d3:47:36:48:e8:14:0a:05:a8:6f:50:76:09:34:
                    9c:bd:43:70:2f:8c:0b:73:a7:a6:db:4b:25:03:26:
                    0e:8b:57:80:90:48:f9:ce:e6:2e:a8:c7:88:4f:e0:
                    32:a9:59:d3:a4:83:c1:50:c7:6c:f1:73:08:a9:d4:
                    a2:fe:e7:fe:89:ad:63:67:13:cf:12:10:1f:ce:75:
                    a2:9c:63:f3:a1:7b:b5:73:fc:9b:c1:86:60:5f:48:
                    c7:b2:c3:e1:bf:57:5b:48:ae:3a:7c:c2:63:ba:04:
                    b7:fb:58:09:1f:9b:be:5e:0b:b3:2c:74:b2:e6:98:
                    02:1f:2d:cd:04:49:e4:8e:bb:1d:59:10:ca:48:47:
                    23:8d:67:60:ae:6a:03:b6:1f:bf:17:28:f5:f3:6f:
                    e6:80:55:e2:a9:2f:35:bc:67:45:12:92:9b:60:e2:
                    38:fc:d6:94:2a:9e:76:50:97:e7:6d:05:bf:b1:26:
                    21:0b:47:e7:87:d3:37:60:73:5d:9d:50:84:76:eb:
                    df:48:fc:8a:96:f6:0d:71:d0:09:92:b1:5d:76:3b:
                    1f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:44:20:A0:A9:78:2C:34:8B:FB:73:86:A6:88:D7:39:AA:21:5C:DA
            X509v3 Authority Key Identifier:
                keyid:DA:50:3F:97:2C:BC:93:A8:C8:1D:F9:5F:54:A2:CB:2A:38:F1:3C:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:0e:73:16:a2:06:3e:6b:6e:ca:49:af:59:74:96:15:b6:4c:
         cb:4c:32:b4:63:16:71:46:b1:6d:f2:da:77:e4:97:29:2e:9d:
         d3:d8:c6:5d:4c:1b:a8:30:df:ae:fb:4b:74:e2:fe:6a:3e:92:
         27:d3:b3:22:9d:e2:18:f3:0c:48:23:74:c8:89:3b:a0:cc:d2:
         b6:ca:32:2d:01:e9:82:6c:b5:8e:82:41:8a:d7:67:4d:c9:2c:
         be:93:97:31:b5:c5:3d:c6:3a:db:4c:8e:13:51:35:a8:c4:e5:
         3e:c2:93:8a:e6:26:6a:ad:ba:83:35:98:c3:80:ba:ca:5f:5f:
         be:60:b2:3f:65:e8:f4:93:9b:38:7c:9d:7a:c7:86:46:5a:c7:
         99:c2:a3:99:55:18:36:c7:56:bb:a7:12:9c:32:1c:e2:b5:52:
         29:4e:ff:b0:99:63:c6:44:f2:bf:af:a6:60:b9:dc:74:1d:d5:
         b6:50:e0:83:b5:c0:fc:3c:b9:eb:f6:c6:bd:66:9d:44:e7:2f:
         37:4f:4e:90:84:f1:ca:df:d2:52:d2:9c:5a:24:8a:f8:a5:f4:
         bd:0a:c9:42:89:05:f8:39:63:00:45:65:f3:f2:c9:60:57:76:
         82:33:66:e5:5d:a9:fc:b0:7f:6d:0e:a8:17:5c:ea:a5:38:f6:
         92:19:a1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:01:50 2026 by rpki-client