Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft
File:                     lLA392-iN6eOqVSONVel4W7WJJo.mft (raw, json)
Hash identifier:          xNmReSdgaT3ixbdmFWiyMQBpfAP8vMVxFVqXQ3XXmkE=
Subject key identifier:   CA:1C:77:6F:53:FD:C8:07:5D:B7:09:CE:E9:6B:92:FF:6E:F7:95:64
Authority key identifier: 94:B0:37:F7:6F:A2:37:A7:8E:A9:54:8E:35:57:A5:E1:6E:D6:24:9A
Certificate issuer:       /CN=A9147BF1/serialNumber=94B037F76FA237A78EA9548E3557A5E16ED6249A
Certificate serial:       024A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft
Manifest number:          0242
Signing time:             Tue 13 Oct 2026 03:02:06 +0000
Manifest this update:     Tue 13 Oct 2026 03:02:06 +0000
Manifest next update:     Tue 20 Oct 2026 03:02:06 +0000
Files and hashes:         1: lLA392-iN6eOqVSONVel4W7WJJo.crl (hash: 43N/SjuT3U8GGUn3uhsJbOw14jVrqsFi+Va9iiR1I/s=)
                          2: 26C760F002EA11F0836EF72FC4F9AE02.roa (hash: wrQZ3i6auQE6hasl5pdOo4dzJGXDbVakH3Xi8U4i1wQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.crl
                          rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 03:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 586 (0x24a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147BF1, serialNumber=94B037F76FA237A78EA9548E3557A5E16ED6249A
        Validity
            Not Before: Oct 13 03:02:06 2026 GMT
            Not After : Oct 20 03:02:06 2026 GMT
        Subject: CN=6acd9f2e-4bc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:29:c7:8a:48:dc:86:f4:1b:a4:72:14:0b:0e:
                    f5:3d:fc:a8:aa:11:b6:68:b5:78:23:a1:58:0e:d0:
                    19:0a:2e:28:0f:f6:2d:72:2b:cc:53:36:bb:1b:0f:
                    2b:ad:0b:ad:89:da:88:a7:f2:70:13:35:59:fd:58:
                    30:9a:ce:a3:44:a6:7c:4a:e7:63:f8:8c:e4:9d:ee:
                    3c:fb:1d:45:1b:08:13:38:97:00:82:1d:95:c0:4c:
                    1b:cc:8d:95:01:1b:4e:f5:56:3e:7d:13:fd:e2:53:
                    a6:d1:12:87:4c:8b:df:eb:f8:4d:eb:60:bf:1e:14:
                    f0:78:79:67:4c:c1:f7:06:e0:17:68:ee:7a:f8:ba:
                    4a:7c:21:f2:79:40:cb:7f:3d:c0:74:c6:1e:1f:03:
                    b9:82:fd:ff:1e:fe:18:d1:f5:5a:83:ea:e3:4f:78:
                    8a:14:d7:82:c8:bc:0b:33:88:46:e6:32:ca:c7:2d:
                    ee:b5:80:27:14:b0:ba:0f:13:e3:79:f0:6a:41:30:
                    a5:de:92:20:9b:af:27:68:2e:ef:27:fb:03:0b:21:
                    e8:92:f5:85:89:1f:c6:8e:11:c2:bb:3b:fe:f5:e9:
                    4a:87:d8:df:26:da:78:79:55:b8:29:ab:af:e0:29:
                    52:90:2c:8a:43:63:39:bd:b1:47:82:e6:50:e6:e5:
                    fe:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:1C:77:6F:53:FD:C8:07:5D:B7:09:CE:E9:6B:92:FF:6E:F7:95:64
            X509v3 Authority Key Identifier:
                keyid:94:B0:37:F7:6F:A2:37:A7:8E:A9:54:8E:35:57:A5:E1:6E:D6:24:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:1d:f0:25:37:dc:c1:7e:78:7e:5c:6f:25:6a:1a:d0:89:22:
         1e:fd:d1:10:84:bc:9f:25:5f:a0:5a:1b:bb:2a:d2:7c:c8:45:
         57:de:19:c3:31:e0:90:7f:57:2d:22:1d:07:d9:80:b9:74:f8:
         09:91:d4:b3:23:1d:3a:12:eb:48:11:4d:50:14:a0:a7:c8:d1:
         27:3d:8d:77:af:67:c0:1b:8a:d6:ea:77:11:6e:d7:71:dc:9c:
         27:c9:9e:b5:ea:c3:a7:77:22:36:0b:22:bf:46:c8:18:49:fb:
         62:2d:af:4f:9d:0e:c9:1e:35:01:eb:60:b4:f0:dd:ff:3e:2e:
         b2:7d:45:40:81:5d:a6:73:15:61:05:26:3f:be:d2:a7:d4:1f:
         53:9e:f5:ef:49:b5:18:cc:dd:be:0a:24:e1:14:37:9f:84:71:
         eb:ad:3b:32:2c:f9:f1:d4:ad:96:54:11:1b:0f:05:ba:8d:ef:
         56:89:26:28:c7:bc:04:86:74:6d:69:fa:95:ff:04:ce:7c:fc:
         84:66:b3:a0:b7:5f:41:17:6b:09:86:36:e4:78:bc:54:4f:b2:
         9d:06:e1:14:a0:a8:e1:5c:9c:d0:31:6d:3e:df:0d:fb:c2:9b:
         68:b2:1a:d2:bd:d9:6e:59:a3:66:d9:8a:f8:43:cd:82:ca:bb:
         57:a1:46:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:38:42 2026 by rpki-client