Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft
File:                     1c9c-LTYDyITBPNliOOVYERH93o.mft (raw, json)
Hash identifier:          9HSdM2QSUpXq/kgINVcQSwNYzqwh5WVjD9vvNXOqKio=
Subject key identifier:   46:1F:07:7D:D9:7F:D9:24:AF:86:E1:0C:84:02:0E:04:82:8D:7A:ED
Authority key identifier: D5:CF:5C:F8:B4:D8:0F:22:13:04:F3:65:88:E3:95:60:44:47:F7:7A
Certificate issuer:       /CN=A914A5BB/serialNumber=D5CF5CF8B4D80F221304F36588E395604447F77A
Certificate serial:       02EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft
Manifest number:          02E5
Signing time:             Fri 25 Sep 2026 01:00:30 +0000
Manifest this update:     Fri 25 Sep 2026 01:00:29 +0000
Manifest next update:     Fri 02 Oct 2026 01:00:29 +0000
Files and hashes:         1: 1c9c-LTYDyITBPNliOOVYERH93o.crl (hash: mzzjQN30Xma1YaXuvrE/kTgIPnPUK2w5lAb+o8gswlM=)
                          2: A83E51EC45F611EDBA9D6062C4F9AE02.roa (hash: SogM+aLq7TtnKTXVbg7l5lBGj90QzbOdIzdMdOy5LlU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.crl
                          rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 748 (0x2ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A5BB, serialNumber=D5CF5CF8B4D80F221304F36588E395604447F77A
        Validity
            Not Before: Sep 25 01:00:29 2026 GMT
            Not After : Oct  2 01:00:29 2026 GMT
        Subject: CN=6ab5c7ae-0781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:24:8e:4e:ac:47:0c:ff:b4:fc:da:1b:cf:95:
                    4b:9e:01:4c:6c:db:a3:74:9a:4c:9e:d6:b9:68:16:
                    5e:ce:4d:37:89:c1:5a:47:4d:b3:df:4e:ec:cc:2c:
                    16:f2:f9:d4:28:bc:1c:ac:d5:47:a4:03:17:92:4b:
                    9f:f5:e6:61:01:98:66:b3:00:ad:34:24:8d:d9:e8:
                    9b:9a:08:b3:d2:5d:e7:9b:56:49:8b:69:5e:24:03:
                    3e:9a:fc:a2:c8:7f:c2:e4:b2:aa:d1:3c:02:36:ce:
                    67:3c:c3:78:61:cf:dc:44:cd:15:21:9b:59:7c:c7:
                    27:a6:6c:2b:d0:5f:5c:39:44:58:6e:d2:4b:b4:8b:
                    52:b5:f6:52:99:3d:15:0c:5f:14:1f:e1:cd:47:b9:
                    b4:30:4b:a4:fd:78:48:b1:67:9a:f6:6c:90:81:18:
                    49:c7:39:3b:c6:37:9f:6c:7b:6c:12:b8:4b:4a:d2:
                    7d:3f:89:a5:2d:91:50:f6:ff:6d:67:5b:5c:35:e1:
                    04:7d:9e:65:c2:af:b3:fe:1c:4d:0c:f7:73:4c:d0:
                    ed:4b:20:7a:f6:b3:fe:f4:ef:e2:4c:cb:53:5d:ff:
                    5c:94:e7:30:24:9a:e9:7c:fc:4e:67:56:34:ee:89:
                    de:81:1c:31:bf:6d:cc:29:2f:00:ba:8e:53:fc:5c:
                    34:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:1F:07:7D:D9:7F:D9:24:AF:86:E1:0C:84:02:0E:04:82:8D:7A:ED
            X509v3 Authority Key Identifier:
                keyid:D5:CF:5C:F8:B4:D8:0F:22:13:04:F3:65:88:E3:95:60:44:47:F7:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:fa:f0:d0:59:fc:28:13:60:c3:ca:81:68:6b:d9:e0:24:85:
         f5:a4:75:ae:c8:77:ff:7d:1f:a7:bb:70:ff:6b:2d:ce:ba:b9:
         b1:13:90:8b:2b:b5:83:cf:90:66:31:76:1c:bc:26:37:2c:27:
         92:9b:38:6f:e1:9c:9e:4d:b0:77:65:b7:00:b3:cd:ef:26:94:
         03:2b:06:7c:68:c1:3f:f4:af:d6:14:1e:e2:75:41:8a:cc:bb:
         14:50:aa:37:4c:4b:fe:5f:b6:ce:ba:da:11:a4:c3:7d:f2:d0:
         a9:7f:5e:8f:89:a2:27:6a:5d:e7:c8:a8:b1:68:b6:99:9d:bb:
         c5:9f:1f:af:f7:c6:2f:31:cb:b0:60:dd:3b:33:95:c6:e3:fa:
         94:b8:dd:dd:a0:08:cf:c9:c1:0d:aa:cd:e0:d0:ce:be:5c:68:
         8f:bd:fd:35:3d:82:c3:01:95:cb:af:9f:68:6c:b1:d9:17:66:
         81:4b:ae:9c:3c:2b:41:03:ce:ea:94:53:07:ef:44:ac:dd:96:
         b7:6a:af:09:91:1e:3c:82:86:fe:d4:57:d2:46:bd:90:67:4b:
         bd:8b:f5:92:74:e4:e2:9d:8f:98:8f:c0:14:18:6c:af:57:f6:
         5e:61:fd:37:db:db:7d:05:34:aa:d5:fd:9f:7b:be:4e:91:d1:
         4d:d7:0f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 11:03:44 2026 by rpki-client