Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft
File:                     lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft (raw, json)
Hash identifier:          r1GMRiPtCT8h5SNe4zCxbXqjj9VKOLWMAdiUwotFyh4=
Subject key identifier:   0B:55:32:BF:A9:24:FE:8B:95:00:57:58:18:FE:69:79:7A:01:88:E1
Authority key identifier: 96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58
Certificate issuer:       /CN=A915FDD9/serialNumber=967B97D9E311250D82942D27E4C5F90D98138058
Certificate serial:       0185
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft
Manifest number:          016A
Signing time:             Fri 25 Sep 2026 05:33:24 +0000
Manifest this update:     Fri 25 Sep 2026 05:33:24 +0000
Manifest next update:     Fri 02 Oct 2026 05:33:24 +0000
Files and hashes:         1: lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl (hash: +gsyhaYWLI+M9Fay9JoDXyNqC6PDrfnKIQkfAIdsVmM=)
                          2: 45322DB8BF9111F0B4CD4C4FC4F9AE02.roa (hash: rv9K2z3jLDHYayjuD/ofwi0jQtAT/5qT98rJ5cSCRIQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl
                          rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 05:33:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 389 (0x185)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FDD9, serialNumber=967B97D9E311250D82942D27E4C5F90D98138058
        Validity
            Not Before: Sep 25 05:33:24 2026 GMT
            Not After : Oct  2 05:33:24 2026 GMT
        Subject: CN=6ab607a4-1268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0c:f0:43:37:a9:5b:94:ba:67:51:58:02:3f:
                    9f:c2:a4:68:26:af:0c:0c:c8:d8:3d:56:69:d5:00:
                    14:e8:25:11:d9:a4:73:9d:8a:84:e6:8f:7c:a6:3a:
                    10:b3:37:b6:57:d1:03:05:58:04:77:3f:ce:3d:cc:
                    d4:66:d5:17:2e:b0:0e:90:34:28:02:25:20:de:a9:
                    e0:01:5c:bb:29:7f:db:bf:55:03:24:39:1b:06:d2:
                    00:34:17:62:60:a6:8c:29:2d:34:3f:0b:15:56:5a:
                    cc:ab:09:c9:b7:26:d8:00:f9:ea:5d:13:97:e2:d5:
                    20:76:f5:3c:2a:a0:98:d3:11:6e:50:f2:a0:12:ae:
                    de:a3:1c:a1:73:52:bc:cc:a0:d9:e4:fe:47:73:d0:
                    2b:e6:cc:24:9b:a9:41:c7:01:c4:73:7c:15:97:b3:
                    0e:3f:d3:96:1d:13:eb:7c:12:65:94:96:fc:35:a7:
                    26:2e:a0:a4:8b:d7:98:f6:5d:ce:ef:e3:02:5d:a4:
                    69:d5:14:ca:96:61:19:95:7b:aa:e1:7a:fb:54:21:
                    63:4b:2e:7a:f2:02:78:cc:b0:ee:af:81:86:f0:46:
                    6e:37:f0:ec:c6:f0:0a:95:d4:88:e6:28:9f:e4:86:
                    48:9c:6d:da:98:80:4a:be:b3:37:4d:01:65:30:b9:
                    77:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:55:32:BF:A9:24:FE:8B:95:00:57:58:18:FE:69:79:7A:01:88:E1
            X509v3 Authority Key Identifier:
                keyid:96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:59:61:e0:df:32:c2:76:60:5a:be:30:91:64:77:b1:26:21:
         69:2b:8f:52:78:e9:f5:6d:45:b2:a8:c5:84:6d:e7:53:0a:65:
         35:86:a4:44:44:25:9e:31:48:e0:59:71:b4:4f:22:5e:88:c2:
         ba:f7:67:f8:40:ec:f9:48:03:d0:e6:f5:f0:95:c4:f7:24:6f:
         ff:b2:47:a8:bd:b6:31:f0:e6:07:46:40:c7:14:99:d1:93:cd:
         f4:17:60:de:01:13:60:68:50:74:15:6e:8c:9c:15:dd:61:8f:
         ef:8d:ca:85:eb:de:4b:41:a8:e0:e4:f2:21:96:36:f5:3a:ca:
         c4:ef:fb:14:41:3c:29:8f:8c:e0:1e:93:d8:c8:35:16:9d:85:
         06:50:08:f5:11:6f:0e:94:a6:61:a4:04:14:c4:26:5d:3f:2b:
         0e:8a:1d:38:b5:90:e8:7b:5b:33:47:eb:27:14:1b:9f:ff:5a:
         70:c4:ad:d8:c4:7e:5f:ad:7a:42:49:ce:aa:8c:8b:02:65:81:
         c6:4b:e6:b0:77:1b:c9:f0:a8:37:e7:2e:c0:71:cb:ca:3f:d9:
         c2:6f:bf:17:66:e5:62:cc:6e:6f:f7:7f:49:24:74:fa:58:5b:
         19:54:43:e8:35:57:28:e6:e5:fb:2b:74:d7:11:15:e7:59:b3:
         58:d7:20:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:54:02 2026 by rpki-client