Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
File:                     LnG4umMF_9SMEx0IYK8sGs9tIrY.mft (raw, json)
Hash identifier:          TeACNOtzmXTHJ6whO7w4yEsrnRI5KFro7pbprnhk21w=
Subject key identifier:   C0:85:11:A8:C9:F2:1F:E6:58:B8:80:27:D1:93:DC:C2:31:DC:65:60
Authority key identifier: 2E:71:B8:BA:63:05:FF:D4:8C:13:1D:08:60:AF:2C:1A:CF:6D:22:B6
Certificate issuer:       /CN=A9165D52/serialNumber=2E71B8BA6305FFD48C131D0860AF2C1ACF6D22B6
Certificate serial:       02CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
Manifest number:          02BF
Signing time:             Wed 23 Sep 2026 01:12:58 +0000
Manifest this update:     Wed 23 Sep 2026 01:12:57 +0000
Manifest next update:     Wed 30 Sep 2026 01:12:57 +0000
Files and hashes:         1: LnG4umMF_9SMEx0IYK8sGs9tIrY.crl (hash: 0RCgJdxSvfNuchv17c6oD3mmOjbIqC0LdqlUja7VUlg=)
                          2: D08310DE94C511EDB2732947C4F9AE02.roa (hash: 2L5qZ+Uea1MHfKirYAIB35nTColOCMTSO380VpA6Q3g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.crl
                          rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 01:12:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 714 (0x2ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165D52, serialNumber=2E71B8BA6305FFD48C131D0860AF2C1ACF6D22B6
        Validity
            Not Before: Sep 23 01:12:57 2026 GMT
            Not After : Sep 30 01:12:57 2026 GMT
        Subject: CN=6ab3279a-8c6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f7:1b:f4:e0:4b:4b:1c:b3:73:46:15:26:a8:
                    ad:b5:64:4d:c3:81:a7:74:09:38:c8:52:1e:e7:c1:
                    3d:dd:06:83:55:cc:78:a3:d8:89:1d:52:93:a4:9d:
                    de:bc:5a:e1:c4:c7:3f:28:09:47:31:fa:43:0c:d0:
                    a0:d6:3b:13:d7:2b:69:05:63:64:47:5e:bc:77:97:
                    92:5e:17:56:7c:5b:d0:04:9f:df:11:9b:6f:f0:3a:
                    f3:51:03:3a:83:b9:06:14:38:18:10:df:7d:61:8a:
                    63:4c:fe:fa:1d:38:50:24:ab:74:9f:4e:22:ec:1f:
                    9c:4a:4e:ca:70:cf:19:91:4f:af:2d:b4:10:95:f4:
                    79:c3:4c:ff:48:67:3c:31:d1:91:34:89:8c:67:a3:
                    c9:d4:f4:be:f4:cf:14:c7:39:89:50:54:2e:7a:21:
                    9b:c4:f8:7b:38:c2:78:5a:67:ae:9c:7b:a4:f5:99:
                    41:ed:e8:19:78:62:f2:0b:28:77:52:9f:23:e0:1a:
                    96:f4:5b:b3:ad:b0:33:6e:76:39:6f:c3:64:bd:47:
                    a3:3a:c8:86:01:51:75:71:f8:49:97:f8:71:80:9a:
                    cc:f2:83:c6:ac:72:4d:93:8a:23:af:9e:56:04:31:
                    d8:fb:e6:99:85:35:db:0f:e8:bb:59:57:f8:fc:b3:
                    c0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:85:11:A8:C9:F2:1F:E6:58:B8:80:27:D1:93:DC:C2:31:DC:65:60
            X509v3 Authority Key Identifier:
                keyid:2E:71:B8:BA:63:05:FF:D4:8C:13:1D:08:60:AF:2C:1A:CF:6D:22:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:91:13:7b:f4:10:bb:7d:87:8c:3b:7a:91:8c:83:a6:ed:e3:
         8a:48:ee:48:14:29:10:ef:7e:1a:08:f4:41:1f:f5:94:b4:e2:
         3b:0e:a5:7a:39:7d:48:34:8f:56:ab:d7:a1:86:4b:0c:3e:23:
         71:3f:06:32:9c:07:16:5b:f7:d0:78:57:30:a8:9d:c8:4c:6b:
         7b:38:35:9b:13:dc:10:1f:ba:d4:3a:10:04:53:cf:22:6a:69:
         0b:46:84:2e:5a:58:45:e3:4c:14:fa:22:e8:52:41:2f:5f:19:
         35:89:41:3b:8c:26:96:34:23:1f:92:9c:79:14:2b:f8:7e:99:
         62:b3:f8:54:84:60:d6:65:fc:24:95:44:47:ee:43:16:55:41:
         86:e7:86:88:98:88:da:42:24:0a:b0:07:57:95:e8:62:a0:26:
         0b:d7:06:8f:1c:f5:1f:e4:5d:3e:e0:a9:8f:2a:07:51:3d:16:
         7f:17:cf:d4:22:3a:93:1f:c5:2a:77:f0:d5:54:e1:f3:9e:a7:
         c9:b9:f1:d8:fd:15:c5:78:5e:a9:17:eb:2c:84:1e:e1:d3:d9:
         12:fe:e7:f3:8c:18:97:aa:19:e9:fc:ff:98:bc:32:01:76:65:
         d4:04:3f:b8:b1:cc:04:47:42:70:fd:75:6b:d5:a0:3f:70:36:
         47:18:67:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:51:07 2026 by rpki-client