Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
File:                     0LR5KL_bnbNR4dQlatArZyj5XPU.mft (raw, json)
Hash identifier:          4gtxwbtpLplyN0vnLf2rX3sWUtCA0n7FLDkrNGcK66o=
Subject key identifier:   5C:10:99:CD:4F:E8:CF:D3:12:AE:7F:11:FF:50:6A:6D:31:32:9E:8D
Authority key identifier: D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5
Certificate issuer:       /CN=A9174306/serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5
Certificate serial:       022D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
Manifest number:          0223
Signing time:             Sun 15 Nov 2026 03:03:06 +0000
Manifest this update:     Sun 15 Nov 2026 03:03:06 +0000
Manifest next update:     Sun 22 Nov 2026 03:03:06 +0000
Files and hashes:         1: 0LR5KL_bnbNR4dQlatArZyj5XPU.crl (hash: BnVzVsEoOWQo1CBBb9A6K3vvTpU/YZgo4DKi+1YSLLM=)
                          2: BF9A82FE1C3D11F188759CE93A3D8C67.roa (hash: ZuwsvyCFnlRH97lSSpze4by6vXPNWBp8bBdjxC9A6Vs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl
                          rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 03:03:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 557 (0x22d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174306, serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5
        Validity
            Not Before: Nov 15 03:03:06 2026 GMT
            Not After : Nov 22 03:03:06 2026 GMT
        Subject: CN=6af920ea-122e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:15:50:9f:d2:b5:32:6e:ff:61:5d:2f:7a:eb:
                    b9:9e:41:20:0e:99:81:2f:91:b5:fb:05:a9:00:2c:
                    dd:fd:d0:61:27:0b:0c:e1:60:29:e5:6f:0b:55:79:
                    61:61:6c:58:e0:dc:c9:46:e9:36:c7:f8:0b:8a:4b:
                    e9:61:13:55:2f:f9:e6:9f:9e:8a:6f:80:12:33:84:
                    e4:0a:00:9d:8f:a5:27:94:62:1c:b5:5e:66:0f:84:
                    bc:77:66:b2:25:d5:2c:ee:b2:aa:13:6d:75:fd:23:
                    98:ce:ad:48:d2:a8:e0:f4:9a:39:69:2a:3f:6a:73:
                    62:b7:07:06:1e:e0:b4:00:e2:5b:07:e0:c5:54:e2:
                    86:a4:77:42:68:b4:51:d3:b7:3a:91:cc:87:24:1c:
                    0f:e4:ea:ba:a6:c0:8e:0a:f8:ba:04:20:67:26:df:
                    a7:3e:8a:93:6a:e9:6a:17:b8:03:85:82:bd:1b:63:
                    d6:e0:2b:88:74:ff:77:b4:57:23:a5:65:f4:bf:89:
                    b7:8a:99:d6:35:b2:ca:0d:83:a4:38:37:19:2d:b7:
                    64:e4:90:cb:79:5d:c7:80:52:52:43:fc:2a:ff:a1:
                    78:fd:a1:33:e7:42:de:f5:e8:bc:06:25:9d:9a:be:
                    b1:94:d4:3a:93:98:93:79:1a:83:48:ea:53:8a:57:
                    65:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:10:99:CD:4F:E8:CF:D3:12:AE:7F:11:FF:50:6A:6D:31:32:9E:8D
            X509v3 Authority Key Identifier:
                keyid:D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:a4:69:ff:ef:43:d8:75:21:6e:fa:60:33:b1:57:dd:e8:b7:
         68:65:0d:56:57:15:a0:bd:17:c7:33:40:05:88:ff:30:79:5e:
         5e:0f:ef:46:3a:ea:df:3c:67:29:30:71:4c:2b:93:97:bd:4e:
         54:b9:b5:14:fe:60:17:19:5d:85:f5:ad:c0:28:bc:17:34:2a:
         5f:e5:78:e5:12:dd:75:f3:83:99:8b:7a:73:0b:82:9a:cf:54:
         2b:e9:e2:ca:6e:d8:71:9f:77:b2:1e:95:5f:2d:5c:d4:e6:40:
         55:d4:ae:4f:ac:00:72:a4:b4:b9:47:64:9b:d8:06:5a:87:59:
         65:55:fd:62:c9:a3:98:39:65:2f:ba:a7:69:95:45:b8:fe:72:
         86:8e:a8:44:ed:6f:a8:7c:bd:5b:34:c1:2e:78:c5:fa:5c:fb:
         7a:27:7b:8f:33:6a:22:cb:e6:76:69:74:5f:d4:7f:24:bf:e4:
         54:be:91:65:4c:9b:ad:8d:a7:58:6f:0d:72:6a:c5:7e:84:67:
         ae:4a:ad:f2:36:58:49:ef:fd:fb:de:6f:d7:69:bd:a4:b8:6e:
         db:1a:7a:ed:f3:8a:f6:db:76:fe:e5:04:62:98:36:30:13:f0:
         5d:17:b6:34:bd:d9:ef:ff:81:62:fd:3a:72:e1:3c:84:91:5f:
         79:42:01:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:12:09 2026 by rpki-client