Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft
File:                     lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft (raw, json)
Hash identifier:          pDVWkMcp9noVrpUft9xgQz8vNEZXQoUxIBzisviGy1s=
Subject key identifier:   BC:58:AC:98:FF:C0:EA:C4:4B:34:CE:04:A3:5A:83:9E:0D:EF:A1:4F
Authority key identifier: 94:C4:1F:1A:A6:0E:D6:50:E0:FD:7A:7A:8D:23:7A:2D:46:B1:B1:F8
Certificate issuer:       /CN=A9174F24/serialNumber=94C41F1AA60ED650E0FD7A7A8D237A2D46B1B1F8
Certificate serial:       021F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft
Manifest number:          0218
Signing time:             Wed 23 Sep 2026 02:49:42 +0000
Manifest this update:     Wed 23 Sep 2026 02:49:42 +0000
Manifest next update:     Wed 30 Sep 2026 02:49:42 +0000
Files and hashes:         1: lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl (hash: zC8NF6XktCm66/DPbTK1RBzvXh30h85sKgOwXcJ/2EU=)
                          2: F7C7803489F311EE9AD0D13CC4F9AE02.roa (hash: LSGqnHSpVE6t1VnR1CP7MXHTDo/gjQidyC59lrbruAM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl
                          rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 02:49:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 543 (0x21f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174F24, serialNumber=94C41F1AA60ED650E0FD7A7A8D237A2D46B1B1F8
        Validity
            Not Before: Sep 23 02:49:42 2026 GMT
            Not After : Sep 30 02:49:42 2026 GMT
        Subject: CN=6ab33e46-18b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:49:a9:53:a1:e6:43:0b:2e:f5:20:15:4a:e1:
                    f8:2c:37:96:87:a4:1c:fe:30:5a:73:3b:48:c6:1a:
                    92:63:90:22:65:b1:bc:ea:91:3b:59:30:95:47:4c:
                    7b:77:49:38:c2:f6:20:8b:b2:78:94:30:7b:16:f9:
                    8a:a9:07:bd:a5:1d:82:72:c6:d1:c3:b8:1a:60:e5:
                    f2:b9:de:6a:77:47:c9:ff:00:fe:48:51:18:c8:1f:
                    79:50:77:53:db:b2:46:60:7e:c2:cd:f6:1e:23:ea:
                    77:17:b0:71:6b:79:51:de:8d:0c:ab:17:fe:d2:9e:
                    21:d8:05:b0:01:03:70:99:77:43:b0:1c:10:3f:23:
                    bd:61:9e:8f:58:87:a3:40:95:03:61:b6:1d:1c:b1:
                    e8:a4:8f:83:c0:86:3b:82:7d:39:15:53:5f:cf:a1:
                    a7:ff:e0:e2:53:c2:32:cc:f5:f1:dd:6c:a6:71:5b:
                    39:9e:71:de:8c:13:19:7b:c0:88:68:79:49:02:4a:
                    5b:ff:79:33:b5:00:58:4c:55:8f:c5:5e:cf:54:8b:
                    39:48:4a:bb:c5:02:f3:9f:1a:a3:39:85:e5:7d:e4:
                    11:1f:60:a3:4d:fb:a6:a9:85:8f:50:a9:b8:7d:9a:
                    ba:03:87:ca:ce:4c:de:37:98:f3:29:4a:d3:59:b7:
                    e5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:58:AC:98:FF:C0:EA:C4:4B:34:CE:04:A3:5A:83:9E:0D:EF:A1:4F
            X509v3 Authority Key Identifier:
                keyid:94:C4:1F:1A:A6:0E:D6:50:E0:FD:7A:7A:8D:23:7A:2D:46:B1:B1:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:c9:5a:95:ea:ef:e8:2a:de:d3:09:9c:5a:2a:1b:95:45:58:
         78:7f:5f:01:53:65:53:26:81:db:1c:5d:9d:06:2f:d6:9a:08:
         81:ae:c1:77:60:92:94:8b:37:7b:49:fc:46:a6:f1:61:3d:5b:
         6e:f9:4b:6d:97:de:23:44:e2:bf:42:6d:db:ea:8d:1f:83:be:
         89:0b:c9:13:1d:08:61:21:6f:66:f0:f3:b7:c8:8d:b6:f2:5d:
         44:39:64:43:4f:3d:eb:dd:f1:22:b5:98:bd:f7:b2:45:1d:53:
         cd:d7:03:22:df:c8:7f:b6:fe:9b:5f:03:a0:d8:9e:54:89:d0:
         df:b2:17:66:ad:61:cf:ae:32:ab:6c:23:a3:a9:a2:98:35:93:
         66:3a:88:bb:db:a9:1d:92:ff:ad:09:83:83:e3:45:2b:c2:3b:
         81:88:d3:d4:1a:2c:b0:38:7a:82:5b:93:b6:10:52:0b:59:96:
         72:e0:0b:2b:0f:40:36:8b:b7:3d:38:46:09:34:c2:63:d4:16:
         20:b7:ea:c0:d7:a8:23:3d:5b:20:f9:b5:e5:07:59:77:9b:14:
         7c:1b:2d:fe:97:6f:73:8f:e9:4a:73:f1:75:45:d3:7d:f1:38:
         49:37:e2:0b:87:1b:2d:3f:90:b1:91:f7:7a:bb:54:4d:41:03:
         1f:b2:ad:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:48:20 2026 by rpki-client