Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft
File:                     LByXEgCqxo6oRewP3YfsjFAS8pw.mft (raw, json)
Hash identifier:          78ZQAcWBDwMJjIm7+JCcssgO6eq0gOMt03bJ8V3+XrY=
Subject key identifier:   D9:FB:E6:31:5F:C3:4C:B4:50:04:DA:3B:1F:78:32:94:89:43:61:0B
Authority key identifier: 2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C
Certificate issuer:       /CN=A9175290/serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C
Certificate serial:       0C4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft
Manifest number:          0C2F
Signing time:             Mon 28 Sep 2026 18:56:37 +0000
Manifest this update:     Mon 28 Sep 2026 18:56:36 +0000
Manifest next update:     Mon 05 Oct 2026 18:56:36 +0000
Files and hashes:         1: LByXEgCqxo6oRewP3YfsjFAS8pw.crl (hash: IfcarNf7/SaK54qpOQ4J9jRzNyeOkhUzCQM/K1Cp6T4=)
                          2: 2C23C084A05511F1924EFF964111F970.roa (hash: +UnNrlvqk9fdI23k97EfwWpG/vnHy/lU/5HBsL5TEvQ=)
                          3: 24CEDDAAA05511F1ABADFA964111F970.roa (hash: U8ctAF3B6RY5gFom10YS1YLwzsbLU1R1fY8eYV+NVhQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl
                          rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 18:56:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3148 (0xc4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175290, serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C
        Validity
            Not Before: Sep 28 18:56:36 2026 GMT
            Not After : Oct  5 18:56:36 2026 GMT
        Subject: CN=6abab865-9a36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f3:00:a9:48:8f:d0:2f:fd:e9:06:85:33:fb:
                    4b:4f:85:dd:ca:5f:eb:64:86:f5:7a:26:b6:b9:13:
                    5c:32:e5:78:81:f6:52:d7:1b:46:15:69:56:6f:7f:
                    9a:3d:42:6a:bd:1b:50:8d:9c:ec:6a:a6:73:dd:be:
                    a5:42:c5:d5:7c:d1:98:68:a0:dc:9f:03:80:4b:8d:
                    b8:8e:1a:46:20:9d:94:6f:13:26:bb:28:88:01:70:
                    e5:87:25:b1:0f:24:59:ff:7b:9a:8a:cc:40:67:31:
                    d9:c0:f7:5c:e8:51:60:0e:7b:79:f2:53:96:bc:ea:
                    e2:9a:59:a1:3c:3b:fb:78:f0:dd:0f:0a:b5:2b:18:
                    fc:b8:ed:0a:da:cd:61:f5:30:01:f7:6d:ca:cc:77:
                    41:77:a2:b4:5d:1d:37:b5:58:d4:16:8d:27:92:62:
                    ad:ba:c1:1c:83:6a:fc:43:06:fc:87:e4:00:24:26:
                    47:3d:61:53:39:c0:25:a2:58:c5:9f:c0:b9:b2:de:
                    26:bd:54:22:20:8e:ca:91:63:97:94:34:ae:55:31:
                    1d:2e:16:6b:cf:e5:44:83:e9:3d:f5:89:d6:69:ea:
                    b3:70:09:65:9b:e5:bb:4d:45:f6:4f:77:15:df:76:
                    d0:e3:5b:5d:74:f5:c8:52:0a:c1:76:16:d8:4a:95:
                    cf:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:FB:E6:31:5F:C3:4C:B4:50:04:DA:3B:1F:78:32:94:89:43:61:0B
            X509v3 Authority Key Identifier:
                keyid:2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:29:85:7f:16:c4:ee:07:34:5e:ee:c7:2a:e6:07:26:04:f3:
         6e:bc:c5:22:8a:21:f4:a1:b5:4d:c9:13:9e:b5:88:0a:1a:51:
         8a:e9:c5:66:1c:d0:87:f2:59:47:3f:d5:9d:ac:c8:de:0a:a9:
         44:03:b4:17:fb:b6:c6:25:62:7f:c7:55:86:4d:4e:b4:2f:f4:
         3d:2f:bb:4c:b2:bb:fe:52:21:6a:4f:a6:97:7b:67:31:71:77:
         06:98:e9:94:81:07:ef:59:ff:b5:87:a3:06:fb:d2:6d:e9:30:
         63:4e:6c:0a:c7:53:2f:38:bc:fb:96:30:a9:9e:cf:8b:43:92:
         a1:8f:8a:04:d1:ff:b1:d3:fc:a7:b2:07:63:0c:fd:85:8a:9e:
         90:0c:51:01:d2:b8:60:f9:be:80:92:49:db:43:e3:3e:53:ca:
         a0:04:61:41:a7:d7:34:0e:d2:ba:b9:fa:1e:78:6b:c6:94:2d:
         e4:77:6d:5c:28:25:1d:6c:fe:df:28:f2:ee:b9:06:8e:40:19:
         36:6f:ae:97:f4:a5:93:c9:83:a2:b0:9e:11:1b:37:f0:c5:bb:
         41:3a:6a:4b:b4:28:40:d2:c8:59:9f:26:ff:d6:23:e1:c2:04:
         2e:d8:0b:85:42:ec:1f:44:a4:b1:f1:8f:8c:e5:dc:82:92:5b:
         85:69:59:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:48:46 2026 by rpki-client