Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft
File:                     LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft (raw, json)
Hash identifier:          Y32sdxR/Ose0ZY0r20Ne+LIsX5TTEOYOGtbuR46NCUk=
Subject key identifier:   92:A6:61:A3:81:8B:9C:9A:3D:93:F4:18:71:05:C6:2E:4F:8D:07:05
Authority key identifier: 2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A
Certificate issuer:       /CN=A918919A/serialNumber=2E5BCBC661AFF1FED58B0FF4B583DCF5EC1A374A
Certificate serial:       0C5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft
Manifest number:          0C22
Signing time:             Sat 10 Oct 2026 18:57:27 +0000
Manifest this update:     Sat 10 Oct 2026 18:57:27 +0000
Manifest next update:     Sat 17 Oct 2026 18:57:27 +0000
Files and hashes:         1: LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl (hash: BS4IMMgB9cCBgFlthSQ/mM9kUnQSS6BrdenlcZqQ/tY=)
                          2: 86850E56021D11F18B736F00496F56BC.roa (hash: t1YOO3CTB2wqmZ9Z1apALeTPXX0rA5ab+0BE/sJrH9E=)
                          3: 953250CAE90011EB8DE96E50C4F9AE02.roa (hash: OsKpmn4d4PR+9xigCzefdFcY4eHlBHpLVwQgzWBMDnY=)
                          4: 856D71DE021D11F18B736F00496F56BC.roa (hash: a/UgAx4cP23xBKUXkuXkulL3xR54CJ89nH7g3WJITWs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl
                          rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 18:57:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3162 (0xc5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918919A, serialNumber=2E5BCBC661AFF1FED58B0FF4B583DCF5EC1A374A
        Validity
            Not Before: Oct 10 18:57:27 2026 GMT
            Not After : Oct 17 18:57:27 2026 GMT
        Subject: CN=6aca8a97-81d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4a:b6:45:e3:b2:5a:ad:72:fb:e3:53:ab:d0:
                    f8:e0:5a:fa:5f:19:10:4e:6b:1b:ee:cc:5f:06:2b:
                    29:22:05:80:99:87:1e:20:32:62:4b:10:04:f5:79:
                    78:b3:2a:28:22:b8:e4:fa:86:06:f1:28:42:95:ba:
                    01:7b:24:5f:7f:f1:ec:ab:af:cf:75:bf:c7:48:fe:
                    60:9b:6f:76:9a:01:07:eb:69:d1:15:9b:81:92:48:
                    68:e1:f9:e5:4c:4f:fb:b7:a8:2a:6b:65:72:61:d2:
                    94:72:ad:7e:1a:e5:93:13:4a:e4:fa:96:35:b5:b3:
                    8e:d4:ff:c4:55:61:91:e2:fd:41:d1:b0:6d:76:98:
                    6b:95:99:de:b8:93:59:e7:82:61:80:b2:99:39:f1:
                    18:4c:a5:63:39:a2:88:be:06:c3:18:38:a7:59:76:
                    64:8f:a8:58:d3:7c:a6:d0:8a:50:03:bb:18:ed:7e:
                    41:57:14:b6:23:7c:80:92:9d:b0:f7:fe:8f:86:bf:
                    5f:a2:3b:37:af:3b:ea:f5:5b:bd:41:7d:1a:4f:a6:
                    79:72:f2:74:57:5b:3d:3a:44:b6:db:ba:fe:01:09:
                    ab:3f:57:70:80:be:59:79:e5:61:5c:b0:71:52:4f:
                    ef:9f:b2:3b:4f:73:63:cf:9f:c1:72:51:30:c1:87:
                    f7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A6:61:A3:81:8B:9C:9A:3D:93:F4:18:71:05:C6:2E:4F:8D:07:05
            X509v3 Authority Key Identifier:
                keyid:2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:94:51:ba:18:8e:e7:a2:20:d9:0b:45:1c:36:97:e9:71:4f:
         be:a9:fb:21:7a:7e:d8:17:93:87:0c:a0:05:1a:3d:e4:e9:c7:
         8e:d6:c4:f4:f4:15:43:6d:43:48:cf:6d:f6:3e:e2:04:92:3e:
         e2:93:ad:01:47:88:4b:68:b5:20:14:a3:19:e2:45:cd:b3:f0:
         70:cb:34:0e:15:4d:a3:dd:a0:75:8d:1f:d1:62:97:cd:3c:f0:
         cb:bb:73:c4:13:be:68:01:69:ef:4f:8d:02:f4:7b:6b:e5:da:
         77:85:25:49:16:14:b9:4c:08:0d:46:e1:b1:38:b7:bd:64:3d:
         9d:a1:12:2e:f9:e1:79:95:ec:7f:1f:7f:33:df:2e:c1:f8:79:
         c7:99:cc:ca:2a:46:37:76:77:0f:5d:9f:d0:f9:14:55:82:13:
         53:f7:66:c0:89:e5:a0:91:d1:ad:3f:f3:55:59:a6:0e:09:9b:
         63:e6:96:8f:3a:31:9b:d4:1c:7b:61:c3:15:92:cd:05:d3:dc:
         b8:e4:e8:d1:70:70:a4:8d:5f:9c:76:f2:c8:9f:08:29:03:35:
         2c:12:2d:22:6e:90:aa:9f:c3:09:96:a1:93:b5:83:ca:46:b3:
         d2:cc:29:93:b9:7c:4d:de:09:51:de:77:ff:5a:e7:43:51:54:
         6e:a1:21:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:39:59 2026 by rpki-client