Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft
File:                     lCJM-heqoN5UOrYQifwdOdGZDj4.mft (raw, json)
Hash identifier:          QXRkhWhvb3wSiRrmXBo58RauRm/FbgyMv09xj5s2Pyk=
Subject key identifier:   B8:1C:6D:E5:5F:18:BE:FF:DC:50:99:25:3A:55:BA:5A:DC:BE:D2:8C
Authority key identifier: 94:22:4C:FA:17:AA:A0:DE:54:3A:B6:10:89:FC:1D:39:D1:99:0E:3E
Certificate issuer:       /CN=A918B936/serialNumber=94224CFA17AAA0DE543AB61089FC1D39D1990E3E
Certificate serial:       220F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCJM-heqoN5UOrYQifwdOdGZDj4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft
Manifest number:          2208
Signing time:             Thu 24 Sep 2026 15:51:46 +0000
Manifest this update:     Thu 24 Sep 2026 15:51:45 +0000
Manifest next update:     Thu 01 Oct 2026 15:51:45 +0000
Files and hashes:         1: lCJM-heqoN5UOrYQifwdOdGZDj4.crl (hash: fGD6Oj1Hgm+/arW8vDPI2eA4oF8QBuPzufPoIiezmsI=)
                          2: 3607DBA8687E11F1B56F8D616747A888.roa (hash: WO/scCKxLdc7YDN982DAvWLVxjSTIhP/jPPfp19RJno=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.crl
                          rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCJM-heqoN5UOrYQifwdOdGZDj4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 15:51:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8719 (0x220f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B936, serialNumber=94224CFA17AAA0DE543AB61089FC1D39D1990E3E
        Validity
            Not Before: Sep 24 15:51:45 2026 GMT
            Not After : Oct  1 15:51:45 2026 GMT
        Subject: CN=6ab54712-48ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:69:df:0a:85:92:8b:95:6b:61:6d:54:e7:10:
                    8c:23:26:0b:71:cb:77:0e:a8:54:d0:fe:33:6d:84:
                    e6:9d:5c:ca:41:73:08:ba:c1:a2:65:ff:79:71:15:
                    a4:c5:3d:e0:91:e0:10:f5:19:11:aa:24:0b:2e:83:
                    9c:b1:22:27:f8:d3:2c:0b:ba:43:c9:5f:e0:4d:01:
                    f2:2d:98:05:12:f3:39:97:a5:db:88:2c:3b:66:34:
                    97:1e:a3:cc:2f:95:89:81:9a:e6:ee:d9:b5:26:43:
                    3c:1f:f3:58:1d:8c:cd:69:02:7f:94:4b:70:ef:92:
                    17:d7:6b:f8:88:39:c0:6a:f2:87:36:0c:00:7d:c5:
                    ef:86:7c:e0:1f:b5:d4:da:1b:49:84:83:04:05:cc:
                    78:19:cc:e2:af:fd:a9:82:be:ae:73:50:85:40:27:
                    bb:2f:c0:36:64:01:09:1d:d2:65:14:e7:5a:88:07:
                    f7:e7:d2:6f:7c:99:1f:75:5f:ca:b5:7d:2b:30:4d:
                    04:2b:b9:2d:05:8b:a6:73:d8:59:58:d2:7d:04:f9:
                    a7:de:ed:f7:c0:a0:53:d6:fe:63:e3:af:df:20:f7:
                    d6:7b:9d:a8:0d:a9:b0:bb:f5:cf:9f:fa:64:71:e5:
                    0b:c3:84:55:26:17:26:b8:45:00:6a:10:e9:fe:38:
                    e0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1C:6D:E5:5F:18:BE:FF:DC:50:99:25:3A:55:BA:5A:DC:BE:D2:8C
            X509v3 Authority Key Identifier:
                keyid:94:22:4C:FA:17:AA:A0:DE:54:3A:B6:10:89:FC:1D:39:D1:99:0E:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCJM-heqoN5UOrYQifwdOdGZDj4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:8b:3d:d6:7f:73:4f:a5:bb:34:43:74:6d:74:40:aa:96:1e:
         43:e5:b6:94:16:3b:b1:a5:24:6f:8b:b5:df:36:05:13:10:4c:
         e3:9a:11:1a:91:24:f8:3b:34:09:6e:b2:5c:5c:10:07:5c:4d:
         ef:80:ca:da:79:71:6f:82:85:18:71:b2:50:62:a1:d1:e1:a6:
         e1:cf:cd:e6:38:c2:0e:b3:b1:ee:03:d6:29:79:f8:02:58:11:
         ad:0b:15:bf:c6:b7:94:ca:e1:7a:7d:28:32:95:fc:06:32:ac:
         39:be:6b:71:06:a8:33:3a:fe:c8:4d:83:4e:42:fb:b1:c4:2b:
         43:1a:eb:f1:d4:ed:bb:8e:be:23:94:56:3b:28:0c:8d:17:c2:
         82:d1:5b:b9:64:78:7e:41:59:a5:a7:2a:ae:22:e3:51:ea:2e:
         ef:8a:3f:9e:b9:ab:04:b0:d8:35:05:37:ee:9a:d0:6b:32:89:
         b8:c7:9d:83:65:52:92:0d:26:c7:c3:75:4a:5f:70:ea:f5:cc:
         38:4c:e5:98:2a:ff:ba:55:c9:a9:52:00:6b:88:09:43:c4:29:
         6a:2d:9a:3c:1b:cd:27:a0:05:09:16:ae:c6:b0:2a:3e:d7:35:
         0e:30:3e:24:d4:9e:43:4a:53:bf:42:ef:4b:89:38:ec:41:06:
         d2:a6:06:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:22:18 2026 by rpki-client