Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147067/E3610E1C4D1911F1A8D9B186B9833773/l5j60KAlRO73NipYtxrzZoFJjrE.mft
File:                     l5j60KAlRO73NipYtxrzZoFJjrE.mft (raw, json)
Hash identifier:          MB1aQ0MzpVq4subVWrBsTI4fLeCBANaU5Tmp38xrCPA=
Subject key identifier:   C7:B2:38:AA:4D:B5:62:42:16:CA:D3:C0:77:25:B0:8F:64:9E:45:4F
Authority key identifier: 97:98:FA:D0:A0:25:44:EE:F7:36:2A:58:B7:1A:F3:66:81:49:8E:B1
Certificate issuer:       /CN=A9147067/serialNumber=9798FAD0A02544EEF7362A58B71AF36681498EB1
Certificate serial:       3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5j60KAlRO73NipYtxrzZoFJjrE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147067/E3610E1C4D1911F1A8D9B186B9833773/l5j60KAlRO73NipYtxrzZoFJjrE.mft
Manifest number:          3B
Signing time:             Thu 03 Sep 2026 08:46:31 +0000
Manifest this update:     Thu 03 Sep 2026 08:46:30 +0000
Manifest next update:     Thu 10 Sep 2026 08:46:30 +0000
Files and hashes:         1: l5j60KAlRO73NipYtxrzZoFJjrE.crl (hash: k4j761GpalFI2tPq8QgLlzU7ULSqFh9hn1Orl85B4ZM=)
                          2: 77F3A8B44D1A11F1A20E0EADB9833773.roa (hash: njgB4GyznC4WbAXjnMUKLhBAaTqFgRbORUoYNqNFmn0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147067/E3610E1C4D1911F1A8D9B186B9833773/l5j60KAlRO73NipYtxrzZoFJjrE.crl
                          rsync://rpki.apnic.net/member_repository/A9147067/E3610E1C4D1911F1A8D9B186B9833773/l5j60KAlRO73NipYtxrzZoFJjrE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5j60KAlRO73NipYtxrzZoFJjrE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 08:46:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147067, serialNumber=9798FAD0A02544EEF7362A58B71AF36681498EB1
        Validity
            Not Before: Sep  3 08:46:30 2026 GMT
            Not After : Sep 10 08:46:30 2026 GMT
        Subject: CN=6a9933e7-48c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f5:28:c6:73:be:a9:82:83:3f:8e:4d:90:51:
                    ca:9e:d9:58:e7:09:d3:d4:68:fb:a1:08:5e:bd:dc:
                    87:ea:b9:80:cf:c4:e4:e6:03:73:ee:84:41:7d:a6:
                    bb:4f:a1:5b:d3:f4:82:bd:3d:a2:4d:2e:b2:cc:6d:
                    92:e2:ad:85:78:91:d1:28:01:8c:00:67:38:cb:9d:
                    ea:ef:e9:c2:17:ab:21:06:e6:b9:67:32:96:cb:81:
                    ac:af:4d:ad:ea:3b:ed:e0:7d:bf:07:c2:0a:a6:14:
                    28:85:84:b0:91:7e:33:38:1c:e9:e4:e3:0a:1a:61:
                    4c:0b:99:08:f3:e7:7a:e7:6e:12:c9:82:80:83:de:
                    ab:7c:b5:9b:a4:b5:a5:06:be:2f:e7:16:af:f1:8c:
                    1e:2f:df:0d:9c:4b:7d:33:15:cb:52:86:da:4b:1f:
                    4b:19:95:68:3d:86:2a:0e:be:7a:d3:32:4b:4d:f8:
                    10:d8:54:be:7d:27:1e:85:7e:ce:02:f4:8a:e2:eb:
                    67:fe:2e:ed:e7:08:7a:87:26:7b:1e:4b:03:a2:61:
                    8f:eb:93:8a:97:b8:ff:d0:aa:d7:50:64:cd:33:e3:
                    ca:a1:1d:18:20:b7:5e:05:36:d8:e0:71:46:aa:08:
                    ba:f3:b4:75:9f:95:3b:5f:f2:9b:7b:66:05:72:ea:
                    bb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B2:38:AA:4D:B5:62:42:16:CA:D3:C0:77:25:B0:8F:64:9E:45:4F
            X509v3 Authority Key Identifier:
                keyid:97:98:FA:D0:A0:25:44:EE:F7:36:2A:58:B7:1A:F3:66:81:49:8E:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147067/E3610E1C4D1911F1A8D9B186B9833773/l5j60KAlRO73NipYtxrzZoFJjrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5j60KAlRO73NipYtxrzZoFJjrE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147067/E3610E1C4D1911F1A8D9B186B9833773/l5j60KAlRO73NipYtxrzZoFJjrE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:7f:9b:0b:98:4c:6e:4c:f4:d7:1d:18:76:d6:76:5b:db:94:
         2c:fc:4f:7f:db:4e:78:79:5e:e0:c9:aa:8f:b6:fd:4d:8b:47:
         e1:7c:cf:e6:64:05:3e:0e:39:d0:28:c3:59:c5:de:ae:a1:a6:
         0a:14:e1:ca:4a:4a:65:b0:71:fa:de:ce:30:87:e0:51:39:ea:
         48:b9:2d:87:4d:c4:57:7b:f6:c5:85:8d:40:69:18:e0:07:cd:
         f7:a2:43:1f:f3:50:21:5b:37:3a:8e:a0:25:56:d6:e7:30:8c:
         94:c0:c0:bf:f5:b8:1d:20:40:d9:77:86:7b:a2:3c:c3:93:80:
         69:bf:9e:82:22:d4:e4:e3:1f:1d:28:38:b7:f3:1d:d7:54:77:
         c0:b4:cd:21:70:95:11:81:35:56:cd:e1:2b:5c:85:ed:d3:80:
         0c:38:27:97:ce:4b:e7:17:c5:40:e0:48:23:5b:59:45:5b:20:
         96:fb:b3:1c:ee:e5:53:e2:18:49:a0:96:e6:7d:5a:a1:78:a3:
         df:4d:b4:94:e2:04:d1:96:52:9f:40:86:7e:ce:84:2c:01:6e:
         84:d3:93:1b:1c:18:eb:64:34:36:ee:0e:b0:c9:04:6a:f8:9b:
         e0:b2:2d:67:38:c1:61:4b:3c:cb:7d:c0:39:60:f2:28:be:f1:
         c9:87:cd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:31:40 2026 by rpki-client