Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft
File:                     l9pBnzurP2V6paXATgV8StlhvFs.mft (raw, json)
Hash identifier:          Kn5tN0HLnAYscIKv8pMHspwNbArZIuSz5f/wGRO0iNA=
Subject key identifier:   6D:C9:6B:9B:7E:91:67:56:D1:53:2E:38:C9:BB:C4:AC:BD:04:27:0C
Authority key identifier: 97:DA:41:9F:3B:AB:3F:65:7A:A5:A5:C0:4E:05:7C:4A:D9:61:BC:5B
Certificate issuer:       /CN=A911251C/serialNumber=97DA419F3BAB3F657AA5A5C04E057C4AD961BC5B
Certificate serial:       02DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9pBnzurP2V6paXATgV8StlhvFs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft
Manifest number:          02D6
Signing time:             Mon 05 Oct 2026 01:25:05 +0000
Manifest this update:     Mon 05 Oct 2026 01:25:04 +0000
Manifest next update:     Mon 12 Oct 2026 01:25:04 +0000
Files and hashes:         1: l9pBnzurP2V6paXATgV8StlhvFs.crl (hash: K00TuxLq6l8aJ2jsOC8iU3UQx+BrwkgDkULVAa9ZqQo=)
                          2: B2F017A26BE311ED8B83B484C4F9AE02.roa (hash: rpUyfZdW5IUbk6NgGsW43Rz/PEOzmhBfAVdBu5w6gaY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.crl
                          rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9pBnzurP2V6paXATgV8StlhvFs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 01:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 733 (0x2dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911251C, serialNumber=97DA419F3BAB3F657AA5A5C04E057C4AD961BC5B
        Validity
            Not Before: Oct  5 01:25:04 2026 GMT
            Not After : Oct 12 01:25:04 2026 GMT
        Subject: CN=6ac2fc71-d37a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:98:a7:9b:a4:61:1d:92:b3:fd:1b:55:6e:22:
                    59:48:40:30:ef:1b:38:b7:5e:73:04:12:df:49:27:
                    2c:70:95:96:38:6e:20:dc:e9:c3:34:ea:8f:98:07:
                    83:ee:bf:c1:e8:f9:d3:b8:de:c4:0c:5f:ea:95:aa:
                    bf:2d:08:bb:b3:08:41:12:0e:12:fe:07:77:b2:3d:
                    35:cc:eb:fe:f9:c6:71:01:3d:80:d1:f2:4f:3f:42:
                    78:fb:eb:70:e4:92:7d:da:de:b6:4f:cd:ef:6e:c7:
                    74:0e:37:0f:72:2d:0b:da:b6:0f:50:e8:05:f6:d0:
                    0d:63:b5:ec:93:93:5b:9f:2b:aa:79:b4:f5:5e:d1:
                    eb:e5:98:58:45:48:1a:42:59:f3:88:45:09:b2:ad:
                    49:2e:25:1a:e6:2b:c6:8e:4a:5f:64:0b:25:18:fa:
                    4a:ee:f8:f4:25:27:3a:c7:a2:65:48:71:b8:94:ab:
                    69:d1:a1:1f:48:43:ce:27:35:62:ff:01:30:31:9c:
                    d7:9d:77:16:fe:a3:24:a8:39:0c:cf:1b:99:59:88:
                    14:f7:66:93:68:7a:05:fe:b4:21:59:a8:d3:4e:4d:
                    77:06:0c:bd:2e:fa:af:75:03:44:76:44:ce:a5:68:
                    f9:ce:1b:13:bc:1f:c9:d5:49:88:cb:b5:8a:87:cd:
                    32:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C9:6B:9B:7E:91:67:56:D1:53:2E:38:C9:BB:C4:AC:BD:04:27:0C
            X509v3 Authority Key Identifier:
                keyid:97:DA:41:9F:3B:AB:3F:65:7A:A5:A5:C0:4E:05:7C:4A:D9:61:BC:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9pBnzurP2V6paXATgV8StlhvFs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:d0:48:ef:9c:dc:8d:96:de:97:07:72:8d:12:e1:b6:2d:18:
         bd:42:78:a4:2e:2b:d5:eb:27:f4:99:84:6b:b2:05:61:95:07:
         4a:9b:bd:b8:50:e3:59:e3:a0:09:d3:ba:a2:0a:86:90:ca:91:
         1c:14:27:73:9c:73:14:fa:7e:2f:9a:c8:15:51:91:8a:7c:f3:
         af:ff:d8:d2:45:88:59:89:35:25:83:99:66:a5:82:0b:4f:4c:
         57:5f:19:02:b9:6e:0f:7c:d9:cf:7f:25:35:b0:69:a7:98:a3:
         f1:41:e4:da:a4:4b:68:e4:d6:ee:09:9d:ae:5b:94:20:99:bb:
         71:83:29:21:5a:7b:7f:26:2b:e6:f4:e6:b0:25:02:67:13:26:
         1b:cb:03:76:db:d8:12:de:63:cd:18:94:51:5d:30:73:26:2b:
         4b:e2:16:d1:e0:03:bc:80:11:e6:61:59:a5:d8:bc:09:49:6b:
         1f:d5:c4:aa:c9:bf:76:ac:02:f7:60:99:a1:3f:38:06:2a:a0:
         89:32:5a:28:b7:f5:04:e9:fd:e9:c7:4a:82:58:b2:0b:2d:38:
         38:6b:58:04:af:a0:08:59:0e:38:0e:9b:2f:ec:5b:1f:ff:62:
         dc:bd:d0:f8:eb:4d:99:d6:3e:e0:73:a7:dc:8f:c3:e7:bf:a1:
         85:b6:e5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 12:41:48 2026 by rpki-client