Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
File:                     lWVe5y4XegIJbAy2BnaqHmaa5-A.mft (raw, json)
Hash identifier:          Eo65CMSDHfxGTZEjGAjyO4pOOcuHp6lN+5UB+8URQYE=
Subject key identifier:   3A:97:F9:49:82:5B:21:68:48:8B:31:29:2B:00:88:27:E7:FD:FC:5F
Authority key identifier: 95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0
Certificate issuer:       /CN=A9127898/serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
Certificate serial:       027C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
Manifest number:          08A1
Signing time:             Mon 02 Nov 2026 22:55:28 +0000
Manifest this update:     Mon 02 Nov 2026 22:55:27 +0000
Manifest next update:     Mon 09 Nov 2026 22:55:27 +0000
Files and hashes:         1: lWVe5y4XegIJbAy2BnaqHmaa5-A.crl (hash: INKSSvmaaVZqK1Wpr72PMhzxvNnUAW6SVWt5UGm6/vY=)
                          2: BFD5DDF0D95311EF9B045445C4F9AE02.roa (hash: ZZTRP8ZYh6abdb/gEV6kUhHlPU73mYT2fjwS4t3Y8Vw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl
                          rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Nov 2026 22:55:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 636 (0x27c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127898, serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
        Validity
            Not Before: Nov  2 22:55:27 2026 GMT
            Not After : Nov  9 22:55:27 2026 GMT
        Subject: CN=6ae914e0-53e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d9:84:b0:88:91:67:a5:a5:e6:28:a9:b0:ef:
                    02:38:38:f4:24:7c:66:a0:1c:5e:6e:31:58:e6:7e:
                    b1:8b:3c:91:76:19:84:6c:48:6a:99:b5:d5:9e:27:
                    22:09:6a:23:f3:22:7a:ae:58:f3:6d:13:7d:7e:c5:
                    cf:cb:cf:1b:20:60:b2:a8:27:1a:58:76:bc:b4:63:
                    a5:ce:94:28:4c:6f:dd:fe:ce:44:91:63:2f:d8:0f:
                    bc:36:74:3a:87:78:f4:19:9d:2d:93:63:37:f3:4d:
                    ac:31:f3:27:23:51:cd:01:f3:49:04:b3:1f:24:ca:
                    96:8e:af:b4:65:8a:a0:b5:42:f4:09:d6:2e:dd:e6:
                    31:c1:c4:1b:cb:86:c9:de:08:b3:dd:82:dd:0d:bb:
                    fd:29:62:49:a5:b7:93:f1:2e:1e:a9:32:6d:78:e5:
                    e2:15:af:75:d4:3b:f5:18:4b:9e:28:31:c1:86:52:
                    42:4a:b3:98:80:f7:7c:aa:05:2d:b5:84:24:c9:0f:
                    a9:ad:c7:36:44:07:de:a5:53:65:9d:79:f8:f9:46:
                    08:40:ca:3d:a4:79:54:4a:ce:70:c6:84:96:b0:61:
                    89:e3:35:71:18:11:ad:66:fe:3b:46:a6:5c:6f:94:
                    25:d7:5e:b3:c9:15:8a:4c:0c:a8:c0:f9:b0:54:1f:
                    6d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:97:F9:49:82:5B:21:68:48:8B:31:29:2B:00:88:27:E7:FD:FC:5F
            X509v3 Authority Key Identifier:
                keyid:95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:1e:19:25:89:e8:6f:4a:a4:d2:1f:2e:cf:05:55:07:4e:63:
         ce:54:74:76:a2:91:92:c9:bc:ea:5e:0b:b6:00:17:02:83:f8:
         7e:61:01:fd:4d:ae:0e:26:7e:05:08:8b:91:96:d2:d4:e6:d2:
         28:eb:7b:fb:fa:5c:cf:ba:5b:bf:f7:ac:42:ec:11:ae:61:3e:
         d8:61:02:91:4b:40:aa:90:cc:35:0b:ac:98:0d:9e:4a:5b:e9:
         33:da:bb:60:3d:1f:8e:0f:0a:fa:66:72:60:d3:c1:0a:d2:7f:
         fa:c2:26:ce:df:58:87:ed:68:af:6c:cc:21:be:4d:68:88:6c:
         28:ff:28:03:a0:1c:a7:3f:be:e9:14:7e:3a:18:22:5b:f7:1c:
         39:7b:48:8f:6d:53:13:fc:48:be:10:c3:c4:00:a0:75:58:a8:
         cb:4d:2a:f5:84:f0:b9:bd:93:20:e9:17:d7:28:2c:90:2e:e3:
         92:51:93:0e:e8:d4:ac:06:20:91:3e:4b:3b:67:68:9f:0a:62:
         de:d0:1a:e3:70:55:30:37:26:8f:6a:e0:e9:4d:1e:b3:2e:cd:
         0b:65:14:bf:1e:bf:68:89:ca:f6:be:5b:63:be:64:ac:be:29:
         ad:9a:e4:bc:da:63:a6:3e:59:5c:6b:ae:61:93:76:48:41:4a:
         2f:55:1a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 19:42:22 2026 by rpki-client