Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft
File:                     LE66ORmVzLAcUT5PjmHtkUKW5sE.mft (raw, json)
Hash identifier:          jfHKAz+Cb1EKGqXdtSME5QXrRHHq2qI/U92VCQMovqQ=
Subject key identifier:   70:A1:0B:E9:D7:45:3F:74:17:16:AC:C3:64:F1:BC:35:90:2F:BB:5D
Authority key identifier: 2C:4E:BA:39:19:95:CC:B0:1C:51:3E:4F:8E:61:ED:91:42:96:E6:C1
Certificate issuer:       /CN=A9129209/serialNumber=2C4EBA391995CCB01C513E4F8E61ED914296E6C1
Certificate serial:       0250
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft
Manifest number:          024A
Signing time:             Wed 19 Aug 2026 02:56:40 +0000
Manifest this update:     Wed 19 Aug 2026 02:56:40 +0000
Manifest next update:     Wed 26 Aug 2026 02:56:40 +0000
Files and hashes:         1: LE66ORmVzLAcUT5PjmHtkUKW5sE.crl (hash: c1dDGUn85VkI2a90VdH3XtGfCYZE42IClXXcu/ExDKw=)
                          2: 7CBC92D21C7811EEA8F76D7FC4F9AE02.roa (hash: 3n/gOl41dGfCJb55lZ2KYu72EfPcwMUIMD9hW1bv1H4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.crl
                          rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 02:56:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 592 (0x250)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129209, serialNumber=2C4EBA391995CCB01C513E4F8E61ED914296E6C1
        Validity
            Not Before: Aug 19 02:56:40 2026 GMT
            Not After : Aug 26 02:56:40 2026 GMT
        Subject: CN=6a851b68-822c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:14:fb:fa:a3:f9:3c:41:a6:f5:71:96:9a:d7:
                    d7:6d:30:f5:eb:bc:f9:8d:0b:d5:36:e0:13:2c:d1:
                    8f:18:10:fe:64:3a:81:51:0a:37:cc:4f:1a:23:f8:
                    4f:b2:82:ef:42:4f:43:09:51:32:da:8e:bb:a0:18:
                    6f:aa:0f:ac:e5:61:5b:5b:a7:d3:50:2b:e4:5d:3d:
                    94:6d:36:9d:62:f6:81:a4:23:7d:45:fe:77:2c:15:
                    ca:09:da:23:6b:b0:7d:e2:61:12:99:03:c6:af:74:
                    66:df:fe:52:74:f2:30:d4:13:a2:c4:ff:f0:6d:d2:
                    56:86:60:c8:df:a5:55:1b:1c:a6:d8:61:ee:94:e8:
                    c9:38:9c:67:c1:63:72:7f:6c:b3:4a:85:70:4d:7c:
                    26:31:ab:f6:0d:7f:e8:e1:1e:ba:77:a1:fd:78:fe:
                    9e:9d:07:91:60:9c:4d:78:94:6a:f2:3e:30:c9:05:
                    41:9e:e4:a7:e6:30:b8:73:f4:c3:78:ad:52:b8:13:
                    ad:30:99:2b:f3:a9:e2:bb:10:2c:b1:bd:6f:d9:ac:
                    f9:6c:60:0f:74:10:46:69:8d:23:e8:16:e9:73:cb:
                    bb:3c:8f:d7:3a:91:c2:d1:da:fd:d6:26:0f:1a:82:
                    44:21:49:2b:47:52:55:3c:c5:8c:2a:db:3b:05:d5:
                    56:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A1:0B:E9:D7:45:3F:74:17:16:AC:C3:64:F1:BC:35:90:2F:BB:5D
            X509v3 Authority Key Identifier:
                keyid:2C:4E:BA:39:19:95:CC:B0:1C:51:3E:4F:8E:61:ED:91:42:96:E6:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:80:2c:30:e3:e2:f0:4a:44:3a:30:d0:45:8f:93:33:12:2c:
         76:52:8c:93:75:77:9a:ee:bd:19:39:e7:0c:12:5b:e6:83:27:
         69:5b:2d:f3:65:65:29:57:9b:a8:59:22:37:84:f7:1a:57:03:
         e4:f8:44:f3:99:88:c5:2c:60:68:b9:66:c6:ef:56:74:c9:3a:
         22:80:e3:01:58:4f:d0:19:94:06:da:4e:89:b9:0a:e0:50:42:
         04:74:57:d7:63:cb:76:d7:ff:c2:43:d8:8a:0c:9b:76:49:81:
         7c:21:5f:41:c6:27:45:a6:91:97:13:f3:b7:9c:8e:5f:cd:df:
         d3:82:cc:37:e9:c3:25:c4:80:90:97:c7:80:a3:0c:1c:48:f8:
         9d:af:08:1b:40:fd:28:c0:34:4b:42:78:e6:f6:0b:ed:29:56:
         88:70:cc:3f:a5:74:cb:1d:48:43:6b:d9:9e:8d:49:ac:ca:41:
         8b:1f:39:42:53:38:88:68:d5:d9:d9:90:63:15:fd:46:7b:e5:
         6b:c0:a7:00:17:3e:31:fb:56:0d:8c:b7:d3:6f:49:04:d0:2c:
         66:b4:c2:10:f6:3f:35:6f:39:57:1f:53:cf:18:c6:5a:a5:6c:
         b3:7f:b7:d3:92:4b:87:63:35:fb:0f:35:c2:f9:df:85:22:2b:
         3e:2c:a3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:43:50 2026 by rpki-client