Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.mft
File:                     lSgWDkwwThMH2_ZvGQFjKt-fGmQ.mft (raw, json)
Hash identifier:          hZo1ZB+5lQi1zn83gX10KQqGQnPCAGkQjasWU3M19hs=
Subject key identifier:   28:19:7F:C3:17:FA:A3:2D:6B:98:41:6B:20:EF:86:E0:63:7A:99:24
Authority key identifier: 95:28:16:0E:4C:30:4E:13:07:DB:F6:6F:19:01:63:2A:DF:9F:1A:64
Certificate issuer:       /CN=A9132457/serialNumber=9528160E4C304E1307DBF66F1901632ADF9F1A64
Certificate serial:       0299
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.mft
Manifest number:          0293
Signing time:             Sun 11 Oct 2026 02:10:59 +0000
Manifest this update:     Sun 11 Oct 2026 02:10:58 +0000
Manifest next update:     Sun 18 Oct 2026 02:10:58 +0000
Files and hashes:         1: lSgWDkwwThMH2_ZvGQFjKt-fGmQ.crl (hash: 1mjZJ/G2x3m23swYayf1Rg8A6Ydtc5ZLFsI50LnuAZU=)
                          2: 8E10E282D81B11EDAB75C13EC4F9AE02.roa (hash: GKFjPcvO4ucG2wu+o52C6baSSl36UQN43VyTX2VF8tY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.crl
                          rsync://rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 02:10:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 665 (0x299)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132457, serialNumber=9528160E4C304E1307DBF66F1901632ADF9F1A64
        Validity
            Not Before: Oct 11 02:10:58 2026 GMT
            Not After : Oct 18 02:10:58 2026 GMT
        Subject: CN=6acaf032-3314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:50:11:44:84:c2:2b:00:ee:61:72:22:d2:24:
                    c3:bf:77:5e:4c:5a:08:22:38:98:0d:7e:05:f9:55:
                    3c:52:a2:42:33:95:79:71:3c:07:2e:72:2b:11:8b:
                    7a:ef:3b:49:57:3b:e6:84:3c:cf:84:61:0b:e1:71:
                    79:9d:14:fe:23:ed:7a:80:05:e0:3d:e0:06:a9:f0:
                    5a:5c:9e:54:fe:09:ad:d1:56:39:10:4e:cb:a8:17:
                    7d:b9:40:17:6e:82:47:4f:35:29:f7:7f:f0:aa:4e:
                    0f:bb:e8:47:4c:d7:ef:33:3b:d0:4e:4e:9c:43:51:
                    ff:a7:2b:21:55:0e:77:94:b4:b7:77:de:89:48:18:
                    08:51:ca:94:0e:b5:83:38:01:41:eb:d6:14:4e:df:
                    f0:e0:74:ba:61:3a:5a:19:19:48:56:b5:f5:a2:0a:
                    e0:27:83:44:f1:7d:7d:4c:36:3a:75:eb:d9:f1:72:
                    da:b2:84:f3:d1:1b:72:16:af:26:5c:e3:7e:f4:5e:
                    7d:f6:6a:0b:d5:aa:f3:97:ac:24:50:c7:46:2d:de:
                    9d:b4:67:81:3a:b1:9a:6a:9f:d4:d1:80:d4:42:e0:
                    74:be:18:88:eb:01:e0:ab:04:4b:54:64:0e:71:45:
                    89:bb:91:2d:28:ef:4c:55:34:79:64:e4:4f:02:6d:
                    38:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:19:7F:C3:17:FA:A3:2D:6B:98:41:6B:20:EF:86:E0:63:7A:99:24
            X509v3 Authority Key Identifier:
                keyid:95:28:16:0E:4C:30:4E:13:07:DB:F6:6F:19:01:63:2A:DF:9F:1A:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:48:fb:6d:08:d9:7d:a4:e7:fd:88:95:02:03:0b:56:29:80:
         40:ae:27:fb:70:b3:c9:f3:3a:a6:2a:60:a6:08:eb:60:22:21:
         63:b3:39:dd:0f:53:54:44:e7:5f:62:7b:9b:9d:b4:ce:bc:da:
         ea:db:52:9a:89:bf:80:a8:5b:d9:0e:e3:12:31:7a:e9:94:c2:
         4e:b3:a5:a7:91:48:88:2f:61:e0:55:d6:09:08:db:9b:84:02:
         2f:38:75:5f:e3:95:98:8d:d3:d2:ff:48:56:62:aa:7c:88:b8:
         6a:d4:1e:b9:ce:7d:38:5b:f5:32:2c:94:1a:c3:a2:cf:21:23:
         6a:d9:01:8d:4d:76:a2:93:6e:a6:d0:4a:71:35:a2:ea:08:ba:
         da:aa:58:60:2a:1f:bf:77:a8:d1:56:2f:cf:5d:ad:17:ec:83:
         51:87:f2:6f:0c:5f:49:0b:76:eb:6e:14:d6:2a:ba:1a:8c:f1:
         a3:43:ce:1a:36:c7:9f:b9:ec:1b:6f:b1:70:0b:96:b2:85:81:
         3a:da:cd:99:10:74:c2:42:8a:57:fc:08:1d:4a:3f:5a:ad:44:
         a9:64:eb:62:fe:d2:03:3b:e8:d9:0c:94:aa:4f:1d:ac:61:40:
         a4:bc:63:8b:40:4d:08:f5:38:1e:71:72:5e:a8:2f:28:23:2a:
         5e:05:07:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:53:29 2026 by rpki-client