Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.mft
File:                     LXezMdgykSthvgpQpthjS44qp5w.mft (raw, json)
Hash identifier:          O0dc2FDmgCeEYzmZ2rG54/iS8UueFfM3CUHuz5pq7YQ=
Subject key identifier:   5C:A0:31:DB:89:CD:34:1D:70:8E:C1:AD:8B:8C:ED:84:C7:18:B5:EB
Authority key identifier: 2D:77:B3:31:D8:32:91:2B:61:BE:0A:50:A6:D8:63:4B:8E:2A:A7:9C
Certificate issuer:       /CN=A9141B4C/serialNumber=2D77B331D832912B61BE0A50A6D8634B8E2AA79C
Certificate serial:       7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXezMdgykSthvgpQpthjS44qp5w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.mft
Manifest number:          7D
Signing time:             Sat 03 Oct 2026 08:30:09 +0000
Manifest this update:     Sat 03 Oct 2026 08:30:09 +0000
Manifest next update:     Sat 10 Oct 2026 08:30:09 +0000
Files and hashes:         1: LXezMdgykSthvgpQpthjS44qp5w.crl (hash: jiv0Lkjc/DpkM6nJ455yb2RLeoayGqr/RrbmEHfUYeo=)
                          2: 783957EA31BF11F1BC4C9C57C1833773.roa (hash: DoB27+5uTyjT+GpZ+8s5WP7HzASd3cgOpWixwpFDv7M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.crl
                          rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXezMdgykSthvgpQpthjS44qp5w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 08:30:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141B4C, serialNumber=2D77B331D832912B61BE0A50A6D8634B8E2AA79C
        Validity
            Not Before: Oct  3 08:30:09 2026 GMT
            Not After : Oct 10 08:30:09 2026 GMT
        Subject: CN=6ac0bd11-91b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2a:8a:35:77:21:e0:b8:28:cd:24:f2:03:dd:
                    b6:ea:b5:c1:79:fb:8b:a0:6d:80:7a:11:dd:ad:3b:
                    36:d9:23:8a:1f:25:55:69:23:82:c6:28:70:34:03:
                    a1:e4:86:a7:1f:83:61:66:8c:a2:7a:52:12:66:20:
                    72:ac:bc:63:5c:26:76:84:30:e6:5c:72:1b:02:29:
                    76:01:14:7f:21:a3:8b:6b:0f:15:3d:81:71:88:b6:
                    db:84:a0:76:c7:fa:88:9e:a7:77:5d:da:9b:5e:f2:
                    ff:29:c9:98:ae:0a:fd:d4:f6:4f:fe:d2:ea:88:85:
                    d9:a5:b7:9d:87:c8:56:cc:b1:7d:9b:a4:18:24:63:
                    c0:91:09:d3:91:e5:4f:83:8d:57:1e:b8:cb:91:2b:
                    e6:86:f6:99:c4:95:aa:5b:19:b8:8c:e0:4b:d4:69:
                    d8:d2:45:74:56:2c:f8:e3:7d:8e:2d:98:c7:19:57:
                    92:69:dd:bc:4b:16:81:90:ca:f1:87:36:29:1d:2f:
                    8b:83:c9:22:37:9e:e0:49:98:38:94:94:c7:c4:2c:
                    dc:c5:64:13:8d:06:7c:05:d4:10:1c:66:67:57:9c:
                    af:19:61:87:2f:72:50:d9:da:5e:51:e2:e9:d0:c3:
                    bb:00:01:85:ea:6c:00:c3:9d:e1:ca:b7:03:76:b3:
                    a7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A0:31:DB:89:CD:34:1D:70:8E:C1:AD:8B:8C:ED:84:C7:18:B5:EB
            X509v3 Authority Key Identifier:
                keyid:2D:77:B3:31:D8:32:91:2B:61:BE:0A:50:A6:D8:63:4B:8E:2A:A7:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXezMdgykSthvgpQpthjS44qp5w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:55:31:f3:55:00:5f:52:66:22:e6:62:45:5e:d5:60:8d:03:
         b4:7c:1b:55:be:aa:c3:64:6d:36:e4:dd:17:6d:63:f0:9c:40:
         39:07:6e:2f:5e:82:31:fd:3d:8f:2c:e2:c5:fc:d7:d5:99:7b:
         fb:a1:13:e4:fb:bb:01:f6:94:99:34:b0:8b:8f:32:68:7c:26:
         94:d2:02:ed:f8:91:17:f7:6d:4f:85:97:6e:9c:25:11:d2:ba:
         a7:12:60:12:fb:5f:dd:6b:cb:98:78:4b:a2:bb:d2:e3:67:4c:
         c1:6d:c6:f9:d9:51:df:9d:52:05:11:6e:b4:b2:0b:72:e8:5d:
         95:60:d4:93:6a:c8:1c:ed:3e:63:cc:6a:6e:77:5a:aa:25:7c:
         63:7b:ce:10:ad:d8:d0:31:10:d9:f1:de:0c:ce:54:cf:94:ef:
         35:55:6e:78:1c:63:eb:52:72:9f:ad:1a:0b:c6:97:3c:76:1b:
         d3:77:80:9d:b4:d5:7c:c4:dd:fb:47:2d:25:aa:a3:92:a3:e2:
         3f:9c:ad:4f:a7:fa:d4:44:00:0d:01:1e:b2:f1:fd:e8:2f:cd:
         db:61:c6:a9:d6:87:92:8b:59:f9:1c:d1:5b:ab:fc:7a:2a:57:
         2e:15:b2:bb:fe:30:2c:1e:2c:c8:84:8e:3f:e3:26:3f:fb:72:
         53:74:8d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 07:36:12 2026 by rpki-client