Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft
File:                     lLA392-iN6eOqVSONVel4W7WJJo.mft (raw, json)
Hash identifier:          GPrz+vdRa4cWLk0Q6IJNJcZuBsmSxDij7qRuWmVE+gg=
Subject key identifier:   14:87:08:B3:57:B2:9E:75:4D:78:3B:08:D9:E9:0C:83:8A:D6:C7:A5
Authority key identifier: 94:B0:37:F7:6F:A2:37:A7:8E:A9:54:8E:35:57:A5:E1:6E:D6:24:9A
Certificate issuer:       /CN=A9147BF1/serialNumber=94B037F76FA237A78EA9548E3557A5E16ED6249A
Certificate serial:       0246
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft
Manifest number:          023E
Signing time:             Mon 05 Oct 2026 02:52:23 +0000
Manifest this update:     Mon 05 Oct 2026 02:52:23 +0000
Manifest next update:     Mon 12 Oct 2026 02:52:23 +0000
Files and hashes:         1: lLA392-iN6eOqVSONVel4W7WJJo.crl (hash: 5PasZOd1KKRiBLuU5JIBxmlXeV1IAF1Z0FEHqUGQ5pk=)
                          2: 26C760F002EA11F0836EF72FC4F9AE02.roa (hash: wrQZ3i6auQE6hasl5pdOo4dzJGXDbVakH3Xi8U4i1wQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.crl
                          rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 02:52:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 582 (0x246)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147BF1, serialNumber=94B037F76FA237A78EA9548E3557A5E16ED6249A
        Validity
            Not Before: Oct  5 02:52:23 2026 GMT
            Not After : Oct 12 02:52:23 2026 GMT
        Subject: CN=6ac310e7-5937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:50:22:8c:18:1f:9a:e2:f2:de:8d:6a:f3:15:
                    72:b4:80:ed:ed:ac:7d:80:27:2b:14:50:bd:2c:32:
                    9c:a9:d0:69:d2:e0:4c:0c:4a:f1:ab:3a:14:48:cb:
                    11:33:d3:32:da:0d:b1:39:df:f3:33:28:ed:be:98:
                    18:e3:65:3a:aa:e3:0d:5e:85:0b:c8:8f:a8:7a:b1:
                    88:6f:f1:c5:72:f9:d4:f1:45:fa:db:08:9a:11:c2:
                    30:f5:9e:27:e8:17:69:39:0e:a4:b1:50:87:7c:8c:
                    e5:d8:89:5c:5a:d6:5e:70:fc:3a:53:ec:21:f8:0c:
                    c5:c3:49:fe:b4:62:94:c7:83:10:fd:7c:a9:e1:27:
                    e7:50:79:4a:e5:ec:66:c3:1e:b0:40:34:75:27:90:
                    c2:27:65:c6:63:c0:14:38:d7:c2:4e:c5:ce:ae:57:
                    14:71:3a:87:74:23:d0:69:c9:77:87:74:7a:81:a3:
                    b4:07:f1:f9:e1:1f:2b:c8:9b:7f:50:58:2f:d8:3a:
                    75:22:ca:26:64:7f:52:80:42:9c:79:ca:b5:7f:72:
                    83:ae:70:ce:95:52:10:a2:d3:8e:63:03:30:9b:07:
                    75:39:19:31:70:97:2c:5c:7a:ba:a8:56:af:dc:6f:
                    ba:bb:65:38:c5:98:fa:a8:61:3c:38:d1:ba:2a:95:
                    29:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:87:08:B3:57:B2:9E:75:4D:78:3B:08:D9:E9:0C:83:8A:D6:C7:A5
            X509v3 Authority Key Identifier:
                keyid:94:B0:37:F7:6F:A2:37:A7:8E:A9:54:8E:35:57:A5:E1:6E:D6:24:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:86:5c:aa:1d:aa:ea:48:11:4c:13:f8:74:f6:c5:47:7d:31:
         a1:b4:fc:cf:45:ad:ad:00:e5:19:ed:3f:41:05:2f:41:b4:f9:
         8a:9a:a8:28:35:d5:70:d2:4d:08:10:88:05:66:6b:1a:e8:44:
         c0:8b:a9:9c:8f:20:39:89:ef:47:4b:0d:9b:97:fe:6f:6b:ba:
         d1:39:a0:10:ce:44:3f:9f:ee:89:2a:3a:de:c7:26:f2:0b:29:
         17:f7:30:bc:66:24:1f:92:06:9c:ac:12:40:13:e9:bf:51:44:
         ca:7f:0e:23:b3:2a:51:d2:2b:c4:c4:2d:f1:93:ef:33:c9:1d:
         cf:dd:a4:27:4b:39:af:be:9f:71:c5:4e:69:2e:7a:90:8b:13:
         41:7a:a4:ef:e7:f4:97:0d:d8:d2:4f:01:59:0f:4f:83:eb:40:
         c9:d7:c6:f5:2f:a2:6a:27:8e:1e:de:e5:03:75:dd:7e:d4:e4:
         c2:96:53:6a:8d:30:f2:1a:f1:6b:01:33:98:b4:3c:76:46:eb:
         a5:99:65:20:47:64:58:76:02:d7:35:42:48:9e:7f:7d:6e:b1:
         20:a4:22:bc:30:ae:1d:1f:74:36:d6:d4:0e:6a:ed:74:e7:4e:
         5c:2b:c4:58:1b:26:77:84:ca:67:2c:15:99:07:0f:91:9c:06:
         77:80:c3:56
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDdCRjExMTAvBgNVBAUTKDk0QjAzN0Y3NkZBMjM3QTc4RUE5NTQ4RTM1NTdBNUUx
NkVENjI0OUEwHhcNMjYxMDA1MDI1MjIzWhcNMjYxMDEyMDI1MjIzWjAYMRYwFAYD
VQQDEw02YWMzMTBlNy01OTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvVAijBgfmuLy3o1q8xVytIDt7ax9gCcrFFC9LDKcqdBp0uBMDErxqzoUSMsR
M9My2g2xOd/zMyjtvpgY42U6quMNXoULyI+oerGIb/HFcvnU8UX62wiaEcIw9Z4n
6BdpOQ6ksVCHfIzl2IlcWtZecPw6U+wh+AzFw0n+tGKUx4MQ/Xyp4SfnUHlK5exm
wx6wQDR1J5DCJ2XGY8AUONfCTsXOrlcUcTqHdCPQacl3h3R6gaO0B/H54R8ryJt/
UFgv2Dp1IsomZH9SgEKcecq1f3KDrnDOlVIQotOOYwMwmwd1ORkxcJcsXHq6qFav
3G+6u2U4xZj6qGE8ONG6KpUp+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBSHCLNX
sp51TXg7CNnpDIOK1selMB8GA1UdIwQYMBaAFJSwN/dvojenjqlUjjVXpeFu1iSa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0JGMS83RDE2RTRGQTU3
QjgxMUVFQUUxOEI1NjhDNEY5QUUwMi9sTEEzOTItaU42ZU9xVlNPTlZlbDRXN1dK
Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xMQTM5Mi1pTjZlT3FWU09OVmVsNFc3V0pKby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
N0JGMS83RDE2RTRGQTU3QjgxMUVFQUUxOEI1NjhDNEY5QUUwMi9sTEEzOTItaU42
ZU9xVlNPTlZlbDRXN1dKSm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWoZcqh2q6kgRTBP4dPbFR30xobT8z0WtrQDlGe0/QQUvQbT5ipqoKDXVcNJN
CBCIBWZrGuhEwIupnI8gOYnvR0sNm5f+b2u60TmgEM5EP5/uiSo63scm8gspF/cw
vGYkH5IGnKwSQBPpv1FEyn8OI7MqUdIrxMQt8ZPvM8kdz92kJ0s5r76fccVOaS56
kIsTQXqk7+f0lw3Y0k8BWQ9Pg+tAydfG9S+iaieOHt7lA3XdftTkwpZTao0w8hrx
awEzmLQ8dkbrpZllIEdkWHYC1zVCSJ5/fW6xIKQivDCuHR90NtbUDmrtdOdOXCvE
WBsmd4TKZywVmQcPkZwGd4DDVg==
-----END CERTIFICATE-----
Generated at Mon Oct 5 21:00:09 2026 by rpki-client