Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft
File:                     lLA392-iN6eOqVSONVel4W7WJJo.mft (raw, json)
Hash identifier:          EKz5n78Q4LHBgZIIoIkMW32Ji2iojYrzYn09KUR3fJU=
Subject key identifier:   E9:80:60:E6:3C:43:5A:9F:E8:D3:31:C8:95:69:AD:4D:A2:E4:7A:C9
Authority key identifier: 94:B0:37:F7:6F:A2:37:A7:8E:A9:54:8E:35:57:A5:E1:6E:D6:24:9A
Certificate issuer:       /CN=A9147BF1/serialNumber=94B037F76FA237A78EA9548E3557A5E16ED6249A
Certificate serial:       022E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft
Manifest number:          0226
Signing time:             Wed 19 Aug 2026 03:21:05 +0000
Manifest this update:     Wed 19 Aug 2026 03:21:04 +0000
Manifest next update:     Wed 26 Aug 2026 03:21:04 +0000
Files and hashes:         1: lLA392-iN6eOqVSONVel4W7WJJo.crl (hash: TacZ6/fOozESvdSVWwgOuQemf9c8raVHYSF7oI4HSuM=)
                          2: 26C760F002EA11F0836EF72FC4F9AE02.roa (hash: wrQZ3i6auQE6hasl5pdOo4dzJGXDbVakH3Xi8U4i1wQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.crl
                          rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 03:21:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 558 (0x22e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147BF1, serialNumber=94B037F76FA237A78EA9548E3557A5E16ED6249A
        Validity
            Not Before: Aug 19 03:21:04 2026 GMT
            Not After : Aug 26 03:21:04 2026 GMT
        Subject: CN=6a852121-d6ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f6:29:2b:b9:a6:f8:fd:5e:f3:f2:08:c5:c2:
                    7f:cb:85:01:09:d5:37:be:c4:30:11:6d:3b:bd:3b:
                    fb:51:1c:27:1a:9b:87:c3:ed:f3:a5:32:82:89:ec:
                    24:e9:6e:51:54:a3:25:3b:e2:66:1c:d7:8d:ad:83:
                    69:a1:8a:79:84:11:a8:89:65:26:e8:17:a2:6a:1d:
                    41:31:89:46:d5:61:87:72:6f:e5:0c:fe:21:75:87:
                    2e:c1:0f:ed:39:1c:61:98:fc:f7:a7:4d:38:62:56:
                    0a:7c:b2:f5:ad:6e:d4:42:12:e3:33:cc:7f:e9:c0:
                    99:d2:90:15:7b:f4:1c:9c:e1:1a:60:90:07:c2:94:
                    9a:ea:51:b8:18:48:50:3f:1a:6b:98:67:14:28:79:
                    b1:43:45:cc:2d:6d:83:5e:75:d2:9b:c1:56:d6:97:
                    7d:d6:20:fd:d6:f1:d7:d2:42:e1:55:86:e9:59:02:
                    7e:5a:aa:5b:c2:1c:f4:f9:db:d4:94:3d:2e:b0:3b:
                    60:7f:27:1e:00:35:12:bf:19:04:f5:d5:c8:09:96:
                    a3:c6:4b:58:9d:03:24:49:9f:86:9d:f3:be:a9:ca:
                    39:af:fa:66:68:e3:b1:17:f4:08:fe:71:93:f5:9d:
                    63:46:ed:a4:f5:cc:77:ab:75:b1:2c:6a:c7:b4:26:
                    af:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:80:60:E6:3C:43:5A:9F:E8:D3:31:C8:95:69:AD:4D:A2:E4:7A:C9
            X509v3 Authority Key Identifier:
                keyid:94:B0:37:F7:6F:A2:37:A7:8E:A9:54:8E:35:57:A5:E1:6E:D6:24:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:92:94:68:bc:14:af:a3:97:5d:28:9a:95:c6:c7:0e:ec:d9:
         12:7d:2a:f6:73:fb:96:1e:5e:a2:cc:f5:80:c7:2a:0d:1f:f2:
         75:5f:d7:42:3a:64:91:0e:a7:16:6d:e9:b7:3e:cf:4e:66:32:
         d1:bd:0a:72:38:83:ac:e4:ff:4f:56:56:dc:f5:1d:0a:a1:f8:
         b4:9b:e4:93:5a:4e:7c:ac:c3:10:58:86:23:36:ca:8b:c5:0d:
         b5:b0:cd:1a:5d:f9:2b:f6:41:70:46:a8:8c:7d:93:b9:ca:91:
         30:f8:c2:9d:b9:0c:5a:eb:db:a6:76:24:0a:d3:97:d8:79:f4:
         8a:4f:0c:ef:50:cf:a5:f7:5e:ea:a6:3c:fd:50:d2:aa:1f:aa:
         c0:65:47:ef:3d:35:8b:b8:7a:a0:10:e8:e5:fd:74:14:90:6c:
         7d:0a:f8:b0:4c:35:ce:0d:ed:18:8a:7e:0b:f1:05:1f:13:20:
         5d:e3:fb:65:f5:22:66:b9:d7:a6:b4:cd:de:b9:68:2e:16:97:
         30:0a:77:bd:23:9e:25:72:cf:ad:52:3c:10:a9:09:2a:17:bc:
         52:b4:6d:54:90:97:64:56:8d:64:c8:b8:36:ab:c4:db:b7:c6:
         60:4e:e8:bb:fa:04:68:59:e0:93:b8:04:2b:b1:c4:23:58:7d:
         c0:01:81:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:04:32 2026 by rpki-client