Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft
File:                     1c9c-LTYDyITBPNliOOVYERH93o.mft (raw, json)
Hash identifier:          9M3nIDg3xcSFn8ifXbCMK7N3zTdjZf+dDF5X7BoByH8=
Subject key identifier:   E9:E7:0C:FA:FC:70:49:24:3F:0B:7D:F3:DA:A6:FB:59:C3:07:9C:FA
Authority key identifier: D5:CF:5C:F8:B4:D8:0F:22:13:04:F3:65:88:E3:95:60:44:47:F7:7A
Certificate issuer:       /CN=A914A5BB/serialNumber=D5CF5CF8B4D80F221304F36588E395604447F77A
Certificate serial:       02FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft
Manifest number:          02F3
Signing time:             Fri 23 Oct 2026 01:13:45 +0000
Manifest this update:     Fri 23 Oct 2026 01:13:45 +0000
Manifest next update:     Fri 30 Oct 2026 01:13:45 +0000
Files and hashes:         1: 1c9c-LTYDyITBPNliOOVYERH93o.crl (hash: OZG7FmneqbPjxB6/zQuk4wJ4I4QsBNasAb6ZNMDP9/0=)
                          2: A83E51EC45F611EDBA9D6062C4F9AE02.roa (hash: SogM+aLq7TtnKTXVbg7l5lBGj90QzbOdIzdMdOy5LlU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.crl
                          rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 01:13:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 762 (0x2fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A5BB, serialNumber=D5CF5CF8B4D80F221304F36588E395604447F77A
        Validity
            Not Before: Oct 23 01:13:45 2026 GMT
            Not After : Oct 30 01:13:45 2026 GMT
        Subject: CN=6adab4c9-5d70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9f:d6:2c:95:0e:2e:c7:a7:3c:05:bd:48:58:
                    45:e4:76:4b:79:73:d6:f6:b6:d5:44:37:d0:69:00:
                    8b:78:eb:b3:27:bb:41:e1:91:0b:b1:94:2e:25:a4:
                    87:40:b5:19:c8:8a:ba:4d:df:a0:a9:a8:65:8b:dc:
                    57:ef:34:7e:65:12:f4:23:ba:ac:14:3f:be:3e:d8:
                    e1:58:5a:67:c9:8f:56:de:a1:10:b5:21:d7:93:b1:
                    4a:b8:2c:ff:eb:12:d4:a1:cc:30:14:5a:c0:9c:4b:
                    35:17:82:eb:8e:96:fd:5e:a1:0e:7a:e9:a5:a4:eb:
                    c1:b9:e5:dc:7f:47:28:66:97:39:ad:91:7c:f9:43:
                    70:7d:73:d5:74:0d:b8:84:9c:8a:2a:6f:e7:d0:8b:
                    da:58:56:c1:6f:4e:6f:0f:c9:30:d4:37:c6:6d:21:
                    3e:8d:ca:07:36:c4:ab:43:60:67:31:ce:87:5b:92:
                    9d:ca:b6:ba:fe:2b:d4:8f:7e:45:f8:72:4f:9b:1c:
                    f0:12:87:ea:45:92:eb:54:3b:b8:65:08:f3:60:91:
                    80:22:76:0f:19:e4:0c:5d:29:35:c3:46:9d:0c:fb:
                    67:49:d3:ab:e1:cd:75:8b:ed:1f:3a:60:f1:36:08:
                    59:07:e1:ac:d8:94:ee:44:7e:32:91:d5:bf:c7:7b:
                    2f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E7:0C:FA:FC:70:49:24:3F:0B:7D:F3:DA:A6:FB:59:C3:07:9C:FA
            X509v3 Authority Key Identifier:
                keyid:D5:CF:5C:F8:B4:D8:0F:22:13:04:F3:65:88:E3:95:60:44:47:F7:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:36:e0:73:af:e7:cf:ef:78:89:ae:0c:fe:b9:a8:83:ec:fa:
         bf:44:a7:42:f0:03:14:ab:2d:d7:c4:ec:54:3c:88:57:0f:98:
         63:88:8f:aa:29:61:2a:7e:8b:94:9c:ce:9e:3c:a9:85:80:96:
         bb:4a:50:9d:b2:b7:d4:4c:83:eb:eb:c1:b4:34:42:69:29:04:
         03:8a:82:f3:59:2b:87:dc:ec:b3:18:0b:6f:59:c7:58:4b:0b:
         1a:e6:ef:5d:e6:c4:29:a2:98:6b:b8:7a:a2:6c:ee:b2:80:93:
         6f:e7:32:59:79:5a:29:11:5e:da:e8:91:de:8f:b9:0f:c3:81:
         ce:68:df:6a:9a:b9:ea:14:ef:41:bf:09:ce:54:a7:39:a2:9b:
         ef:ed:87:0d:3d:77:6c:f5:2d:70:1d:a9:cd:3d:e5:64:27:34:
         bf:24:6f:20:28:8b:c3:c0:18:22:b8:7b:be:f9:62:5d:6a:c5:
         76:4c:83:34:f8:79:14:a5:57:e1:47:40:85:06:dc:d9:4c:52:
         b8:04:10:f8:f8:05:10:6a:04:d6:e9:2e:3c:97:91:91:42:22:
         48:a2:c8:f4:92:af:55:2d:7f:70:13:cb:91:f4:c4:4d:6c:35:
         2a:ff:1c:e0:18:a2:1d:55:18:35:b9:b2:40:bd:1b:fb:34:22:
         1b:c2:f7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:42:29 2026 by rpki-client