Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft
File:                     1c9c-LTYDyITBPNliOOVYERH93o.mft (raw, json)
Hash identifier:          d6mBqg6d+pkSPA7/qkrQwCLj4DKvyfcnRshdGguCK90=
Subject key identifier:   D5:24:AB:08:CD:9C:AA:47:37:31:9C:01:4C:ED:43:12:21:95:78:C1
Authority key identifier: D5:CF:5C:F8:B4:D8:0F:22:13:04:F3:65:88:E3:95:60:44:47:F7:7A
Certificate issuer:       /CN=A914A5BB/serialNumber=D5CF5CF8B4D80F221304F36588E395604447F77A
Certificate serial:       02E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft
Manifest number:          02DA
Signing time:             Thu 03 Sep 2026 01:11:34 +0000
Manifest this update:     Thu 03 Sep 2026 01:11:33 +0000
Manifest next update:     Thu 10 Sep 2026 01:11:33 +0000
Files and hashes:         1: 1c9c-LTYDyITBPNliOOVYERH93o.crl (hash: pQrZrRfyfvaFcRMIgNknZ+meh4DLlVkHXSVays6bYIE=)
                          2: A83E51EC45F611EDBA9D6062C4F9AE02.roa (hash: SogM+aLq7TtnKTXVbg7l5lBGj90QzbOdIzdMdOy5LlU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.crl
                          rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 01:11:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 737 (0x2e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A5BB, serialNumber=D5CF5CF8B4D80F221304F36588E395604447F77A
        Validity
            Not Before: Sep  3 01:11:33 2026 GMT
            Not After : Sep 10 01:11:33 2026 GMT
        Subject: CN=6a98c946-c92a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bd:cb:71:57:52:7d:e1:80:f7:ce:c4:61:68:
                    40:5a:1f:6c:88:0d:81:fb:ee:04:9d:80:cc:a3:e7:
                    85:de:84:d6:ef:60:a1:b1:b4:2f:bc:86:b3:f9:50:
                    aa:e4:ae:b9:b5:11:ae:84:05:3e:d3:ff:a3:5a:e7:
                    e4:02:eb:e5:3e:90:cd:7e:81:37:ca:09:a2:74:0c:
                    34:8e:b7:b1:61:a2:29:e7:d5:76:35:f1:f6:27:0d:
                    34:d1:92:c6:77:84:e5:b4:2b:af:4e:a6:9c:1c:ec:
                    08:20:e1:32:30:8b:3b:ea:14:8f:16:c3:1c:94:55:
                    98:45:f8:8e:b2:5f:a5:3a:b6:a6:6a:6e:64:07:b2:
                    b1:6c:66:e8:4a:83:e3:7b:c2:60:87:99:41:4e:75:
                    30:c6:2d:53:6d:c0:26:1e:cd:fe:63:1a:e9:ee:76:
                    64:70:05:d6:82:2c:7e:53:83:b0:97:fb:a6:45:a9:
                    eb:4c:13:09:2b:77:7e:55:bd:98:3b:d8:36:51:5e:
                    c5:bd:de:df:bd:2a:ef:5c:99:4d:35:ff:21:5d:fe:
                    71:c5:97:76:da:d9:db:61:83:2c:c1:0c:96:35:68:
                    6b:93:12:71:3d:48:4c:81:d3:e2:b2:82:8f:b9:8c:
                    cb:2e:1c:96:89:8c:94:e6:f1:1d:18:a3:f2:91:6d:
                    19:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:24:AB:08:CD:9C:AA:47:37:31:9C:01:4C:ED:43:12:21:95:78:C1
            X509v3 Authority Key Identifier:
                keyid:D5:CF:5C:F8:B4:D8:0F:22:13:04:F3:65:88:E3:95:60:44:47:F7:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:4d:60:6e:5e:16:ea:be:70:d6:bb:43:73:47:e6:ad:c5:f5:
         e2:51:f1:11:17:af:f3:cc:a5:a8:5f:ca:28:e8:c9:92:b2:f0:
         52:ae:f4:dc:4e:95:98:6a:2a:1a:fa:96:43:91:dc:ef:5d:11:
         44:62:bd:d6:83:db:3b:c1:4a:18:f7:1b:73:8a:92:a7:3f:b8:
         8b:69:21:af:0d:44:51:43:03:c2:37:96:03:e2:f1:09:48:e4:
         e9:26:20:b8:3d:7e:a6:02:cd:c7:31:ec:fa:27:a1:b3:6b:18:
         90:8f:68:26:69:c4:cc:78:32:d5:95:10:24:a3:fc:57:4e:69:
         61:76:86:d4:74:24:ec:29:1c:09:99:2f:a8:ee:a1:77:11:f5:
         33:2f:f8:6a:c4:3d:77:13:b7:45:00:08:62:47:fa:8d:77:c1:
         1f:02:fa:b3:d1:87:5b:f0:2d:7e:82:e7:49:93:7d:42:8c:45:
         c4:9c:da:ab:33:e6:ad:39:0c:52:b5:45:38:6d:df:7a:e0:74:
         a7:b3:87:cd:1f:e6:b6:4c:62:df:c6:59:ef:d7:c5:47:b7:16:
         ce:40:0d:65:ea:b5:cb:3a:64:af:38:90:6e:c2:bc:d4:5f:a0:
         3f:03:98:74:83:c0:66:2a:3e:74:77:d3:f6:ff:1c:0a:65:8e:
         38:e3:c3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:27:06 2026 by rpki-client