Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft
File:                     lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft (raw, json)
Hash identifier:          bgGBiOUBd6MrFGmOkpiJNPi5q2JaoVoYfGyJPOyCG6w=
Subject key identifier:   D1:5B:31:85:92:65:81:DA:F8:16:73:BB:60:98:C9:9C:6D:09:2C:F8
Authority key identifier: 95:22:83:38:A8:5F:24:82:30:31:2C:F3:98:B2:4F:81:19:D8:23:2F
Certificate issuer:       /CN=A917282D/serialNumber=95228338A85F248230312CF398B24F8119D8232F
Certificate serial:       01E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft
Manifest number:          01D8
Signing time:             Sun 11 Oct 2026 04:12:49 +0000
Manifest this update:     Sun 11 Oct 2026 04:12:49 +0000
Manifest next update:     Sun 18 Oct 2026 04:12:49 +0000
Files and hashes:         1: lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl (hash: Sg+Kj4UycxDKUOU5QnONe9h7C7rPEipS2EEZX2FPLQ4=)
                          2: 1DC7647CF8D811EEBBE6CE09C4F9AE02.roa (hash: NjKx3lBEyKkNGoJaupNKZrXKHeRj+2wuPTX2DUxYmu8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl
                          rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 04:12:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 482 (0x1e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917282D, serialNumber=95228338A85F248230312CF398B24F8119D8232F
        Validity
            Not Before: Oct 11 04:12:49 2026 GMT
            Not After : Oct 18 04:12:49 2026 GMT
        Subject: CN=6acb0cc1-2a29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:44:5b:13:0c:c8:7c:23:e1:cf:1a:3e:59:d4:
                    00:58:f3:51:33:45:dc:66:06:92:3d:ee:a7:a9:17:
                    83:75:29:d6:9d:03:65:8c:2f:e3:04:0d:1c:09:05:
                    4d:98:14:a1:c3:98:47:4d:f8:54:e1:6f:3c:95:1d:
                    c5:8f:8c:d8:c3:d2:cd:bd:09:38:66:ec:fd:46:ab:
                    e3:08:a5:89:e2:f5:77:9f:3b:28:34:4e:ba:6b:ed:
                    61:4d:6e:28:83:d2:87:e1:77:1a:80:bb:06:44:cf:
                    4d:a3:1f:61:7d:58:a8:40:8c:c9:e0:78:78:a6:af:
                    fd:e6:ad:ad:06:79:47:16:73:62:82:14:f0:b0:8f:
                    78:28:a2:1e:36:b2:d8:a3:e5:03:7c:f8:49:18:88:
                    42:df:02:37:39:fd:a7:3b:13:79:09:89:fb:bd:d9:
                    59:66:68:15:6f:b4:ca:cc:0b:13:15:16:f8:4f:9b:
                    7e:c4:f1:d1:5d:90:d3:db:69:88:d2:f5:3c:18:41:
                    f3:23:91:f1:b6:7b:22:8a:6d:4f:57:a3:61:43:7d:
                    ef:37:85:7a:e6:d0:b4:a7:7e:62:c2:08:44:a0:65:
                    79:1d:83:43:81:70:ff:ae:64:dc:21:15:91:e7:6f:
                    42:9a:1d:54:64:41:54:d8:1a:b6:ac:2f:44:46:cd:
                    8b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:5B:31:85:92:65:81:DA:F8:16:73:BB:60:98:C9:9C:6D:09:2C:F8
            X509v3 Authority Key Identifier:
                keyid:95:22:83:38:A8:5F:24:82:30:31:2C:F3:98:B2:4F:81:19:D8:23:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:7a:19:2b:b4:09:8b:56:fd:5c:dc:c0:ae:5f:6f:ec:33:f2:
         5f:89:fc:fb:b4:76:d2:2b:02:47:ed:e6:eb:a4:9d:b5:fd:02:
         fe:d1:e4:e7:7d:65:c1:ea:65:90:53:96:a1:36:f6:43:1c:b3:
         53:24:04:06:79:ca:8f:fd:47:ad:5c:4d:81:ab:3c:0a:2e:c1:
         43:53:e5:a5:0b:50:72:23:dd:1a:fe:d7:5b:97:20:6e:30:f1:
         84:67:d3:33:5a:30:83:0d:f0:98:fd:90:e8:84:a9:e3:c4:84:
         5c:2c:ef:ef:20:ed:88:12:32:09:43:80:9d:3d:74:62:0f:26:
         a3:55:74:b7:49:f0:3d:36:26:28:f1:1d:4a:f5:f4:53:34:a9:
         7f:99:e7:b9:97:bb:44:65:36:54:b7:df:44:01:ac:d5:29:9c:
         e2:23:4f:58:e6:0d:d1:b7:9d:42:23:5d:27:cc:e2:61:04:20:
         12:20:2d:23:75:37:41:05:59:1e:f9:9e:da:86:b2:55:10:9c:
         e2:18:3c:12:ed:35:a5:90:a1:62:89:aa:86:5c:90:18:40:2c:
         a0:12:25:ef:6e:a9:79:39:da:91:07:85:4f:d0:63:0a:db:15:
         69:1f:a4:59:3f:c6:9b:19:22:15:c7:56:ec:c6:5f:26:5b:0b:
         40:9f:2d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:15:20 2026 by rpki-client