Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
File:                     0LR5KL_bnbNR4dQlatArZyj5XPU.mft (raw, json)
Hash identifier:          upyfbyjYIb6xNgKkp7VMUcOV99vHPnHdcVLPNKKU1/E=
Subject key identifier:   78:13:F1:C8:2C:7D:46:8E:FF:AC:CA:E8:EE:A5:81:D8:CB:67:FF:F2
Authority key identifier: D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5
Certificate issuer:       /CN=A9174306/serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5
Certificate serial:       0207
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
Manifest number:          01FD
Signing time:             Tue 01 Sep 2026 03:19:45 +0000
Manifest this update:     Tue 01 Sep 2026 03:19:44 +0000
Manifest next update:     Tue 08 Sep 2026 03:19:44 +0000
Files and hashes:         1: 0LR5KL_bnbNR4dQlatArZyj5XPU.crl (hash: NR6FsKGFJUBYMZPoi13EyoAwBVrZXJkr3nHol/zUYuU=)
                          2: BF9A82FE1C3D11F188759CE93A3D8C67.roa (hash: ZuwsvyCFnlRH97lSSpze4by6vXPNWBp8bBdjxC9A6Vs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl
                          rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Sep 2026 02:54:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 519 (0x207)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174306, serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5
        Validity
            Not Before: Sep  1 03:19:44 2026 GMT
            Not After : Sep  8 03:19:44 2026 GMT
        Subject: CN=6a964451-919f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1e:81:52:3f:71:1c:86:a3:f6:b6:21:ff:6c:
                    a1:b3:55:d5:3c:fd:2b:b4:8b:f0:1b:d3:0d:56:3c:
                    f0:ba:14:00:03:69:6f:e2:f7:de:60:11:6e:bd:47:
                    51:43:24:48:ba:1e:d5:6f:5c:8e:f2:6c:17:f9:be:
                    e5:7a:5e:b4:2a:37:a0:f7:df:d6:87:a8:2e:c4:7c:
                    02:db:5b:db:c4:b0:f5:47:a4:08:1e:59:0b:20:13:
                    25:1c:b0:ca:dd:e1:1f:81:7d:3e:ea:d4:2b:2f:50:
                    72:99:d7:28:88:62:d8:91:0e:e9:ed:fe:7b:9f:62:
                    47:83:f1:8b:60:9b:58:07:82:b6:1a:ff:f0:71:2a:
                    7e:47:8a:db:ac:c0:d3:96:18:6c:50:e3:01:12:8f:
                    72:08:68:0c:bd:90:99:fa:f4:6c:8c:9c:28:fb:ab:
                    51:a9:15:3a:d9:62:a6:de:ea:f3:31:5b:7b:50:58:
                    23:16:3e:29:77:ac:7b:44:a3:fc:fe:5a:e9:65:14:
                    9c:39:4e:14:73:6d:6a:8d:4c:b0:21:df:ef:c4:57:
                    59:c0:30:d2:08:14:94:5f:ee:1b:91:97:f6:2d:44:
                    4d:2b:e8:86:e8:d1:b9:50:b0:f0:9a:7f:66:da:81:
                    e2:00:d7:c2:8d:89:e2:51:ce:e3:65:02:3d:e9:cb:
                    32:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:13:F1:C8:2C:7D:46:8E:FF:AC:CA:E8:EE:A5:81:D8:CB:67:FF:F2
            X509v3 Authority Key Identifier:
                keyid:D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:8d:8e:d8:aa:0b:42:d2:71:e1:9f:53:b7:c5:65:fc:5b:8a:
         96:8a:66:52:f0:5c:5b:2f:41:27:a8:2f:13:5b:5b:89:27:13:
         d8:14:c2:e6:e6:fa:c6:15:c0:cb:e8:07:23:71:e7:e6:29:61:
         a0:23:f3:07:64:25:90:3a:13:0b:25:0a:37:ae:95:09:76:46:
         67:04:c0:2a:d5:ee:7d:a1:2b:6a:e4:0d:fb:49:b9:4e:b9:26:
         d0:0d:57:b3:fc:39:90:b3:33:87:f9:55:d1:da:ac:b0:3b:66:
         61:e2:9b:bc:31:48:0e:f3:5e:8d:61:2b:78:01:4d:af:67:3d:
         7a:09:a2:21:ca:15:c4:5a:1d:94:d2:74:2f:47:ea:db:02:53:
         5a:4c:2d:e5:bc:81:87:4b:04:69:71:d8:d6:5a:a9:2e:51:e8:
         67:ba:d1:22:fd:94:87:60:3d:ab:01:3b:32:02:ef:81:c5:13:
         39:0f:ba:87:9f:f0:a5:1b:e4:2d:a5:a6:e0:dd:f6:50:d4:eb:
         dd:e7:39:3e:45:5d:56:42:31:60:de:ea:3b:a4:5e:26:8d:a4:
         fc:7b:ce:6d:90:d2:8e:6c:6c:7a:55:71:9e:b0:af:0b:7a:dd:
         53:20:16:29:7f:84:a5:92:2b:12:c3:f7:8a:dd:ba:77:9b:dc:
         73:0d:5b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:04:39 2026 by rpki-client