Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
File:                     0LR5KL_bnbNR4dQlatArZyj5XPU.mft (raw, json)
Hash identifier:          wQBb7VzHLXbApv8DFhu7qdMOmR/XYQuVg93qovQU5kA=
Subject key identifier:   65:EC:5F:C6:EC:8E:0D:85:78:E5:15:7C:AE:69:2F:AA:96:92:B1:C0
Authority key identifier: D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5
Certificate issuer:       /CN=A9174306/serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5
Certificate serial:       021E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
Manifest number:          0214
Signing time:             Sat 17 Oct 2026 03:36:42 +0000
Manifest this update:     Sat 17 Oct 2026 03:36:41 +0000
Manifest next update:     Sat 24 Oct 2026 03:36:41 +0000
Files and hashes:         1: 0LR5KL_bnbNR4dQlatArZyj5XPU.crl (hash: cb4sl9Ym1OHFYjOhhDIvYEECXSjI17o7LrdssNI3ixw=)
                          2: BF9A82FE1C3D11F188759CE93A3D8C67.roa (hash: ZuwsvyCFnlRH97lSSpze4by6vXPNWBp8bBdjxC9A6Vs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl
                          rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Oct 2026 03:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 542 (0x21e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174306, serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5
        Validity
            Not Before: Oct 17 03:36:41 2026 GMT
            Not After : Oct 24 03:36:41 2026 GMT
        Subject: CN=6ad2ed49-8435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c0:10:79:03:1a:d4:59:f8:38:e9:ee:ac:a5:
                    3c:35:ba:98:35:80:d2:34:49:b7:69:05:be:33:0d:
                    0b:a6:70:6a:c7:57:d8:0d:8b:55:63:73:0d:28:2e:
                    26:91:fc:65:bf:d6:2d:37:fe:ae:cd:d1:09:a8:6d:
                    16:96:a4:4f:5c:b4:af:6a:68:34:38:28:0d:d5:c3:
                    c4:b8:39:c0:3d:86:c9:b0:5a:d8:ed:1f:47:96:1b:
                    22:2c:72:df:dc:1c:7e:4a:4e:ce:72:ad:cf:87:72:
                    5b:a8:d6:8b:0c:b7:8f:d0:1f:59:21:65:b3:42:00:
                    1a:a5:c7:bf:d7:e7:35:2f:af:1f:ba:56:68:8a:c1:
                    1e:1d:f0:11:9e:f0:b0:8f:9f:8a:c8:ae:9d:a1:cb:
                    e0:63:e8:b7:39:bd:ce:58:8b:18:6c:f1:04:1a:3d:
                    b3:24:e3:55:38:f7:cd:e5:a0:76:ea:f3:3c:52:3a:
                    c0:4f:6b:a7:16:7c:41:3e:56:ea:99:c0:89:de:63:
                    55:1b:62:47:e4:a2:ec:b5:c6:02:8f:d1:01:29:45:
                    a3:30:b3:24:a5:74:e3:f7:87:61:68:3f:4f:d5:e9:
                    15:d2:01:91:86:19:b3:72:75:95:b7:62:9a:4e:a1:
                    a7:a1:72:7d:d0:9c:73:da:9f:10:e2:4a:1b:a5:a0:
                    9a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:EC:5F:C6:EC:8E:0D:85:78:E5:15:7C:AE:69:2F:AA:96:92:B1:C0
            X509v3 Authority Key Identifier:
                keyid:D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:d0:9f:c1:f4:b9:5e:ca:f7:04:06:e5:98:05:85:3b:b5:b6:
         84:01:db:a4:80:7f:8b:60:aa:32:94:29:14:96:14:5e:67:7a:
         97:43:33:58:da:01:75:bc:ae:6f:2f:f0:fe:14:b8:ec:e0:d7:
         76:29:ec:04:1f:50:1b:85:3f:13:56:58:66:cb:36:c7:da:2c:
         1e:50:99:ed:ec:ad:e8:1a:b4:cf:2f:81:d5:ce:0b:90:64:ab:
         58:b0:59:76:bc:b0:90:88:11:cb:d6:e2:26:4e:b6:5f:72:7d:
         83:d1:95:92:5b:3b:18:bc:90:63:7f:f6:88:c4:93:6c:7f:f6:
         c3:67:0d:30:c8:0a:27:bc:f4:79:bf:c1:ac:ee:87:35:b9:d2:
         3b:90:2b:1d:86:3f:c4:b3:fa:05:41:e7:e6:18:64:96:97:46:
         60:72:4b:59:23:95:00:a2:28:1f:96:d1:19:34:ca:6f:ed:8a:
         7d:a9:09:48:e6:c3:00:2e:10:5c:81:fd:15:8b:59:2d:2c:91:
         bb:20:42:8a:d4:7a:48:ff:6e:16:0e:fc:c0:11:b2:73:b0:b5:
         6c:0d:a7:6c:37:3d:b5:f9:9f:d7:62:c9:bd:01:c8:39:fe:79:
         35:57:4c:bc:0a:32:d7:8c:2c:e3:e3:e0:74:30:2e:ef:f8:d5:
         bc:ec:44:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 04:10:21 2026 by rpki-client