Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft
File:                     LByXEgCqxo6oRewP3YfsjFAS8pw.mft (raw, json)
Hash identifier:          8MkLx/7C5i7VEotKURAcLIeP94P+Zgvf4DjBQN4hJRw=
Subject key identifier:   D4:90:F5:71:0F:92:D4:0C:28:B4:DE:FD:4F:CD:2F:8B:28:92:C7:A5
Authority key identifier: 2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C
Certificate issuer:       /CN=A9175290/serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C
Certificate serial:       0C50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft
Manifest number:          0C33
Signing time:             Tue 06 Oct 2026 18:56:29 +0000
Manifest this update:     Tue 06 Oct 2026 18:56:28 +0000
Manifest next update:     Tue 13 Oct 2026 18:56:28 +0000
Files and hashes:         1: LByXEgCqxo6oRewP3YfsjFAS8pw.crl (hash: f57RVGyagmx9t33pdx3GqTCPFcwUBuPJTBjseOdzNFk=)
                          2: 2C23C084A05511F1924EFF964111F970.roa (hash: +UnNrlvqk9fdI23k97EfwWpG/vnHy/lU/5HBsL5TEvQ=)
                          3: 24CEDDAAA05511F1ABADFA964111F970.roa (hash: U8ctAF3B6RY5gFom10YS1YLwzsbLU1R1fY8eYV+NVhQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl
                          rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 18:56:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3152 (0xc50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175290, serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C
        Validity
            Not Before: Oct  6 18:56:28 2026 GMT
            Not After : Oct 13 18:56:28 2026 GMT
        Subject: CN=6ac5445d-e65b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9e:da:e2:e7:3d:c7:50:ba:28:5f:8e:e7:d7:
                    41:8d:c5:e1:48:ca:c8:af:08:51:df:24:ae:6d:0f:
                    8e:3c:65:e8:08:ad:4f:3b:2f:4b:1b:9e:80:ce:40:
                    d6:9d:89:94:c7:ff:ca:28:d5:6e:e6:56:4d:02:64:
                    7b:3f:59:b0:4b:8c:4e:e5:df:5a:ec:99:03:6d:d9:
                    6f:85:f3:bd:94:64:d9:9f:a4:e6:8b:1d:a2:2e:e1:
                    09:ff:ec:7d:39:23:a9:33:49:73:70:70:8d:79:1a:
                    5b:c0:4d:93:5b:1a:d4:79:0d:23:c3:b5:ba:5e:f7:
                    d4:57:21:8e:0b:e8:f5:73:1e:0a:e2:e1:3e:30:2d:
                    f3:fc:fc:80:95:3c:3c:1a:98:e5:be:a2:ec:d6:da:
                    9d:f4:9a:6f:37:ec:ba:e9:56:b0:ec:f5:e7:47:b8:
                    46:3a:9b:54:eb:23:50:cf:20:8e:fc:81:33:02:5c:
                    2a:8d:03:ee:1f:c0:48:12:a9:71:7c:92:2a:26:fc:
                    6a:e3:c6:37:43:49:47:c1:3a:a6:2c:cb:ea:e3:0b:
                    db:f3:d9:ba:16:6e:40:74:1c:a7:01:1d:48:d7:43:
                    6d:4c:96:57:2e:b9:2a:f4:b1:f9:cc:20:69:7e:94:
                    db:cd:ee:11:3d:18:04:41:a2:aa:29:4f:b3:1e:d4:
                    8e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:90:F5:71:0F:92:D4:0C:28:B4:DE:FD:4F:CD:2F:8B:28:92:C7:A5
            X509v3 Authority Key Identifier:
                keyid:2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:76:63:24:c9:c7:a2:f9:c0:e2:b2:a3:2b:11:62:af:2b:23:
         f0:7a:6e:2c:43:01:e6:0f:de:4e:f5:1f:21:7d:3e:71:1c:bb:
         50:17:cd:5a:42:2f:68:f6:a7:39:c5:ed:8e:f9:9d:68:04:97:
         5a:ff:7f:aa:b9:a4:ff:6d:3f:33:8c:f6:4b:c4:21:64:84:c9:
         a0:aa:c9:1d:1e:a7:ea:d5:6f:81:db:73:1d:68:0d:2e:25:db:
         b9:d2:5a:de:45:50:d0:f9:a0:65:10:40:a5:81:20:47:92:fb:
         28:b9:e1:1e:19:1c:52:29:24:10:b0:98:1d:51:cc:c2:19:4d:
         3e:72:9c:f4:f6:9a:57:9f:3d:8f:5d:4f:a7:80:8d:55:1f:cb:
         75:31:38:17:e9:1f:b7:f0:85:24:d6:76:8c:68:88:30:f0:68:
         52:c4:b7:ae:94:6a:e1:60:bd:06:3d:ad:91:38:18:af:d2:9e:
         2b:44:c8:61:13:69:4f:5b:29:69:18:20:55:92:9c:f3:1c:10:
         50:9a:56:1d:34:0c:dd:f9:28:08:10:49:c6:0e:55:1d:35:c1:
         3e:25:9b:a1:15:b8:e1:3c:76:8b:96:64:72:23:1a:90:2e:2b:
         35:54:d9:45:70:a7:d4:65:85:2b:0c:92:01:8c:35:f9:23:bf:
         6c:4f:2c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 01:06:55 2026 by rpki-client