Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
File:                     lFOfgqNeshWO18Ni1boVQz5-0uE.mft (raw, json)
Hash identifier:          XjpW6HLWBtiKy7zFUbfZLYxMO9bjzGS/cRI612+SK9s=
Subject key identifier:   41:C5:A9:F3:92:C0:24:71:8E:E6:F3:22:62:5E:CB:D1:EE:5F:97:F6
Authority key identifier: 94:53:9F:82:A3:5E:B2:15:8E:D7:C3:62:D5:BA:15:43:3E:7E:D2:E1
Certificate issuer:       /CN=A9179EAE/serialNumber=94539F82A35EB2158ED7C362D5BA15433E7ED2E1
Certificate serial:       017E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
Manifest number:          016B
Signing time:             Thu 03 Sep 2026 05:10:56 +0000
Manifest this update:     Thu 03 Sep 2026 05:10:56 +0000
Manifest next update:     Thu 10 Sep 2026 05:10:56 +0000
Files and hashes:         1: lFOfgqNeshWO18Ni1boVQz5-0uE.crl (hash: bUJMvqBFhYfFmbT/LoIJrVNXMuBG/MteYCBqRsgvATY=)
                          2: 5C8A37FEBB0D11F0B828E842C4F9AE02.roa (hash: 4QxgO/v1kKmqzX3Jt1zEm2uuH1Y0Ot5nAQyWZtBjGQc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.crl
                          rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 05:10:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 382 (0x17e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179EAE, serialNumber=94539F82A35EB2158ED7C362D5BA15433E7ED2E1
        Validity
            Not Before: Sep  3 05:10:56 2026 GMT
            Not After : Sep 10 05:10:56 2026 GMT
        Subject: CN=6a990160-24c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:98:cd:1e:ea:6c:41:5b:29:95:07:c2:d7:95:
                    31:cf:0e:4f:e3:f5:d6:1e:fb:5f:e3:e2:8b:93:59:
                    d8:e0:87:23:85:cf:a4:2d:c2:e0:f2:b8:21:85:5e:
                    df:0f:45:8d:01:8c:99:f4:e8:2f:53:ff:b5:3a:e3:
                    e6:38:6c:77:8b:33:b8:fb:63:cf:62:c2:a1:4d:45:
                    7f:82:8f:5d:5d:49:48:da:35:14:bf:75:72:f1:cc:
                    09:b6:0a:fa:54:df:1c:d3:66:86:d8:eb:53:86:c1:
                    95:49:33:e2:6e:e1:48:dc:df:d1:c4:5a:5a:e6:c1:
                    46:f3:64:28:21:6a:ae:02:50:58:ca:9f:dd:da:da:
                    ea:e2:16:a0:8d:ee:ea:14:d5:a9:14:3e:ff:5c:1b:
                    57:48:3c:46:b9:81:5e:c6:3a:1e:61:19:6a:5f:05:
                    35:30:28:eb:18:2f:99:fe:e2:5e:00:a9:d7:ac:91:
                    63:f1:72:39:de:1c:24:49:6a:15:47:ed:35:64:f1:
                    b7:b2:02:71:88:c8:6f:0f:a8:f7:29:2c:61:37:5c:
                    56:57:eb:95:a0:f0:ee:53:da:de:9a:12:32:51:00:
                    b4:16:7d:c1:b5:cd:68:8b:0b:bf:2e:cf:33:e7:23:
                    dd:b7:87:30:fe:8d:d9:5a:15:4e:c5:1f:4a:7b:af:
                    5a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C5:A9:F3:92:C0:24:71:8E:E6:F3:22:62:5E:CB:D1:EE:5F:97:F6
            X509v3 Authority Key Identifier:
                keyid:94:53:9F:82:A3:5E:B2:15:8E:D7:C3:62:D5:BA:15:43:3E:7E:D2:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:1b:4f:a6:5b:5d:c9:a4:80:6b:86:3c:13:ed:06:2a:b6:b2:
         ce:fb:50:5f:16:43:8b:72:56:fc:83:ea:46:9a:78:6c:b7:90:
         71:b7:d5:1c:28:58:09:cf:f0:7f:8c:0d:08:f3:32:99:e5:0d:
         68:bf:ed:3b:b7:30:df:c5:b4:44:ed:b5:38:44:17:f3:6b:35:
         b1:21:2c:38:ef:10:b8:72:2b:e4:1d:f6:7a:7d:1b:22:1c:55:
         7c:eb:d0:53:15:c9:73:05:0d:f9:bb:87:34:f2:1e:76:6a:59:
         47:2e:16:4d:39:cc:88:a7:ab:a9:07:79:8a:ac:4f:a9:b7:1a:
         3a:58:ce:98:f5:fd:12:0a:23:40:df:08:10:fc:c4:88:56:de:
         cd:99:ca:ab:3a:dd:f7:a3:f3:ad:8b:3b:5d:bf:fa:d5:b4:89:
         26:90:db:0e:29:2b:d5:35:fd:67:3d:0a:fe:04:b3:8a:a5:08:
         e0:f0:a7:1e:4a:79:b2:ab:f2:9b:d0:12:c3:26:45:fb:bd:d5:
         2c:bf:ef:d8:d4:98:4d:84:5b:e3:b9:0a:c0:2f:87:bf:80:0e:
         14:2f:5a:bc:df:8f:6e:0b:09:d8:ac:5b:48:6c:c3:93:c3:60:
         a1:17:ec:36:84:3c:9c:31:ef:c7:c3:9a:0e:22:69:1f:48:3c:
         19:74:78:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:43:45 2026 by rpki-client