Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
File:                     lFOfgqNeshWO18Ni1boVQz5-0uE.mft (raw, json)
Hash identifier:          WuVWlvACghlKYuiCzgwLXS+mjnvbXYHJzsGxDEo4LUw=
Subject key identifier:   BB:34:F5:97:BB:B1:AD:F8:C0:EF:B4:86:D1:0F:E5:88:3C:CD:0A:0D
Authority key identifier: 94:53:9F:82:A3:5E:B2:15:8E:D7:C3:62:D5:BA:15:43:3E:7E:D2:E1
Certificate issuer:       /CN=A9179EAE/serialNumber=94539F82A35EB2158ED7C362D5BA15433E7ED2E1
Certificate serial:       0198
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
Manifest number:          0185
Signing time:             Sun 25 Oct 2026 05:07:36 +0000
Manifest this update:     Sun 25 Oct 2026 05:07:36 +0000
Manifest next update:     Sun 01 Nov 2026 05:07:36 +0000
Files and hashes:         1: lFOfgqNeshWO18Ni1boVQz5-0uE.crl (hash: W2KAdrtazZmF7Tplv7TWwVyuGHEqpxqeGUtDQlqsrlk=)
                          2: 5C8A37FEBB0D11F0B828E842C4F9AE02.roa (hash: 4QxgO/v1kKmqzX3Jt1zEm2uuH1Y0Ot5nAQyWZtBjGQc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.crl
                          rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408 (0x198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179EAE, serialNumber=94539F82A35EB2158ED7C362D5BA15433E7ED2E1
        Validity
            Not Before: Oct 25 05:07:36 2026 GMT
            Not After : Nov  1 05:07:36 2026 GMT
        Subject: CN=6add8e98-8594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:70:87:aa:86:6a:da:64:d5:ee:f5:30:f1:71:
                    eb:e8:41:fd:14:b2:e5:4d:3f:f0:c2:b0:7c:c8:d5:
                    6c:fd:20:90:7a:01:fe:a1:27:34:e5:cf:5d:9c:86:
                    eb:93:db:a5:c6:2a:26:72:b6:32:a9:72:04:d0:a5:
                    1a:9b:dd:48:bb:f4:71:fc:85:90:61:ff:05:b0:f2:
                    e9:4c:ec:be:ef:c8:f2:b5:60:16:d4:ba:99:8d:32:
                    20:3e:2d:e6:06:50:f3:80:13:d5:00:75:2c:05:f9:
                    10:b4:88:c5:26:7b:1f:25:94:9b:43:e1:42:8e:73:
                    9d:bd:48:e6:f3:26:54:41:3f:9e:75:36:95:d7:39:
                    8b:7a:37:ae:85:3f:3b:4d:46:0e:e4:6a:58:fd:c7:
                    81:b1:32:c1:e9:86:e3:1e:f1:2d:93:97:b1:29:c0:
                    34:b0:ab:26:5b:02:59:2d:e1:5b:ad:39:51:06:f1:
                    3e:8a:8a:0f:a3:72:14:b5:79:55:e5:2f:8d:c9:1c:
                    7a:f9:fa:03:d0:85:ab:0c:4f:91:e2:ec:85:3d:40:
                    c5:31:12:bd:ec:4b:11:4c:11:27:d7:8e:b7:3c:82:
                    b3:e9:c5:4f:f4:6f:e0:6c:48:55:d7:c9:92:89:1f:
                    46:21:29:2a:db:44:9c:7b:17:17:c5:eb:89:43:b2:
                    ca:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:34:F5:97:BB:B1:AD:F8:C0:EF:B4:86:D1:0F:E5:88:3C:CD:0A:0D
            X509v3 Authority Key Identifier:
                keyid:94:53:9F:82:A3:5E:B2:15:8E:D7:C3:62:D5:BA:15:43:3E:7E:D2:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:1f:3b:78:94:19:34:05:0c:30:6f:66:4c:6e:37:93:03:08:
         f7:bf:74:7d:a7:77:de:c3:c5:0a:0a:1a:d7:75:9c:d7:f0:bd:
         51:cf:89:84:ab:f0:ee:41:23:9b:4f:67:ef:03:af:a9:36:76:
         a7:07:7c:ec:05:9b:f3:b8:98:12:a7:be:72:29:fe:69:e9:49:
         d7:7d:e3:cc:b0:86:59:76:43:f3:15:98:06:bc:45:11:7a:29:
         1a:d2:99:39:a1:a1:5f:49:1e:6c:d7:51:66:b4:45:fa:e7:83:
         4b:37:01:38:9b:26:b1:4a:bb:c7:cb:11:15:7e:0d:56:e0:d7:
         b1:d4:58:9c:c8:3a:6c:1b:bd:17:c6:cd:dc:87:4a:4f:e1:76:
         9e:b8:ad:bf:a5:8f:1a:59:18:56:ec:b5:a0:49:05:7f:80:51:
         7e:da:46:a6:5f:e4:71:9a:d1:e6:c6:e9:76:64:a7:87:57:2a:
         54:f1:e2:5c:8a:48:81:0a:b5:34:2f:17:b3:54:6f:b4:37:ba:
         d9:d8:9f:45:de:02:9a:cb:37:f5:d1:b4:f6:03:d7:36:24:4a:
         38:b2:89:fb:1b:63:51:df:48:2a:02:98:42:1a:59:a8:30:3e:
         db:ce:72:e3:b7:90:23:ed:a5:fc:d3:7d:75:50:f5:0b:1a:4f:
         3a:ba:ab:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 09:39:56 2026 by rpki-client