Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft
File:                     LXsNej-fFd4AcqWmxO0KX48iHgM.mft (raw, json)
Hash identifier:          racHjOtQ5n56xTDEnDbAkRKeor8wpDIAYm7zQBgG8bs=
Subject key identifier:   1E:C6:BA:1A:7A:4B:D3:C7:6E:19:8D:09:3C:85:BD:DD:D6:E0:52:9E
Authority key identifier: 2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03
Certificate issuer:       /CN=A917EC46/serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03
Certificate serial:       0A9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft
Manifest number:          0A95
Signing time:             Thu 08 Oct 2026 19:40:00 +0000
Manifest this update:     Thu 08 Oct 2026 19:39:59 +0000
Manifest next update:     Thu 15 Oct 2026 19:39:59 +0000
Files and hashes:         1: LXsNej-fFd4AcqWmxO0KX48iHgM.crl (hash: XsAWlK+wxMuE4qbAPkuDJquagHAnhDFTQszDrsYdatE=)
                          2: 73BD59AE8A8C11EA8CB4F53CC4F9AE02.roa (hash: cj0uIogezd0yWwaHnlYBF13kTbwkCk4qf3kI26mN/jI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl
                          rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 19:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2717 (0xa9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917EC46, serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03
        Validity
            Not Before: Oct  8 19:39:59 2026 GMT
            Not After : Oct 15 19:39:59 2026 GMT
        Subject: CN=6ac7f18f-d1b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:4a:50:72:33:23:fe:10:e7:e4:a3:de:bd:63:
                    32:14:7b:ad:43:3c:8b:4b:0a:b7:07:3d:9d:33:67:
                    1a:1b:87:99:3e:94:77:32:18:21:71:c4:31:7f:7d:
                    6b:13:60:88:dd:bd:e1:b0:ef:08:fd:ca:8e:07:da:
                    1d:ea:ea:cc:e8:55:40:48:d1:03:a7:ee:39:ce:63:
                    59:d3:db:55:f9:57:ec:c3:85:81:ae:16:ee:4a:8b:
                    62:9a:0e:cf:ab:ea:79:b0:24:b1:46:5c:d7:7c:60:
                    73:32:32:50:c8:e6:16:e0:86:cb:21:c7:d5:c6:9d:
                    0a:79:31:27:ff:1d:d6:5f:0d:6e:96:cf:83:2e:e7:
                    07:23:93:9a:4d:25:30:ab:97:46:b6:ba:c6:3a:9e:
                    b4:88:ee:91:5e:26:e9:82:38:17:6f:3d:78:1b:0b:
                    41:83:a2:e5:4f:da:70:4a:f5:8c:e5:f8:79:f4:01:
                    ef:44:de:72:ac:54:e1:f6:fa:7f:21:77:84:91:00:
                    5e:a8:cd:25:1d:a4:c4:c1:94:55:3a:cf:f9:41:f6:
                    41:87:f9:74:9e:07:cd:a4:87:38:9d:64:06:89:aa:
                    4f:47:92:52:70:a9:58:be:dc:23:96:c9:af:01:74:
                    fb:57:d6:37:fa:f7:fa:bf:bf:b9:58:ba:d4:66:c9:
                    4f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C6:BA:1A:7A:4B:D3:C7:6E:19:8D:09:3C:85:BD:DD:D6:E0:52:9E
            X509v3 Authority Key Identifier:
                keyid:2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:af:9d:39:5a:de:03:f8:a6:dd:92:84:c9:f3:1f:d0:fd:42:
         20:04:9d:cd:18:3e:92:0d:37:99:dd:42:4a:78:a6:d2:ff:26:
         b1:e7:77:5a:95:d3:ef:82:1a:14:35:ec:d6:aa:6b:86:bd:86:
         45:48:b9:90:70:35:b7:37:c4:f7:6d:e6:7d:18:86:3e:c6:4c:
         d5:39:ee:0f:42:16:93:24:48:79:ff:96:51:22:cf:8c:23:f2:
         27:69:c8:8d:82:40:d6:ac:f1:af:48:e1:81:bb:dd:16:5d:57:
         88:f1:db:eb:b8:25:59:1c:97:38:29:fe:24:1f:d7:e0:59:a0:
         0b:99:78:57:60:e9:71:97:27:b2:00:1b:b1:1d:cc:09:e4:3a:
         e0:7b:2b:e7:c9:b2:9a:a2:28:72:76:5d:84:47:bb:28:16:a6:
         d3:74:d1:84:96:d1:49:98:52:e4:84:ee:a7:b9:30:ef:84:0a:
         19:4b:28:f7:8b:ab:1f:f7:a7:9a:97:74:02:ad:ae:64:69:6a:
         bc:49:d5:fe:85:d6:12:f4:29:02:64:a0:55:22:bb:a6:4a:d4:
         b3:01:d6:f3:35:fd:87:d9:8d:46:d2:96:c3:e6:4b:9f:db:cc:
         61:c4:01:a7:04:3e:6c:b2:95:22:25:65:2e:d8:63:34:ed:21:
         c5:65:fb:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 11:59:34 2026 by rpki-client