Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft
File:                     mLI8urGE2rGtANEAC4IMmyGkM-w.mft (raw, json)
Hash identifier:          ihq65hfAciVxZEwFJlrYEyOL3PMwQFGpUeVw+cCESmM=
Subject key identifier:   75:ED:CE:86:CF:5D:88:A9:32:53:E4:72:BF:32:F2:05:F3:C1:36:59
Authority key identifier: 98:B2:3C:BA:B1:84:DA:B1:AD:00:D1:00:0B:82:0C:9B:21:A4:33:EC
Certificate issuer:       /CN=A9182FBC/serialNumber=98B23CBAB184DAB1AD00D1000B820C9B21A433EC
Certificate serial:       12BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft
Manifest number:          1298
Signing time:             Fri 02 Oct 2026 17:13:52 +0000
Manifest this update:     Fri 02 Oct 2026 17:13:51 +0000
Manifest next update:     Fri 09 Oct 2026 17:13:51 +0000
Files and hashes:         1: mLI8urGE2rGtANEAC4IMmyGkM-w.crl (hash: wlE9lxcb+UmQTkrsgG4RbC+EPzE54xcRPtFthaYV+dE=)
                          2: 37BC67B4B18711EC9F9FA058C4F9AE02.roa (hash: uw3x4cCrEOXVGSx9HLNoaCGi5i7d3mdJuRAyyNS0hCQ=)
                          3: 38F5C602B18711EC9F9FA058C4F9AE02.roa (hash: V0cr8aX14uWEEWz5HgA49PAr418Rwt7O1IgwtljgIiE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.crl
                          rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 17:13:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4797 (0x12bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182FBC, serialNumber=98B23CBAB184DAB1AD00D1000B820C9B21A433EC
        Validity
            Not Before: Oct  2 17:13:51 2026 GMT
            Not After : Oct  9 17:13:51 2026 GMT
        Subject: CN=6abfe650-64a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ef:5b:2f:eb:1b:f4:74:ac:7e:5e:0a:7c:7c:
                    81:13:f6:c0:3b:1b:24:fb:da:83:ee:e2:24:76:8d:
                    de:ec:68:18:c9:65:8a:3f:6c:62:85:e3:37:c6:82:
                    47:66:dc:d6:cb:c9:d9:4b:44:3a:b0:e7:64:a4:5e:
                    85:4a:ca:b0:43:c6:3b:40:31:1e:5e:ff:77:c8:7e:
                    37:05:19:a2:6d:45:10:62:6a:d1:20:18:74:9e:e1:
                    f2:6d:3a:65:ed:2f:e4:83:42:7d:78:b4:06:6b:79:
                    3d:6c:ea:34:c8:a8:e7:26:0b:5e:52:85:de:4d:e1:
                    2f:c7:54:1b:8a:6d:c2:9e:84:57:f6:a6:95:bd:cb:
                    ba:ce:e7:f2:7a:9f:3a:2b:50:6d:77:2e:a0:d9:51:
                    a1:16:56:3d:73:20:24:77:4c:a9:38:a2:66:af:d9:
                    ef:04:d7:b4:88:51:7e:3a:97:78:da:3c:c5:f1:be:
                    cd:89:67:b9:39:d6:a7:1f:b2:3c:ad:51:64:23:50:
                    d9:79:c9:5c:cd:ed:17:26:7a:8f:63:86:93:3f:fc:
                    49:b3:f4:ec:53:1a:63:8a:94:d2:ee:e2:f3:a2:cc:
                    75:2b:6b:08:b2:bc:bf:79:42:a7:9c:ac:73:45:9c:
                    70:53:df:06:79:61:7c:0e:0b:dd:90:f5:1f:f2:22:
                    ce:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:ED:CE:86:CF:5D:88:A9:32:53:E4:72:BF:32:F2:05:F3:C1:36:59
            X509v3 Authority Key Identifier:
                keyid:98:B2:3C:BA:B1:84:DA:B1:AD:00:D1:00:0B:82:0C:9B:21:A4:33:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:db:ae:d4:16:10:a1:fc:77:19:b3:ba:d8:ed:14:38:65:33:
         0e:e6:1a:17:22:b6:37:b6:be:12:4e:cd:42:fb:67:a9:55:59:
         b6:c7:f9:54:29:35:87:85:95:aa:0a:f8:5d:16:9a:7c:43:48:
         24:d5:4c:5e:e7:25:f4:70:f8:34:fe:a1:55:a6:5d:92:0b:d7:
         b8:24:a6:df:b8:2f:91:e2:06:2e:ca:47:6c:12:62:a7:7b:67:
         a8:02:0b:86:26:15:14:91:f5:c8:6a:f1:1a:26:6f:48:f8:f7:
         2a:9a:90:e2:18:a1:d8:7f:28:2c:9c:56:66:0e:82:a3:10:a6:
         29:e5:4e:86:5b:32:b5:c7:6a:06:8e:ba:b6:5e:ae:bc:34:c5:
         71:4d:9e:28:36:eb:8d:c3:a9:57:cd:1b:10:1f:49:34:00:c6:
         9c:a0:b9:59:5e:bb:09:46:c0:18:c7:08:29:a0:42:22:61:63:
         69:43:18:10:14:d4:ea:0a:fa:a0:db:bb:ec:06:56:0c:f0:59:
         0c:6e:f0:23:57:5d:64:a8:33:e7:24:42:a5:a8:83:64:61:88:
         c6:99:54:01:30:47:7d:d2:d0:28:74:44:e3:f1:08:50:8d:bc:
         12:cf:06:9c:8b:b3:91:3d:09:9f:90:81:ea:c6:49:cb:87:9e:
         5a:10:67:7c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODJGQkMxMTAvBgNVBAUTKDk4QjIzQ0JBQjE4NERBQjFBRDAwRDEwMDBCODIwQzlC
MjFBNDMzRUMwHhcNMjYxMDAyMTcxMzUxWhcNMjYxMDA5MTcxMzUxWjAYMRYwFAYD
VQQDEw02YWJmZTY1MC02NGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAte9bL+sb9HSsfl4KfHyBE/bAOxsk+9qD7uIkdo3e7GgYyWWKP2xiheM3xoJH
ZtzWy8nZS0Q6sOdkpF6FSsqwQ8Y7QDEeXv93yH43BRmibUUQYmrRIBh0nuHybTpl
7S/kg0J9eLQGa3k9bOo0yKjnJgteUoXeTeEvx1Qbim3CnoRX9qaVvcu6zufyep86
K1Btdy6g2VGhFlY9cyAkd0ypOKJmr9nvBNe0iFF+Opd42jzF8b7NiWe5OdanH7I8
rVFkI1DZeclcze0XJnqPY4aTP/xJs/TsUxpjipTS7uLzosx1K2sIsry/eUKnnKxz
RZxwU98GeWF8DgvdkPUf8iLObwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHXtzobP
XYipMlPkcr8y8gXzwTZZMB8GA1UdIwQYMBaAFJiyPLqxhNqxrQDRAAuCDJshpDPs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkZCQy9BMzM1QjI1OEZD
RTQxMUU4OTBGQzFFMzdDNEY5QUUwMi9tTEk4dXJHRTJyR3RBTkVBQzRJTW15R2tN
LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21MSTh1ckdFMnJHdEFORUFDNElNbXlHa00tdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MkZCQy9BMzM1QjI1OEZDRTQxMUU4OTBGQzFFMzdDNEY5QUUwMi9tTEk4dXJHRTJy
R3RBTkVBQzRJTW15R2tNLXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAd9uu1BYQofx3GbO62O0UOGUzDuYaFyK2N7a+Ek7NQvtnqVVZtsf5VCk1h4WV
qgr4XRaafENIJNVMXucl9HD4NP6hVaZdkgvXuCSm37gvkeIGLspHbBJip3tnqAIL
hiYVFJH1yGrxGiZvSPj3KpqQ4hih2H8oLJxWZg6CoxCmKeVOhlsytcdqBo66tl6u
vDTFcU2eKDbrjcOpV80bEB9JNADGnKC5WV67CUbAGMcIKaBCImFjaUMYEBTU6gr6
oNu77AZWDPBZDG7wI1ddZKgz5yRCpaiDZGGIxplUATBHfdLQKHRE4/EIUI28Es8G
nIuzkT0Jn5CB6sZJy4eeWhBnfA==
-----END CERTIFICATE-----
Generated at Sun Oct 4 05:36:56 2026 by rpki-client