Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9183B58/C1A8F5F8780911F1A1C8C27D58A30FBC/LpFcOykbTBhp166WMYTR_Ql4e24.mft
File:                     LpFcOykbTBhp166WMYTR_Ql4e24.mft (raw, json)
Hash identifier:          EXl0sXuBTZGJr5vmXw2z9DMp0fXeD5ROpMmWgJzgJZI=
Subject key identifier:   71:54:A5:03:E5:ED:3B:3B:F6:BA:30:14:56:0A:46:F6:16:6A:DB:B9
Authority key identifier: 2E:91:5C:3B:29:1B:4C:18:69:D7:AE:96:31:84:D1:FD:09:78:7B:6E
Certificate issuer:       /CN=A9183B58/serialNumber=2E915C3B291B4C1869D7AE963184D1FD09787B6E
Certificate serial:       1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpFcOykbTBhp166WMYTR_Ql4e24.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183B58/C1A8F5F8780911F1A1C8C27D58A30FBC/LpFcOykbTBhp166WMYTR_Ql4e24.mft
Manifest number:          1C
Signing time:             Tue 25 Aug 2026 08:49:37 +0000
Manifest this update:     Tue 25 Aug 2026 08:49:36 +0000
Manifest next update:     Tue 01 Sep 2026 08:49:36 +0000
Files and hashes:         1: LpFcOykbTBhp166WMYTR_Ql4e24.crl (hash: D9yhZDFvjJq4ZyzcaJRPdJFK64b2HF6XGmd4jJdWNco=)
                          2: E75BE0F0780C11F19D39A95459A30FBC.roa (hash: mfPn/tiTCBYiMY19wKcdtVlq4pxeYPFcwC935dAmnus=)
                          3: 020E45829D3D11F19D7318D34C11F970.roa (hash: T2o2RjpRBuD7XUu6j46OuNeevFzXzJVxJcaULjksQrc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183B58/C1A8F5F8780911F1A1C8C27D58A30FBC/LpFcOykbTBhp166WMYTR_Ql4e24.crl
                          rsync://rpki.apnic.net/member_repository/A9183B58/C1A8F5F8780911F1A1C8C27D58A30FBC/LpFcOykbTBhp166WMYTR_Ql4e24.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpFcOykbTBhp166WMYTR_Ql4e24.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Sep 2026 08:49:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183B58, serialNumber=2E915C3B291B4C1869D7AE963184D1FD09787B6E
        Validity
            Not Before: Aug 25 08:49:36 2026 GMT
            Not After : Sep  1 08:49:36 2026 GMT
        Subject: CN=6a8d5721-f1a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:50:47:7d:ca:46:1b:79:36:05:c3:14:66:a6:
                    d4:2c:d2:72:6b:b4:84:a7:09:7e:27:c2:e2:69:65:
                    05:26:ee:ee:22:41:36:05:c6:9f:76:8d:74:d2:bb:
                    52:1e:7b:0a:9c:5d:23:92:17:34:de:08:71:a6:f0:
                    e2:36:4b:67:d7:8f:ca:2e:e6:0a:35:30:ea:97:d8:
                    3f:3b:cc:70:2d:8c:55:7e:c5:d7:c9:65:2f:d0:71:
                    ec:bb:96:0f:d3:a3:6f:55:cd:62:ea:23:5d:21:9a:
                    8c:32:a7:4a:f1:d6:5d:ed:f0:b5:1b:6f:63:1a:df:
                    cf:34:13:33:19:2a:8c:38:79:fc:d8:8b:0a:96:18:
                    1b:5c:eb:b4:7b:96:60:47:f9:fe:51:af:b8:b7:7b:
                    13:bc:0c:0d:f6:59:0a:17:fa:cf:95:bc:65:df:fc:
                    e6:c9:d8:7e:42:14:2d:96:1b:61:58:62:14:3e:e3:
                    62:34:6c:67:6d:09:b9:74:7c:70:25:0b:c7:07:48:
                    c6:38:5c:83:79:97:7f:74:0a:44:33:e2:b1:c6:1e:
                    ef:c5:b3:ed:d4:52:c3:00:3e:bc:ee:ab:ae:1a:fc:
                    24:09:f6:20:67:4b:38:a6:1d:2a:4a:b1:e6:08:0f:
                    91:23:25:1c:0e:53:8e:02:18:80:9b:68:55:4d:30:
                    99:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:54:A5:03:E5:ED:3B:3B:F6:BA:30:14:56:0A:46:F6:16:6A:DB:B9
            X509v3 Authority Key Identifier:
                keyid:2E:91:5C:3B:29:1B:4C:18:69:D7:AE:96:31:84:D1:FD:09:78:7B:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183B58/C1A8F5F8780911F1A1C8C27D58A30FBC/LpFcOykbTBhp166WMYTR_Ql4e24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpFcOykbTBhp166WMYTR_Ql4e24.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B58/C1A8F5F8780911F1A1C8C27D58A30FBC/LpFcOykbTBhp166WMYTR_Ql4e24.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:7a:4b:7a:d1:ea:16:ba:08:46:45:03:ac:a6:04:e5:22:d6:
         fa:8f:20:96:b3:df:a9:57:78:53:65:c1:0d:6d:ef:d3:e9:22:
         0c:fb:6d:10:df:cb:ca:fe:56:f3:8a:ca:ac:76:66:04:e2:42:
         d5:d0:a3:75:5a:f0:9f:08:61:36:9a:5d:56:9d:5f:2a:32:6f:
         c5:62:58:d4:5c:fb:a6:2f:9b:cd:cc:96:20:8f:6a:99:a5:62:
         29:82:8a:72:8d:b5:08:82:4e:5c:b6:3b:09:8d:03:e2:fc:77:
         ae:6e:31:bd:93:8a:bd:a8:17:50:c0:22:ff:d5:0c:e7:96:2d:
         59:80:fc:e2:2c:56:b5:b0:78:cc:9c:56:f5:2a:cf:c8:b3:8b:
         5d:b4:c6:b0:c4:e3:85:66:fc:ee:c6:3c:de:70:92:b7:52:68:
         45:75:d8:8d:9e:8b:c4:0b:fd:02:90:42:39:61:63:9e:33:e4:
         01:cb:e0:77:3f:99:7a:e1:bf:83:8b:b9:91:2f:1e:a4:ec:cc:
         d8:3f:66:38:eb:2f:53:b2:05:eb:b1:e2:9b:f8:80:89:4f:e8:
         40:22:aa:d1:08:a4:6d:4c:5e:83:85:66:86:83:63:96:72:be:
         b0:dc:9a:4d:41:7d:22:7e:2c:76:b8:dd:0c:49:4d:cf:82:02:
         df:48:ec:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 08:53:09 2026 by rpki-client