Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft
File:                     lsYqB50ufY56mV0g9CKdgmk5jmk.mft (raw, json)
Hash identifier:          3UaoKTPx/Ck5XnDolzvSejsF98Mx3s5rnWmAiLvLpJs=
Subject key identifier:   A9:5B:EA:07:F2:0E:8F:84:A3:25:79:A9:CA:AD:9F:45:43:6B:0D:75
Authority key identifier: 96:C6:2A:07:9D:2E:7D:8E:7A:99:5D:20:F4:22:9D:82:69:39:8E:69
Certificate issuer:       /CN=A9186F69/serialNumber=96C62A079D2E7D8E7A995D20F4229D8269398E69
Certificate serial:       01CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft
Manifest number:          01C7
Signing time:             Wed 07 Oct 2026 04:17:42 +0000
Manifest this update:     Wed 07 Oct 2026 04:17:41 +0000
Manifest next update:     Wed 14 Oct 2026 04:17:41 +0000
Files and hashes:         1: lsYqB50ufY56mV0g9CKdgmk5jmk.crl (hash: 6FXa0XzVm3OZkENz/OfYz+e/i5RLBv8atUxRHmVI3Mw=)
                          2: B5C7CDFC112911EFBDE1BF3BC4F9AE02.roa (hash: mcFF4MHBs44WNsH/vlZHse4ZiDHWvj8b3sI3TUaGzkQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.crl
                          rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 04:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 462 (0x1ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186F69, serialNumber=96C62A079D2E7D8E7A995D20F4229D8269398E69
        Validity
            Not Before: Oct  7 04:17:41 2026 GMT
            Not After : Oct 14 04:17:41 2026 GMT
        Subject: CN=6ac5c7e5-f0f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9f:f1:74:05:38:a1:72:2a:d2:11:45:8d:7e:
                    f6:5f:57:5d:d3:16:e8:99:f0:60:d0:e2:20:1e:fe:
                    c3:99:09:9d:ce:b3:13:74:7d:86:31:75:a2:e7:aa:
                    9a:51:9e:ab:14:7d:c8:36:5d:b0:b6:4a:5d:1d:7d:
                    2a:98:3a:66:8d:95:e5:bc:bb:f9:b4:ac:7c:80:fe:
                    d5:a3:4a:53:66:5e:79:a5:be:a0:e2:67:f6:08:5b:
                    67:3c:43:30:6d:c1:26:c9:a3:b8:93:41:6b:37:36:
                    b1:19:80:ea:71:67:24:66:62:fd:e0:1d:63:c6:04:
                    af:c1:90:e7:ac:f7:b6:75:e1:c3:b2:e5:f2:9c:53:
                    0e:2d:d4:44:1b:f0:0b:5d:df:a4:b6:5b:ca:2f:73:
                    3f:ac:e7:4b:af:cd:64:c6:55:ef:7c:4f:99:2b:35:
                    fd:8a:1c:13:41:33:d7:29:30:37:04:5e:86:55:4c:
                    29:b7:9f:50:75:fc:e8:0d:2c:00:13:6c:7b:83:db:
                    84:4c:68:6a:38:6f:cc:8b:33:67:ec:24:ac:f7:1a:
                    f9:11:a2:7f:72:83:ed:f0:2d:fd:20:1c:ec:cc:48:
                    ce:a2:13:47:6f:ca:bc:84:1a:a2:e4:6d:c6:63:eb:
                    f5:ce:60:83:d8:f8:3e:91:cc:76:fb:b1:5c:72:ee:
                    f3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:5B:EA:07:F2:0E:8F:84:A3:25:79:A9:CA:AD:9F:45:43:6B:0D:75
            X509v3 Authority Key Identifier:
                keyid:96:C6:2A:07:9D:2E:7D:8E:7A:99:5D:20:F4:22:9D:82:69:39:8E:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:89:bb:f4:60:dc:f0:03:d8:d6:3e:01:62:18:c8:5e:f9:f0:
         25:d0:2f:12:13:97:1e:51:5c:bc:ef:1d:29:da:81:84:75:99:
         b8:da:e6:f6:61:20:0c:c4:eb:c9:6b:5c:20:1f:cc:b9:42:ef:
         01:05:f2:4a:fe:29:54:a4:57:62:2f:cc:40:53:e4:7f:2f:02:
         0a:75:62:3e:1a:34:fc:b4:de:5b:57:da:53:0e:f5:12:97:4a:
         af:a7:3f:c4:f2:9a:68:08:50:66:7f:59:a7:6f:a5:c0:98:82:
         cf:12:86:9e:99:02:34:45:12:51:e3:2e:82:fc:fd:68:4d:d4:
         93:d2:fb:d9:f7:72:67:47:a0:29:51:0b:50:e8:47:3b:71:34:
         21:5e:8d:96:3d:4b:14:ec:b9:ed:d9:cd:19:e1:16:9a:89:ce:
         d3:92:91:cc:5e:0f:81:33:23:e3:15:2f:77:7e:29:a3:61:c6:
         59:e2:3a:b0:69:90:ca:fe:c0:87:99:4e:0f:c9:e9:12:c9:98:
         ab:d0:51:46:f8:7d:c4:de:d5:4e:2a:78:97:b2:22:93:ff:95:
         f2:2f:90:bd:47:fe:60:f4:4d:62:f2:35:24:ba:60:a0:6c:07:
         91:6c:7f:96:7c:f5:6e:8b:7f:cd:8a:05:7a:55:c7:1b:c9:e2:
         56:76:de:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:21:59 2026 by rpki-client