Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft
File:                     LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft (raw, json)
Hash identifier:          UpLNqv0FIbqpCMimRABlrUfVpeKilqmXoq8/0sMVkUM=
Subject key identifier:   27:DD:D3:B5:D3:DB:94:76:F3:5F:3B:9B:71:21:91:7B:9A:31:8F:36
Authority key identifier: 2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C
Certificate issuer:       /CN=A9191436/serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C
Certificate serial:       1469
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft
Manifest number:          1406
Signing time:             Sat 24 Oct 2026 16:55:18 +0000
Manifest this update:     Sat 24 Oct 2026 16:55:17 +0000
Manifest next update:     Sat 31 Oct 2026 16:55:17 +0000
Files and hashes:         1: LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl (hash: GTGhXeFz+QUFiWrPJfQDyBUkGOGtz7f3q0DgzYtKdXE=)
                          2: 0396C48E5E7011EDAD328E21C4F9AE02.roa (hash: aTV22OI3x/KmbZ4Fy6hctkdp9RgbYkty6oOiMs7TFtg=)
                          3: 4AC75BA8FFE311EBB4FA4965C4F9AE02.roa (hash: 05PBvHrHn0TV/TJUExv/7KjPqOuh3SnxpdMl5QOkyqE=)
                          4: ED7D926622C511EE8579CC72C4F9AE02.roa (hash: h6nFBPT46PWIJvwvBtgNlWqgwNbUJ4z0xCkNAkUmRsc=)
                          5: 7302617AC78E11E8BC20B719C4F9AE02.roa (hash: 4Sc+2IuX3kzbWh0w5ventCVh8DbXIYrYeyp1H3lSCBE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl
                          rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 16:55:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5225 (0x1469)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191436, serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C
        Validity
            Not Before: Oct 24 16:55:17 2026 GMT
            Not After : Oct 31 16:55:17 2026 GMT
        Subject: CN=6adce2f5-c4a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ee:df:29:c2:7d:2d:b4:e6:3c:bc:06:56:9e:
                    43:51:09:94:4a:56:e4:8c:30:d9:34:74:1f:75:0b:
                    24:71:4e:bd:00:e1:1c:b9:e1:f7:fe:62:39:b4:ac:
                    9f:6a:51:c1:fa:b2:4b:2e:0a:07:2f:02:42:4a:19:
                    c3:57:82:db:ab:41:11:f0:c3:eb:38:4d:98:b6:da:
                    46:bc:f6:31:fb:dc:a8:86:1d:5f:f5:82:4f:22:d0:
                    55:ef:f4:f5:2c:f4:65:9d:0d:76:62:c0:fa:fe:40:
                    cf:42:ba:ba:7c:d7:9e:e4:4f:fb:61:67:4a:e9:da:
                    84:5f:27:68:9a:7f:95:25:03:45:e9:ce:6c:2e:75:
                    9f:27:c6:2f:9e:ab:98:8b:2d:d7:93:fc:fe:af:5c:
                    ab:df:89:76:f5:a2:df:2c:18:71:ad:9e:7c:b0:1b:
                    d8:29:67:65:bf:46:e2:eb:85:f7:1d:b7:48:50:51:
                    20:ce:4e:a8:33:ec:08:3b:6e:be:c2:ac:5e:9d:d3:
                    52:2a:bc:72:19:de:37:8b:af:8f:ce:bd:83:8d:e7:
                    96:5c:38:49:87:3c:1f:8a:e7:4f:7e:34:0e:d3:5b:
                    a5:67:7f:e4:63:a3:ff:01:f7:76:70:93:49:d4:79:
                    d6:08:d6:2e:0d:88:a4:7a:4e:65:ed:51:8f:73:5d:
                    97:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:DD:D3:B5:D3:DB:94:76:F3:5F:3B:9B:71:21:91:7B:9A:31:8F:36
            X509v3 Authority Key Identifier:
                keyid:2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:89:73:08:f1:55:e9:06:8a:fd:bc:73:9c:24:f4:e4:17:38:
         71:9a:d9:d9:3b:fd:d8:73:b0:06:af:f7:42:bf:28:24:a0:d2:
         5c:55:77:45:fd:45:27:e9:13:b1:c4:04:ac:a9:b3:c9:1a:75:
         16:3e:87:6f:b3:57:94:e1:82:2d:24:44:b4:46:54:cd:df:82:
         82:12:5e:01:0b:f2:ba:43:a7:a4:d1:e4:e1:fa:20:e1:fa:42:
         cf:d4:ac:a2:b6:8e:70:99:77:49:8d:56:a5:76:27:05:c5:9c:
         8f:21:d8:03:8e:ce:d5:8f:f5:03:6d:3c:78:77:06:6f:76:33:
         da:49:1b:ef:d3:c4:71:0c:0b:c6:5d:35:e2:f6:c5:e9:65:f8:
         9f:db:13:aa:3e:41:36:f1:54:0f:5e:68:e3:3b:db:a3:82:f0:
         bc:48:23:ae:8a:30:83:d5:70:6f:ad:bc:5a:61:71:76:a1:c6:
         f6:5b:7c:4c:de:f9:c7:82:98:14:17:9e:c0:80:88:cc:a3:a4:
         96:e1:de:be:d5:3e:29:c3:86:41:0e:fa:18:43:7f:3d:b8:c8:
         9e:a1:c7:a8:f8:71:5d:2d:21:fc:f9:29:db:3d:7b:d3:3a:72:
         aa:7d:11:f9:d4:6d:14:99:29:3c:8e:01:fc:c7:3f:44:13:c3:
         2e:92:a7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 15:53:10 2026 by rpki-client