Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft
File:                     l1LdGhX17GHZdpHLXszr7L06YTc.mft (raw, json)
Hash identifier:          k3syIzNxKbHgTLfmHwsyNz48OPTN5+3HlTI6NEe6d0Y=
Subject key identifier:   9F:31:20:7A:E4:EE:59:45:72:64:21:51:4E:4A:FD:9B:4B:3E:7F:4B
Authority key identifier: 97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37
Certificate issuer:       /CN=A9126259/serialNumber=9752DD1A15F5EC61D97691CB5ECCEBECBD3A6137
Certificate serial:       0885
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft
Manifest number:          0879
Signing time:             Tue 22 Sep 2026 20:38:39 +0000
Manifest this update:     Tue 22 Sep 2026 20:38:39 +0000
Manifest next update:     Tue 29 Sep 2026 20:38:39 +0000
Files and hashes:         1: l1LdGhX17GHZdpHLXszr7L06YTc.crl (hash: TjVV/WuI0coDYzAIJvpwDtVFWTtlywmSnThHLP2M+Ds=)
                          2: 4E1F212A15C711EB8720DC71C4F9AE02.roa (hash: yum8wC57OlDbLTsoFYFFmg3G0eHaYFBCQhxgQarxJdE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl
                          rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 20:38:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2181 (0x885)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126259, serialNumber=9752DD1A15F5EC61D97691CB5ECCEBECBD3A6137
        Validity
            Not Before: Sep 22 20:38:39 2026 GMT
            Not After : Sep 29 20:38:39 2026 GMT
        Subject: CN=6ab2e74f-1a31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:26:8c:d9:42:62:ad:63:d9:53:50:15:18:55:
                    a8:73:b8:cd:cc:52:fe:e7:37:61:a3:a1:57:35:60:
                    6a:57:ab:da:b6:82:b0:13:0d:00:19:a3:d0:e7:f6:
                    cf:1d:b2:34:6d:69:0e:af:7a:be:59:c1:b1:dc:5c:
                    0a:b5:71:87:22:ac:8c:99:71:8f:90:03:0c:3d:ad:
                    6f:4a:79:1a:e3:c7:46:93:c7:4d:6a:a6:7f:8b:79:
                    b7:5d:62:4a:29:6d:1a:50:2b:1d:a5:98:64:10:6e:
                    e8:52:3b:ca:ad:8c:92:5d:ce:6f:10:c7:5e:9f:69:
                    1f:53:b2:eb:01:90:06:97:ce:25:19:4b:cc:0d:af:
                    9b:18:42:21:d1:d4:f6:db:e6:6b:15:fc:fe:06:5b:
                    52:a2:83:28:d6:90:f2:99:f3:1e:22:26:37:94:82:
                    c4:f2:93:e3:e6:bc:8a:e7:9f:dc:aa:1b:3a:25:04:
                    c4:85:10:74:5b:42:43:3c:d7:98:74:23:27:18:46:
                    07:20:fe:60:4a:12:b3:8b:03:9b:c2:e9:57:cb:84:
                    9d:71:2b:f4:b9:3a:cd:1c:e3:da:f9:0c:cb:27:64:
                    5e:12:de:be:92:1a:25:84:68:43:62:a5:9a:06:55:
                    b8:24:c3:c8:bc:98:03:08:ee:7e:48:4f:ba:fa:e5:
                    ec:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:31:20:7A:E4:EE:59:45:72:64:21:51:4E:4A:FD:9B:4B:3E:7F:4B
            X509v3 Authority Key Identifier:
                keyid:97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:06:b1:90:40:82:2e:03:49:c8:18:aa:a4:f7:38:2b:e2:ac:
         88:9e:7e:30:c9:b4:3b:76:18:4e:ca:26:c5:19:a7:e5:d6:f2:
         87:51:f3:d4:da:b7:86:82:5b:27:ea:50:51:90:2b:22:2a:84:
         ee:9b:4c:f6:d5:68:21:fc:41:5e:3d:b5:21:c0:e0:e2:07:6b:
         21:2b:c5:21:a3:a8:a8:78:85:ec:79:d9:05:de:3d:a5:be:61:
         e5:b6:de:8a:18:76:b4:87:cc:4a:48:c5:75:c4:c6:76:f2:8f:
         c7:14:f5:1a:2d:f0:f5:49:32:7d:02:79:7f:7b:81:72:7d:c1:
         c9:95:c5:b6:31:4d:05:a6:7e:25:c7:e4:76:8b:67:80:7d:cb:
         9c:55:d7:65:1e:9f:b3:fd:2e:66:2b:bd:1a:82:db:cd:47:81:
         74:d9:04:94:8c:a2:0b:57:e2:9c:9e:09:93:8d:42:b9:0e:35:
         11:d0:e4:d0:fc:9c:ba:17:49:83:73:68:93:78:72:d6:08:b4:
         90:48:de:4e:a8:1a:54:29:8c:dc:87:d7:02:25:c2:9d:29:59:
         c4:0a:32:f7:45:6e:4c:8d:e6:a6:79:ba:f8:37:74:35:ca:53:
         54:86:40:00:73:84:53:ae:bb:3d:e0:c9:66:2b:6c:24:f6:e4:
         e0:92:d8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:05:35 2026 by rpki-client