Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
File:                     lWVe5y4XegIJbAy2BnaqHmaa5-A.mft (raw, json)
Hash identifier:          a0PbTDL9TJi5sEMpB97lLnfE7j0LhDx5gCcDOTHb3IU=
Subject key identifier:   48:B7:FF:27:54:EB:15:F3:2D:35:FF:94:8F:7E:13:43:EC:72:36:1D
Authority key identifier: 95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0
Certificate issuer:       /CN=A9127898/serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
Certificate serial:       0266
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
Manifest number:          0875
Signing time:             Sun 20 Sep 2026 22:39:12 +0000
Manifest this update:     Sun 20 Sep 2026 22:39:11 +0000
Manifest next update:     Sun 27 Sep 2026 22:39:11 +0000
Files and hashes:         1: lWVe5y4XegIJbAy2BnaqHmaa5-A.crl (hash: 2jaoqXPjOwvMCSYJY/iWuRcgjlgkNpB3/1kQX6AQyUg=)
                          2: BFD5DDF0D95311EF9B045445C4F9AE02.roa (hash: ZZTRP8ZYh6abdb/gEV6kUhHlPU73mYT2fjwS4t3Y8Vw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl
                          rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 22:39:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 614 (0x266)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127898, serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
        Validity
            Not Before: Sep 20 22:39:11 2026 GMT
            Not After : Sep 27 22:39:11 2026 GMT
        Subject: CN=6ab0608f-cf10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:dd:3f:ae:43:94:60:6d:6f:1f:45:15:69:68:
                    8c:c4:22:d9:5d:d3:1d:9d:08:13:69:62:c9:bd:6a:
                    3d:b4:84:86:e2:e9:67:9b:e3:24:56:24:73:5d:7f:
                    fd:bd:77:9c:c4:52:97:57:c9:cf:35:13:15:a8:ca:
                    73:e1:bc:e5:3c:fe:35:2c:19:a7:ea:50:9c:ba:cb:
                    96:cd:62:b9:79:fc:25:9f:cb:46:7c:2e:02:d4:08:
                    47:7d:af:81:7d:1b:32:e1:e1:64:5c:30:7b:16:ce:
                    12:c3:f3:72:1a:dd:5e:b5:00:03:fa:a2:6c:f1:35:
                    92:fb:44:a7:15:d2:ac:ca:3f:20:22:b8:a3:f3:5f:
                    f5:98:64:75:1d:e9:9c:64:5f:d9:39:05:4e:ee:02:
                    d4:e0:0b:0f:b6:c1:c2:d4:f4:97:64:44:d0:ee:45:
                    e3:76:81:11:82:42:53:73:74:eb:e8:64:b4:ee:fd:
                    95:16:98:6b:b9:a7:1c:73:60:07:de:85:f0:51:29:
                    a6:f4:e6:c0:ca:da:9a:cf:18:c0:e8:84:61:e3:76:
                    ee:bf:e1:33:16:48:61:82:04:68:22:fd:fd:ab:5e:
                    1b:98:22:05:7e:28:f5:eb:39:ab:e3:fe:e5:45:38:
                    f4:f2:8c:4d:f2:70:8f:6d:5c:bf:da:a1:f2:9b:ee:
                    fc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B7:FF:27:54:EB:15:F3:2D:35:FF:94:8F:7E:13:43:EC:72:36:1D
            X509v3 Authority Key Identifier:
                keyid:95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:04:84:77:4e:c0:25:cf:60:e0:c6:39:26:c8:98:4f:cd:9b:
         1b:76:19:a8:04:fd:bc:38:c6:78:a2:40:7a:87:c6:9b:00:ce:
         3b:11:77:5f:f6:dd:67:7a:7f:be:52:a7:44:4d:c0:c3:37:50:
         e8:ad:35:ba:8d:b3:aa:f5:80:e3:35:7a:79:4b:15:8c:dd:05:
         9c:ed:85:02:4a:63:7c:95:78:f2:d7:d5:06:d9:38:a5:2b:85:
         b5:e3:c1:8a:9b:6c:2a:15:f8:31:4e:58:f4:37:f0:58:b6:6d:
         8d:85:b0:3a:bc:4b:de:a7:f3:50:21:c6:8f:58:4e:d7:2c:df:
         d1:40:2e:66:fe:7b:62:53:09:9b:45:64:7e:a8:70:e1:c8:42:
         7f:ff:80:2b:66:fa:e9:59:67:bf:02:40:06:90:d5:a2:4b:f7:
         1e:41:43:fb:f9:90:d4:72:f2:18:45:13:81:1c:cb:73:4d:05:
         b1:0f:02:d3:74:7d:d0:e9:ba:a6:63:50:0d:b6:e5:68:32:e5:
         43:0e:1f:e3:84:b4:5a:2a:6b:f8:62:12:07:cd:42:e7:71:aa:
         0e:e5:14:a7:15:d5:de:65:d7:07:6c:14:e0:9a:f8:ec:20:3c:
         80:55:97:4a:42:0b:21:c3:b9:d2:16:c5:59:11:11:f3:f8:03:
         e2:17:81:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:01:19 2026 by rpki-client