Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft
File:                     LE66ORmVzLAcUT5PjmHtkUKW5sE.mft (raw, json)
Hash identifier:          hSLMzlqVDIH/U9fvHbKIi+ckwnJuooEkK0X+NqNQL0A=
Subject key identifier:   F4:EC:26:59:74:5F:DD:46:BD:9A:28:5A:7B:C1:F1:CB:5D:9C:75:05
Authority key identifier: 2C:4E:BA:39:19:95:CC:B0:1C:51:3E:4F:8E:61:ED:91:42:96:E6:C1
Certificate issuer:       /CN=A9129209/serialNumber=2C4EBA391995CCB01C513E4F8E61ED914296E6C1
Certificate serial:       0261
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft
Manifest number:          025B
Signing time:             Mon 21 Sep 2026 02:15:57 +0000
Manifest this update:     Mon 21 Sep 2026 02:15:57 +0000
Manifest next update:     Mon 28 Sep 2026 02:15:57 +0000
Files and hashes:         1: LE66ORmVzLAcUT5PjmHtkUKW5sE.crl (hash: HMCIPr2p/G0ld1qo99uZaO5h9LJejQk/EETQ6x8aghI=)
                          2: 7CBC92D21C7811EEA8F76D7FC4F9AE02.roa (hash: 3n/gOl41dGfCJb55lZ2KYu72EfPcwMUIMD9hW1bv1H4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.crl
                          rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 02:15:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 609 (0x261)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129209, serialNumber=2C4EBA391995CCB01C513E4F8E61ED914296E6C1
        Validity
            Not Before: Sep 21 02:15:57 2026 GMT
            Not After : Sep 28 02:15:57 2026 GMT
        Subject: CN=6ab0935d-cd7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7a:41:42:cf:e3:78:4e:d5:11:7e:f1:28:2e:
                    e3:8d:17:9a:75:41:3a:39:33:88:1d:3b:30:0c:fa:
                    6a:79:a9:e0:f7:bf:28:09:2c:4a:46:ce:ee:36:3d:
                    42:28:16:f6:60:48:4f:3d:7d:fb:16:51:87:ba:ee:
                    19:9f:2f:c0:10:a1:ef:57:d5:6c:46:c1:b7:cd:0e:
                    9b:6c:58:6d:cd:de:70:86:95:61:b0:03:f9:85:40:
                    97:46:53:49:9b:f7:a2:8c:67:a9:67:e6:cb:75:65:
                    7d:0f:50:ae:b3:46:f3:0f:6a:a4:0a:b5:58:5d:f0:
                    d2:73:2b:50:1a:42:01:0d:52:72:f6:9e:73:a2:32:
                    99:b6:45:e9:f9:6c:de:b0:07:30:62:a5:2d:49:11:
                    7d:35:de:25:96:55:13:d7:d4:0a:f4:8a:35:00:0d:
                    b4:6a:60:57:96:56:a4:59:8c:58:ab:c5:54:f7:fa:
                    c7:cc:a8:af:0f:8c:be:0f:1d:32:35:39:54:0e:f6:
                    af:3e:30:e6:39:50:23:6a:17:a0:10:b4:da:9f:a0:
                    36:d6:56:31:74:80:34:6c:8c:03:5b:02:24:ea:75:
                    f0:cb:aa:20:67:d5:5a:44:a0:82:af:0e:f1:ec:be:
                    8c:4d:64:71:33:16:22:8b:12:2b:17:5f:e1:1e:5a:
                    3f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:EC:26:59:74:5F:DD:46:BD:9A:28:5A:7B:C1:F1:CB:5D:9C:75:05
            X509v3 Authority Key Identifier:
                keyid:2C:4E:BA:39:19:95:CC:B0:1C:51:3E:4F:8E:61:ED:91:42:96:E6:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:15:5b:d3:9d:d9:eb:46:f5:2b:b6:52:ff:f0:0b:86:39:c9:
         95:fd:c9:80:b6:26:af:af:4f:18:0c:e3:91:6b:b1:a4:74:8b:
         fc:d4:b4:ae:be:00:04:64:f4:6e:b6:94:3e:2a:6d:26:e9:0f:
         c5:c8:44:2f:43:2e:c6:64:a2:95:44:97:d7:c2:03:ff:7f:3e:
         75:9c:1c:0d:42:ac:a3:c2:6c:0c:5b:c3:78:ba:75:da:ee:1c:
         03:06:3f:a0:06:76:56:bd:68:50:c4:6f:4d:3b:82:6b:33:af:
         e8:4b:0b:5e:2e:fb:2b:dd:ef:0a:11:1b:53:6a:de:c0:e9:b6:
         ed:24:f8:4c:72:a9:e7:d2:99:4a:57:4f:58:1d:1a:5f:63:37:
         b6:26:58:b0:80:a1:89:e0:75:fa:af:1a:71:0b:bf:55:82:58:
         ed:0d:18:67:cb:cc:08:9e:c7:bd:cd:4d:ec:f4:95:6e:39:81:
         b2:38:6d:a0:8d:d6:73:a7:53:37:a6:1f:1d:33:66:a2:46:f0:
         37:f6:09:11:8c:13:42:7c:40:e1:bb:51:c9:ba:74:4e:1a:46:
         d1:8a:7b:bf:dc:af:2b:c4:05:68:fe:95:45:37:49:c7:7b:73:
         a4:c6:81:b1:53:2a:31:95:15:a2:0b:d3:87:47:c2:30:f2:87:
         7b:d3:3d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:35:16 2026 by rpki-client