Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.mft
File:                     LToKI8WbTfbb4BpMXzt8i___cA0.mft (raw, json)
Hash identifier:          OgOn+ONZ3Q+sMXizyvUL4agm5ci3cCkOUr9PCEGh5XI=
Subject key identifier:   44:D1:16:73:6E:EF:95:0D:49:22:3C:2D:2F:6F:CD:1B:32:7D:C0:80
Authority key identifier: 2D:3A:0A:23:C5:9B:4D:F6:DB:E0:1A:4C:5F:3B:7C:8B:FF:FF:70:0D
Certificate issuer:       /CN=A912D0BC/serialNumber=2D3A0A23C59B4DF6DBE01A4C5F3B7C8BFFFF700D
Certificate serial:       0314
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LToKI8WbTfbb4BpMXzt8i___cA0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.mft
Manifest number:          030D
Signing time:             Mon 21 Sep 2026 00:55:41 +0000
Manifest this update:     Mon 21 Sep 2026 00:55:40 +0000
Manifest next update:     Mon 28 Sep 2026 00:55:40 +0000
Files and hashes:         1: LToKI8WbTfbb4BpMXzt8i___cA0.crl (hash: tKQV7rOHTTaweTDPCGnFgLM15fFk7Iw44o2daj5xzWg=)
                          2: C202E82834B611ED815AAB32C4F9AE02.roa (hash: FkAIc4PkSrjwjHI3WuneOyjO69joINPbfIEPkCYw/A0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.crl
                          rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LToKI8WbTfbb4BpMXzt8i___cA0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 00:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 788 (0x314)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D0BC, serialNumber=2D3A0A23C59B4DF6DBE01A4C5F3B7C8BFFFF700D
        Validity
            Not Before: Sep 21 00:55:40 2026 GMT
            Not After : Sep 28 00:55:40 2026 GMT
        Subject: CN=6ab0808d-22af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4b:ba:39:50:1b:44:83:38:50:4f:c4:23:51:
                    08:f8:48:e5:ea:2f:8f:4e:97:32:f6:4f:df:e0:19:
                    ed:c1:88:03:91:be:b1:c8:8d:71:0e:80:bc:4d:fb:
                    02:23:65:30:66:db:fc:bc:68:d7:4b:b7:a5:9d:3c:
                    e8:05:2c:5b:a1:fe:38:63:51:12:9b:55:1e:5d:44:
                    cb:36:da:3b:6c:3f:83:fc:2e:19:eb:f9:5c:ab:f6:
                    2e:8d:f2:3e:a3:33:5f:ba:cf:87:bd:7d:54:84:60:
                    83:fe:ed:3d:80:30:17:d3:82:46:34:f2:e9:dd:a8:
                    1d:47:10:39:5b:20:30:28:a2:03:c0:96:c3:77:0a:
                    d9:24:a9:5a:25:74:a1:91:e3:0e:61:30:c6:52:00:
                    8e:d2:ce:62:ac:c1:54:14:5f:88:01:67:39:a9:a8:
                    91:80:2a:26:05:22:95:2a:a9:5f:d3:4b:b7:df:6b:
                    d6:3b:68:26:df:81:2b:25:a5:0f:bd:1d:50:f4:54:
                    7f:9c:35:ec:00:ed:9a:45:0f:6f:89:dc:70:5e:a1:
                    c0:99:c4:b1:49:2d:66:76:7d:5a:7d:99:d4:e9:c5:
                    d5:9a:fb:70:23:9b:22:f6:78:87:da:8e:e6:4e:4e:
                    9f:ce:51:1a:32:f7:35:5f:7c:bf:48:c9:a1:c0:be:
                    78:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D1:16:73:6E:EF:95:0D:49:22:3C:2D:2F:6F:CD:1B:32:7D:C0:80
            X509v3 Authority Key Identifier:
                keyid:2D:3A:0A:23:C5:9B:4D:F6:DB:E0:1A:4C:5F:3B:7C:8B:FF:FF:70:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LToKI8WbTfbb4BpMXzt8i___cA0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:3f:7b:5f:a9:af:25:59:c3:1b:5b:29:8f:23:e7:61:c5:c7:
         aa:20:ad:91:eb:09:0c:7e:64:8c:ca:1b:07:4c:b4:c7:10:f2:
         6e:6e:2c:1a:60:95:42:81:8a:ca:d4:b4:20:49:d0:19:5d:54:
         d6:a4:69:9e:cf:e6:93:8c:1d:1c:f6:fe:8d:43:bf:64:5b:c3:
         fa:b9:2c:6a:ac:80:de:9d:8e:5f:dd:a9:f0:f6:00:de:15:29:
         33:f4:a7:33:0d:7a:84:32:cd:09:6c:a0:5d:32:e8:71:45:c4:
         67:cf:de:95:20:e4:75:39:db:74:20:46:d7:33:25:49:f6:66:
         ce:9a:a2:df:4a:ba:78:b6:09:0f:42:4e:37:fa:58:46:99:9d:
         98:f8:ea:8e:bf:f6:a1:ae:5c:c7:57:08:57:04:2c:bd:6d:1a:
         1f:3e:9f:fe:53:43:1d:23:77:de:f5:df:f7:ca:b4:83:46:b0:
         2b:1c:bd:c8:86:ee:3b:10:44:b2:52:40:d9:8d:aa:0b:73:81:
         45:28:0e:0c:20:bd:c5:e2:a9:44:ac:cc:60:54:b6:a2:21:44:
         ec:ae:8f:fa:cd:ae:74:36:15:10:de:ba:68:d7:fe:a3:f5:e2:
         e0:c1:c0:3a:42:4a:41:17:c8:09:f6:31:f8:9d:2f:d0:40:a5:
         82:87:4c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:52:03 2026 by rpki-client