Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.mft
File:                     lSpNx8TWEJWYvu5awKIG0nuFxWo.mft (raw, json)
Hash identifier:          SnbnOB0OLozTTp1Gocjh1OLTfQmETA0t+OW1zEbnG18=
Subject key identifier:   04:59:F7:88:E3:BD:92:DD:F6:D9:DF:5C:10:29:8C:EA:ED:12:41:30
Authority key identifier: 95:2A:4D:C7:C4:D6:10:95:98:BE:EE:5A:C0:A2:06:D2:7B:85:C5:6A
Certificate issuer:       /CN=A912D71D/serialNumber=952A4DC7C4D6109598BEEE5AC0A206D27B85C56A
Certificate serial:       0103
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSpNx8TWEJWYvu5awKIG0nuFxWo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.mft
Manifest number:          FE
Signing time:             Fri 25 Sep 2026 06:17:25 +0000
Manifest this update:     Fri 25 Sep 2026 06:17:25 +0000
Manifest next update:     Fri 02 Oct 2026 06:17:25 +0000
Files and hashes:         1: lSpNx8TWEJWYvu5awKIG0nuFxWo.crl (hash: fH0WDRFocLk0wkRHmdeYPncGDWSXBby9TY8l2qJfyqg=)
                          2: 4002AE6236CF11F0AA705D26C4F9AE02.roa (hash: 6U2CgiUvlSZmVIxlf3rv78ibQxmJIaTJLFAkzr+rmKQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.crl
                          rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSpNx8TWEJWYvu5awKIG0nuFxWo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 06:17:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 259 (0x103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D71D, serialNumber=952A4DC7C4D6109598BEEE5AC0A206D27B85C56A
        Validity
            Not Before: Sep 25 06:17:25 2026 GMT
            Not After : Oct  2 06:17:25 2026 GMT
        Subject: CN=6ab611f5-2211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:85:bb:ae:8b:86:54:5d:ea:b7:3a:d2:b5:b9:
                    45:b1:fd:d6:0c:f8:35:a2:22:c3:af:a8:db:7b:77:
                    c4:55:43:4c:59:9a:88:21:09:3c:30:55:ae:96:59:
                    4e:18:99:03:46:83:d1:78:a9:ff:18:e8:19:dd:41:
                    d7:7b:44:9c:88:d2:12:78:11:f0:e1:eb:cf:93:80:
                    b2:b9:d5:c8:00:eb:26:14:ae:eb:5a:93:4c:f5:25:
                    bc:ff:f7:22:c6:7b:3b:97:77:8f:6e:2a:86:54:d6:
                    3f:06:a8:4b:84:a4:0e:a4:91:08:af:a4:b0:8e:3e:
                    0d:2a:0b:2c:4c:15:56:c8:82:a4:9b:59:b5:79:fd:
                    82:77:38:ce:0c:a9:d5:ef:3d:42:a4:52:f8:d8:0f:
                    7d:ee:ea:46:ba:ea:d7:07:41:a9:42:35:a1:ab:38:
                    f9:c6:7a:fd:e2:c2:28:74:4a:90:fa:b0:02:0b:74:
                    4c:a5:64:5e:b8:d7:e1:b2:41:e8:b5:e9:f1:98:78:
                    5b:08:6a:15:10:8d:60:b3:c2:e2:98:8a:b5:12:62:
                    a8:fe:be:a8:58:1d:71:83:9a:e8:e8:e8:79:27:51:
                    51:30:7f:7a:9e:32:63:89:b8:f7:00:67:ae:46:e7:
                    b2:79:58:dc:bd:81:f4:82:d9:cb:bf:fe:f0:7c:c9:
                    94:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:59:F7:88:E3:BD:92:DD:F6:D9:DF:5C:10:29:8C:EA:ED:12:41:30
            X509v3 Authority Key Identifier:
                keyid:95:2A:4D:C7:C4:D6:10:95:98:BE:EE:5A:C0:A2:06:D2:7B:85:C5:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSpNx8TWEJWYvu5awKIG0nuFxWo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:22:16:cd:11:75:3e:9e:c9:61:11:6a:d9:56:30:db:fe:66:
         94:c5:d9:9f:49:bb:09:6e:22:d4:f9:29:ee:53:5e:39:d3:af:
         55:18:c4:48:c1:f1:18:be:b9:d8:ed:3a:98:1f:33:6d:35:40:
         7a:24:da:11:e5:da:50:57:58:c9:59:ab:f6:06:a2:2b:ef:e4:
         8f:95:ef:a4:27:28:74:3a:c2:03:99:fa:e8:62:46:d6:ca:c4:
         e3:37:19:a7:dd:20:60:50:09:56:75:94:76:98:72:f3:e4:b6:
         19:9e:3e:52:0b:cf:53:80:e8:68:f6:fd:ec:0f:f5:e9:2b:c7:
         4c:dc:e0:64:11:b4:49:03:7f:39:73:e4:d4:ba:14:02:6b:b5:
         6a:0f:bd:b9:cd:23:97:1a:ad:ea:b0:df:7c:83:c6:d3:23:90:
         b0:5c:10:26:33:a0:7f:61:52:78:ab:ed:0d:8e:94:88:12:99:
         1a:01:72:ef:2b:c5:58:73:14:c9:ea:a9:15:11:43:e7:8e:6b:
         89:71:e3:5e:15:59:49:3b:36:fd:64:70:9f:ce:27:94:05:53:
         9a:80:1e:72:b5:0b:1c:2c:58:87:f4:b2:61:a9:38:80:fb:a5:
         cc:46:85:52:bb:ae:d6:70:75:df:6d:9a:03:69:f7:9f:0a:2e:
         93:18:f1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:20:37 2026 by rpki-client