Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft
File:                     1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft (raw, json)
Hash identifier:          R+jyFabNrwmKLlNPSycqCQT7c48L3VsbsO2qAucKyiA=
Subject key identifier:   2C:EA:C5:4E:AE:E5:63:0D:E8:49:56:42:25:BA:44:D6:96:9F:0E:47
Authority key identifier: D4:B1:DD:3E:B1:A0:6F:A2:62:AB:6C:5E:BF:4A:F5:36:71:AC:D2:F4
Certificate issuer:       /CN=A91311BC/serialNumber=D4B1DD3EB1A06FA262AB6C5EBF4AF53671ACD2F4
Certificate serial:       01C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft
Manifest number:          01C0
Signing time:             Fri 25 Sep 2026 03:56:05 +0000
Manifest this update:     Fri 25 Sep 2026 03:56:04 +0000
Manifest next update:     Fri 02 Oct 2026 03:56:04 +0000
Files and hashes:         1: 1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl (hash: Nw/a0gaIgJtksAnWSYBoOfMMOGiGafloI3vb//J8a7A=)
                          2: 4B0C31680FA511EFA3249B35C4F9AE02.roa (hash: xOf3XH1rq9iRonlFI2ztK10R9vzTctiHTjijcLXsCA4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl
                          rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 03:56:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 454 (0x1c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91311BC, serialNumber=D4B1DD3EB1A06FA262AB6C5EBF4AF53671ACD2F4
        Validity
            Not Before: Sep 25 03:56:04 2026 GMT
            Not After : Oct  2 03:56:04 2026 GMT
        Subject: CN=6ab5f0d5-5809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4d:e7:27:70:e6:a1:be:e5:98:43:43:bd:0d:
                    a2:35:08:75:91:87:84:f8:ce:c3:e0:ad:4a:05:ac:
                    f7:d6:35:a5:dc:51:76:78:c0:45:f0:f9:f2:c4:6b:
                    04:8c:05:d0:17:d1:c5:ad:d7:8b:bb:18:d0:4e:13:
                    15:d9:d5:c3:8c:5e:04:66:24:5e:39:c8:31:59:e2:
                    c9:45:cd:e0:29:4b:3e:27:fa:b0:e3:1f:a3:0d:4c:
                    81:d5:cb:19:cb:ab:6f:53:8b:4b:60:44:3e:88:20:
                    e5:be:d9:4e:0f:14:f5:17:5e:e5:1b:67:39:5b:58:
                    95:31:27:b0:e7:db:c9:0f:01:c8:19:50:a7:d9:b3:
                    b4:8c:a6:3f:f0:0d:bc:f2:dd:d0:e9:ae:6c:00:81:
                    02:d5:2d:9e:57:86:6d:59:ce:40:2d:eb:62:94:9d:
                    7c:a8:80:8e:9b:5e:38:81:26:35:5a:d3:24:03:cf:
                    54:a6:94:77:42:50:ea:cf:39:8c:b1:51:b9:92:df:
                    98:0b:1c:d1:f3:d2:13:de:88:63:4a:dc:73:8f:8b:
                    67:f2:2e:f8:1e:c1:3d:0a:70:ba:29:0c:fa:81:4d:
                    f2:e9:89:20:52:c8:7c:e4:68:6a:1e:a7:03:82:f3:
                    c8:ee:87:54:6d:a8:61:eb:d4:0e:17:67:d9:8c:36:
                    49:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:EA:C5:4E:AE:E5:63:0D:E8:49:56:42:25:BA:44:D6:96:9F:0E:47
            X509v3 Authority Key Identifier:
                keyid:D4:B1:DD:3E:B1:A0:6F:A2:62:AB:6C:5E:BF:4A:F5:36:71:AC:D2:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:eb:51:18:19:2d:a9:6f:d2:5c:1a:f1:01:27:ee:a7:0b:3e:
         9d:0a:54:ea:94:11:ab:d2:78:b7:e6:cc:b4:40:a4:56:59:29:
         dc:08:47:78:5f:e7:29:14:46:5e:a0:a1:59:63:a3:6c:b8:08:
         72:43:39:0d:cf:07:f3:04:21:f7:c2:d7:59:aa:6b:e8:49:c1:
         55:17:1f:6b:0f:8b:ce:56:65:69:75:c9:22:53:3c:98:e8:e3:
         df:d1:b0:d7:a0:46:98:92:2f:b9:08:04:3c:d2:ab:90:ac:3a:
         6d:49:e3:9e:68:92:4f:47:a1:ee:f5:43:cd:fe:d1:64:d1:97:
         1e:4b:e1:86:12:a7:f6:65:59:04:cb:75:d7:3c:87:fe:e8:a6:
         92:95:a5:c6:f4:3a:ee:e2:e8:9b:b4:fd:09:b3:2c:c7:e9:c4:
         c5:9b:5b:97:21:ab:47:85:a0:05:cd:66:ef:e9:1d:ba:32:19:
         0c:12:74:e5:57:1c:30:c6:5e:63:ec:49:a3:d2:7d:cb:ec:8d:
         fc:22:17:6b:bc:e2:d9:f9:32:fc:dc:a7:6a:64:40:3d:6a:82:
         1d:a7:bf:5a:72:5f:35:7c:16:fb:a7:aa:0e:4b:69:b1:b6:05:
         1c:07:5b:2d:b5:f7:22:0a:fa:6a:d1:d6:35:e3:8c:55:fa:2d:
         d4:7c:80:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:52:36 2026 by rpki-client