Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft
File:                     5LMs8qYR9wLf0JE-PqULT9YexXU.mft (raw, json)
Hash identifier:          /sIKGZlKUdqLxqe8KxlkaqvndmTOIz1WKxW/7OOdDpE=
Subject key identifier:   02:81:F5:E9:98:2F:53:8D:33:35:18:FC:9C:EE:81:34:BA:64:89:4B
Authority key identifier: E4:B3:2C:F2:A6:11:F7:02:DF:D0:91:3E:3E:A5:0B:4F:D6:1E:C5:75
Certificate issuer:       /CN=A914450B/serialNumber=E4B32CF2A611F702DFD0913E3EA50B4FD61EC575
Certificate serial:       087D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LMs8qYR9wLf0JE-PqULT9YexXU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft
Manifest number:          0874
Signing time:             Tue 22 Sep 2026 20:37:19 +0000
Manifest this update:     Tue 22 Sep 2026 20:37:19 +0000
Manifest next update:     Tue 29 Sep 2026 20:37:19 +0000
Files and hashes:         1: 5LMs8qYR9wLf0JE-PqULT9YexXU.crl (hash: et2DquaLf6RYoSPVET+9ymMvsuKNmnfmv3klhUb+59c=)
                          2: 5B9B8A1213F311EBA7343351C4F9AE02.roa (hash: XjgKRLBaZq02D/Cp43Aj+NT1Qh0TEvZMzuVtJSm3G00=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.crl
                          rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LMs8qYR9wLf0JE-PqULT9YexXU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 20:37:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2173 (0x87d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914450B, serialNumber=E4B32CF2A611F702DFD0913E3EA50B4FD61EC575
        Validity
            Not Before: Sep 22 20:37:19 2026 GMT
            Not After : Sep 29 20:37:19 2026 GMT
        Subject: CN=6ab2e6ff-603e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e5:f4:87:e6:d0:ff:85:08:d9:f9:bb:ee:28:
                    00:4c:a4:01:a6:96:3b:fc:74:ae:d4:1e:b1:50:2c:
                    5a:bd:e9:60:ba:18:b9:02:5f:1b:8d:d7:45:88:7e:
                    9c:30:4e:cd:a7:ba:72:38:47:73:f4:a4:0c:31:50:
                    d2:01:bc:54:ea:fd:04:d7:1d:61:f2:2a:73:57:04:
                    03:00:a3:8b:ef:b8:ca:18:8f:05:36:1e:e5:6f:4d:
                    ba:00:3e:11:d4:8c:13:7e:49:58:a1:8e:53:96:ce:
                    1f:8d:e4:da:ed:8c:15:64:a7:af:34:dd:ca:17:bc:
                    68:c3:35:a6:70:37:3a:a4:13:73:2f:81:34:a1:df:
                    00:e9:52:aa:12:53:24:5b:1c:2a:3f:d3:c1:49:7c:
                    e1:52:f3:94:4a:c3:08:f3:d8:8f:6b:f7:24:c2:4d:
                    ea:bc:2f:0f:d7:0c:d3:91:2a:e6:fc:90:fd:bd:9b:
                    ad:30:88:4b:20:ec:da:cf:1c:c4:ee:ac:ca:6b:dd:
                    a4:ae:7f:45:86:87:0d:68:53:8d:a8:e0:74:58:e4:
                    fd:35:ce:93:b5:13:f3:4d:c8:ef:df:de:c7:fb:d8:
                    38:c8:49:a9:64:41:d3:2f:b8:b0:85:0b:6a:df:df:
                    e5:94:44:fe:e3:10:93:46:27:26:cb:3f:68:cf:73:
                    ee:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:81:F5:E9:98:2F:53:8D:33:35:18:FC:9C:EE:81:34:BA:64:89:4B
            X509v3 Authority Key Identifier:
                keyid:E4:B3:2C:F2:A6:11:F7:02:DF:D0:91:3E:3E:A5:0B:4F:D6:1E:C5:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LMs8qYR9wLf0JE-PqULT9YexXU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:7d:b5:47:1c:a0:9c:ca:99:32:d8:5f:17:68:78:b5:99:82:
         2c:95:75:fc:67:34:1f:4a:b0:da:4f:5a:0a:ba:36:28:c8:1f:
         39:c7:69:b6:94:73:2c:bb:c1:36:b5:a1:42:e3:3f:54:c5:ca:
         15:4d:b1:5b:94:b3:85:f5:6c:68:11:c6:07:63:ad:5e:aa:57:
         50:b7:e1:53:8f:44:c6:9e:99:9f:76:8a:99:17:57:3b:bc:9c:
         f5:02:aa:32:e1:4e:25:cc:9b:8c:28:a7:98:78:26:af:08:5e:
         02:11:96:bc:15:83:12:b4:d9:f2:1e:67:d1:a7:8a:9f:07:6d:
         a9:30:17:43:45:ac:24:41:a2:1c:85:2a:67:d9:17:ed:51:79:
         a7:a8:3c:ba:96:d7:40:b5:6c:33:2d:0a:fd:1d:75:7f:45:da:
         1a:cf:5f:2f:18:60:2d:01:3e:f4:b9:70:61:2d:84:ff:40:1d:
         47:aa:d6:ad:50:ab:5a:8d:a5:a7:74:84:ab:1e:40:88:fd:29:
         a1:bf:d4:1a:f2:f6:e3:11:c5:b5:52:43:54:43:95:50:47:86:
         64:8c:ed:7c:d6:d0:85:82:45:87:05:5e:2e:8d:7a:51:34:d9:
         0d:98:7f:34:c7:ef:61:57:a3:8e:aa:2f:00:bc:8c:8e:90:26:
         4c:f6:54:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:31:19 2026 by rpki-client