Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147067/E3610E1C4D1911F1A8D9B186B9833773/l5j60KAlRO73NipYtxrzZoFJjrE.mft
File:                     l5j60KAlRO73NipYtxrzZoFJjrE.mft (raw, json)
Hash identifier:          mP6ek+PxO6fF/3oor6CBFN5ib6fBpALRu+A7shGpHuI=
Subject key identifier:   0D:0B:0B:DF:A5:C0:1B:94:F6:05:01:7C:44:D9:45:D0:23:F9:05:27
Authority key identifier: 97:98:FA:D0:A0:25:44:EE:F7:36:2A:58:B7:1A:F3:66:81:49:8E:B1
Certificate issuer:       /CN=A9147067/serialNumber=9798FAD0A02544EEF7362A58B71AF36681498EB1
Certificate serial:       50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5j60KAlRO73NipYtxrzZoFJjrE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147067/E3610E1C4D1911F1A8D9B186B9833773/l5j60KAlRO73NipYtxrzZoFJjrE.mft
Manifest number:          4F
Signing time:             Tue 13 Oct 2026 09:04:29 +0000
Manifest this update:     Tue 13 Oct 2026 09:04:28 +0000
Manifest next update:     Tue 20 Oct 2026 09:04:28 +0000
Files and hashes:         1: l5j60KAlRO73NipYtxrzZoFJjrE.crl (hash: FgETn2o1x61kYlyuzE331QhmfJx9+oCsUmutqm/2Ze4=)
                          2: 77F3A8B44D1A11F1A20E0EADB9833773.roa (hash: njgB4GyznC4WbAXjnMUKLhBAaTqFgRbORUoYNqNFmn0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147067/E3610E1C4D1911F1A8D9B186B9833773/l5j60KAlRO73NipYtxrzZoFJjrE.crl
                          rsync://rpki.apnic.net/member_repository/A9147067/E3610E1C4D1911F1A8D9B186B9833773/l5j60KAlRO73NipYtxrzZoFJjrE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5j60KAlRO73NipYtxrzZoFJjrE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 09:04:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147067, serialNumber=9798FAD0A02544EEF7362A58B71AF36681498EB1
        Validity
            Not Before: Oct 13 09:04:28 2026 GMT
            Not After : Oct 20 09:04:28 2026 GMT
        Subject: CN=6acdf41c-0800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3a:f5:1f:1d:44:ca:06:04:d3:b0:31:2b:09:
                    aa:f6:49:1c:19:f8:9c:22:ad:15:b9:54:92:c8:e5:
                    5f:bf:79:40:26:94:1f:25:fc:13:76:12:28:db:2c:
                    1d:95:e3:74:56:38:a0:75:3e:2a:63:d4:9d:6a:32:
                    50:e4:e0:4c:2b:21:fe:2b:63:46:b9:71:2c:00:e4:
                    30:5a:5e:1e:ea:f5:e4:83:b0:a1:9e:cf:54:6f:92:
                    57:e4:a4:dd:7b:ae:f1:96:94:ea:89:46:09:62:70:
                    ce:b9:08:c2:a9:d1:28:33:ee:1f:6c:4e:26:56:87:
                    0b:70:a0:89:4d:9d:e4:17:05:09:06:7f:2e:73:e8:
                    2d:e7:07:97:25:10:b7:d9:40:4f:be:63:6c:a0:a3:
                    6b:fa:09:ad:a3:7d:ae:48:f7:c8:9b:95:f3:04:39:
                    e2:2f:71:da:64:1f:21:b5:62:05:6b:6d:a0:18:6b:
                    2d:f1:79:f0:bc:a7:09:ae:9a:bb:65:81:55:d4:0f:
                    ac:a4:18:2b:a3:e8:91:30:ab:a1:1b:c3:a3:f1:a4:
                    c6:d6:b8:be:61:3a:78:72:cc:52:18:d4:6a:c5:e5:
                    d9:36:d8:a1:95:4a:e3:80:77:e8:15:71:83:15:91:
                    da:08:e4:07:d4:85:22:5e:63:5f:68:79:ec:ef:a8:
                    a3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:0B:0B:DF:A5:C0:1B:94:F6:05:01:7C:44:D9:45:D0:23:F9:05:27
            X509v3 Authority Key Identifier:
                keyid:97:98:FA:D0:A0:25:44:EE:F7:36:2A:58:B7:1A:F3:66:81:49:8E:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147067/E3610E1C4D1911F1A8D9B186B9833773/l5j60KAlRO73NipYtxrzZoFJjrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5j60KAlRO73NipYtxrzZoFJjrE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147067/E3610E1C4D1911F1A8D9B186B9833773/l5j60KAlRO73NipYtxrzZoFJjrE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:fb:30:df:97:ce:55:3b:9c:dd:04:41:89:e8:98:2d:bb:98:
         46:b2:40:21:8a:e9:f5:de:9b:0e:a3:3f:44:b8:4a:bf:e5:9b:
         ce:3a:cd:f8:9c:6e:42:0a:6e:4e:c4:12:f7:70:e5:78:c9:07:
         78:11:78:3e:02:ee:6e:b5:1a:ab:7d:f7:2e:52:7c:90:95:49:
         4a:0b:c1:9d:c9:16:8c:98:19:2b:1d:29:20:0d:fd:45:94:af:
         89:be:dc:b2:44:74:da:80:d9:d3:67:ae:1c:22:95:65:00:76:
         f8:8e:b7:7e:a8:cf:3d:1f:62:44:c1:82:dc:f5:7a:5d:bc:f9:
         84:35:a8:84:07:3f:ca:45:09:64:88:16:fc:63:89:fe:c7:eb:
         7e:29:ae:58:aa:15:de:b5:48:d3:59:bc:3a:d4:52:4c:b6:8a:
         b5:70:97:cc:fc:cf:0e:c8:de:f9:db:72:56:e6:c6:a5:b0:80:
         4a:a0:97:d8:6b:0f:37:c5:cb:d1:2b:df:e2:cc:07:d7:93:5c:
         6b:18:43:9a:73:fa:f2:bd:31:9b:87:e2:9a:5e:02:e5:8a:22:
         ee:e1:3d:f7:ee:d9:4b:cc:94:aa:23:25:4c:bf:c2:c3:01:3f:
         52:7a:88:25:7d:29:08:00:9c:bb:0f:0d:6e:77:20:a5:a7:46:
         e8:19:28:23
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
NzA2NzExMC8GA1UEBRMoOTc5OEZBRDBBMDI1NDRFRUY3MzYyQTU4QjcxQUYzNjY4
MTQ5OEVCMTAeFw0yNjEwMTMwOTA0MjhaFw0yNjEwMjAwOTA0MjhaMBgxFjAUBgNV
BAMTDTZhY2RmNDFjLTA4MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCgOvUfHUTKBgTTsDErCar2SRwZ+JwirRW5VJLI5V+/eUAmlB8l/BN2EijbLB2V
43RWOKB1Pipj1J1qMlDk4EwrIf4rY0a5cSwA5DBaXh7q9eSDsKGez1RvklfkpN17
rvGWlOqJRglicM65CMKp0Sgz7h9sTiZWhwtwoIlNneQXBQkGfy5z6C3nB5clELfZ
QE++Y2ygo2v6Ca2jfa5I98iblfMEOeIvcdpkHyG1YgVrbaAYay3xefC8pwmumrtl
gVXUD6ykGCuj6JEwq6Ebw6PxpMbWuL5hOnhyzFIY1GrF5dk22KGVSuOAd+gVcYMV
kdoI5AfUhSJeY19oeezvqKNrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUDQsL36XA
G5T2BQF8RNlF0CP5BScwHwYDVR0jBBgwFoAUl5j60KAlRO73NipYtxrzZoFJjrEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3MDY3L0UzNjEwRTFDNEQx
OTExRjFBOEQ5QjE4NkI5ODMzNzczL2w1ajYwS0FsUk83M05pcFl0eHJ6Wm9GSmpy
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbDVqNjBLQWxSTzczTmlwWXR4cnpab0ZKanJFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3
MDY3L0UzNjEwRTFDNEQxOTExRjFBOEQ5QjE4NkI5ODMzNzczL2w1ajYwS0FsUk83
M05pcFl0eHJ6Wm9GSmpyRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCP+zDfl85VO5zdBEGJ6Jgtu5hGskAhiun13psOoz9EuEq/5ZvOOs34nG5CCm5O
xBL3cOV4yQd4EXg+Au5utRqrffcuUnyQlUlKC8GdyRaMmBkrHSkgDf1FlK+Jvtyy
RHTagNnTZ64cIpVlAHb4jrd+qM89H2JEwYLc9XpdvPmENaiEBz/KRQlkiBb8Y4n+
x+t+Ka5YqhXetUjTWbw61FJMtoq1cJfM/M8OyN7523JW5salsIBKoJfYaw83xcvR
K9/izAfXk1xrGEOac/ryvTGbh+KaXgLliiLu4T337tlLzJSqIyVMv8LDAT9Seogl
fSkIAJy7Dw1udyClp0boGSgj
-----END CERTIFICATE-----
Generated at Wed Oct 14 17:25:05 2026 by rpki-client