Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft
File:                     1c9c-LTYDyITBPNliOOVYERH93o.mft (raw, json)
Hash identifier:          tBIv8vDN6cMX3CkL8hvCypseYywVTSdlv65H577M4sM=
Subject key identifier:   8C:D4:07:38:0A:EA:6C:AF:5A:40:2F:79:9B:B6:92:85:86:0C:01:30
Authority key identifier: D5:CF:5C:F8:B4:D8:0F:22:13:04:F3:65:88:E3:95:60:44:47:F7:7A
Certificate issuer:       /CN=A914A5BB/serialNumber=D5CF5CF8B4D80F221304F36588E395604447F77A
Certificate serial:       02EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft
Manifest number:          02E4
Signing time:             Wed 23 Sep 2026 00:48:22 +0000
Manifest this update:     Wed 23 Sep 2026 00:48:21 +0000
Manifest next update:     Wed 30 Sep 2026 00:48:21 +0000
Files and hashes:         1: 1c9c-LTYDyITBPNliOOVYERH93o.crl (hash: V9nU9x0tzSm2foNbKDaCQyHvyrgIAOdxwXHk8vjj7kk=)
                          2: A83E51EC45F611EDBA9D6062C4F9AE02.roa (hash: SogM+aLq7TtnKTXVbg7l5lBGj90QzbOdIzdMdOy5LlU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.crl
                          rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 00:48:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 747 (0x2eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A5BB, serialNumber=D5CF5CF8B4D80F221304F36588E395604447F77A
        Validity
            Not Before: Sep 23 00:48:21 2026 GMT
            Not After : Sep 30 00:48:21 2026 GMT
        Subject: CN=6ab321d5-9314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e6:d9:02:d5:ba:29:37:43:ff:28:27:fb:42:
                    79:98:0f:cf:16:da:64:8d:c6:56:18:eb:ac:bf:90:
                    bb:4d:cf:f1:7f:73:33:53:2b:2a:f6:ae:43:20:dc:
                    1e:11:4c:c6:c5:db:be:47:31:61:63:50:73:ad:7a:
                    cc:d1:9a:82:37:47:3d:e2:23:9b:de:58:f8:3b:b8:
                    37:5b:aa:13:fe:10:8b:98:30:29:de:ba:59:ad:30:
                    b4:66:27:28:0b:9a:e8:26:12:f7:1e:ef:2d:54:49:
                    ad:9b:c3:f5:86:7a:47:c1:a8:cc:d9:96:37:e8:57:
                    c8:82:fc:af:bc:db:8c:9a:76:f4:63:7b:6d:b6:fc:
                    a2:35:93:bf:07:30:42:72:6f:61:78:35:61:37:43:
                    fc:e0:0c:50:a5:e8:58:8b:65:c4:44:3b:9f:74:1b:
                    a9:76:5f:d2:11:f5:ed:b4:41:dd:f5:fe:b9:9a:69:
                    97:e7:a2:79:8d:73:65:2a:7d:7f:f3:1a:19:c9:1c:
                    d5:29:73:cb:6f:8d:de:4e:48:c9:9e:e6:40:21:5e:
                    74:4f:95:a3:2e:84:ef:23:97:ec:4f:5f:5c:16:2e:
                    f0:75:c2:c5:8c:6b:b0:f5:c4:87:42:94:77:f9:3c:
                    5c:43:ee:ee:27:5f:f8:62:9b:55:13:49:14:33:71:
                    a7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D4:07:38:0A:EA:6C:AF:5A:40:2F:79:9B:B6:92:85:86:0C:01:30
            X509v3 Authority Key Identifier:
                keyid:D5:CF:5C:F8:B4:D8:0F:22:13:04:F3:65:88:E3:95:60:44:47:F7:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:4f:f1:4a:55:f6:7c:e7:a7:f1:e5:d8:aa:1f:2c:11:c6:53:
         2c:c5:11:e0:a1:f9:f9:63:92:11:60:22:89:ad:c7:cc:25:d3:
         17:15:eb:18:8f:64:34:0b:6a:c0:b9:b2:ab:65:d4:c5:ae:36:
         7a:39:7a:73:d0:c9:1c:ce:a6:cf:34:f9:04:7e:41:95:a7:4e:
         5a:f8:db:48:c9:a4:46:ba:de:85:da:8b:fa:6d:a5:18:97:7d:
         e1:37:ce:1a:e7:4f:b7:77:44:23:55:8c:0d:d6:2a:9d:4b:f8:
         d0:a9:d8:5d:d6:0f:f7:8d:46:96:bb:24:6d:28:2d:6a:b5:e4:
         13:b2:4d:32:ce:4e:d0:7a:8f:f9:20:89:e4:2d:a0:74:14:6e:
         9e:53:ee:1c:74:35:a3:b3:8b:ca:99:53:67:03:ea:f3:16:13:
         35:92:3b:6b:12:35:ee:d0:72:93:bb:6d:0b:cd:2b:59:5f:e9:
         aa:b8:3f:90:78:3f:f0:cf:cc:82:f0:0d:1e:e4:53:f4:55:f0:
         9d:8c:a7:e4:75:15:b4:8c:e9:86:64:74:0b:8d:58:4d:32:d2:
         42:c5:cd:f1:7d:ac:71:35:11:1e:0f:4a:11:9c:44:14:d7:3f:
         37:f2:a4:b4:60:98:ae:5f:84:ba:19:58:73:68:17:ec:96:3a:
         fd:33:58:0c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEE1QkIxMTAvBgNVBAUTKEQ1Q0Y1Q0Y4QjREODBGMjIxMzA0RjM2NTg4RTM5NTYw
NDQ0N0Y3N0EwHhcNMjYwOTIzMDA0ODIxWhcNMjYwOTMwMDA0ODIxWjAYMRYwFAYD
VQQDEw02YWIzMjFkNS05MzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtebZAtW6KTdD/ygn+0J5mA/PFtpkjcZWGOusv5C7Tc/xf3MzUysq9q5DINwe
EUzGxdu+RzFhY1BzrXrM0ZqCN0c94iOb3lj4O7g3W6oT/hCLmDAp3rpZrTC0Zico
C5roJhL3Hu8tVEmtm8P1hnpHwajM2ZY36FfIgvyvvNuMmnb0Y3tttvyiNZO/BzBC
cm9heDVhN0P84AxQpehYi2XERDufdBupdl/SEfXttEHd9f65mmmX56J5jXNlKn1/
8xoZyRzVKXPLb43eTkjJnuZAIV50T5WjLoTvI5fsT19cFi7wdcLFjGuw9cSHQpR3
+TxcQ+7uJ1/4YptVE0kUM3GnswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIzUBzgK
6myvWkAveZu2koWGDAEwMB8GA1UdIwQYMBaAFNXPXPi02A8iEwTzZYjjlWBER/d6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTVCQi83MjNDRDlBQTQ1
RjIxMUVEOTY0QjRDNUFDNEY5QUUwMi8xYzljLUxUWUR5SVRCUE5saU9PVllFUkg5
M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFjOWMtTFRZRHlJVEJQTmxpT09WWUVSSDkzby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QTVCQi83MjNDRDlBQTQ1RjIxMUVEOTY0QjRDNUFDNEY5QUUwMi8xYzljLUxUWUR5
SVRCUE5saU9PVllFUkg5M28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZk/xSlX2fOen8eXYqh8sEcZTLMUR4KH5+WOSEWAiia3HzCXTFxXrGI9kNAtq
wLmyq2XUxa42ejl6c9DJHM6mzzT5BH5BladOWvjbSMmkRrrehdqL+m2lGJd94TfO
GudPt3dEI1WMDdYqnUv40KnYXdYP941GlrskbSgtarXkE7JNMs5O0HqP+SCJ5C2g
dBRunlPuHHQ1o7OLyplTZwPq8xYTNZI7axI17tByk7ttC80rWV/pqrg/kHg/8M/M
gvANHuRT9FXwnYyn5HUVtIzphmR0C41YTTLSQsXN8X2scTURHg9KEZxEFNc/N/Kk
tGCYrl+EuhlYc2gX7JY6/TNYDA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:19:21 2026 by rpki-client