Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft
File:                     1c9c-LTYDyITBPNliOOVYERH93o.mft (raw, json)
Hash identifier:          GV17I1HoAkbxuonani8gqeHFZHbKkL6CdkUArHfO4Xc=
Subject key identifier:   38:E8:AE:61:99:35:7C:22:E6:24:E8:6B:A8:5A:5F:36:63:E3:4F:76
Authority key identifier: D5:CF:5C:F8:B4:D8:0F:22:13:04:F3:65:88:E3:95:60:44:47:F7:7A
Certificate issuer:       /CN=A914A5BB/serialNumber=D5CF5CF8B4D80F221304F36588E395604447F77A
Certificate serial:       02CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft
Manifest number:          02C7
Signing time:             Wed 29 Jul 2026 02:09:53 +0000
Manifest this update:     Wed 29 Jul 2026 02:09:52 +0000
Manifest next update:     Wed 05 Aug 2026 02:09:52 +0000
Files and hashes:         1: 1c9c-LTYDyITBPNliOOVYERH93o.crl (hash: L4eUMyxqTE8iiP+p7k1WduHjql/t6ra5hLAk9aD4cgM=)
                          2: A83E51EC45F611EDBA9D6062C4F9AE02.roa (hash: SogM+aLq7TtnKTXVbg7l5lBGj90QzbOdIzdMdOy5LlU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.crl
                          rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 02:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 718 (0x2ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A5BB, serialNumber=D5CF5CF8B4D80F221304F36588E395604447F77A
        Validity
            Not Before: Jul 29 02:09:52 2026 GMT
            Not After : Aug  5 02:09:52 2026 GMT
        Subject: CN=6a6960f1-17f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:93:b3:0f:d3:62:e4:99:0b:ed:6c:bf:a6:89:
                    90:11:91:f9:b9:17:31:e8:6e:5c:96:ae:19:28:77:
                    35:fa:ab:a5:b0:6d:98:ee:7d:2c:be:79:c1:86:40:
                    1d:9a:f0:40:64:1e:bc:b6:c7:e1:22:5a:57:e9:74:
                    9f:61:ec:f9:89:ef:44:52:bb:41:18:30:a0:68:61:
                    29:3a:aa:e7:9f:0c:77:38:37:62:cd:d4:d1:87:91:
                    87:03:51:f9:7a:18:b3:70:09:12:cc:1f:8f:74:1e:
                    14:d7:27:a8:c7:9c:cf:b4:e5:97:c5:09:db:6a:57:
                    e8:db:f1:32:9b:fb:17:4e:d1:cd:45:21:28:c7:1a:
                    21:0b:e8:6d:eb:be:72:78:06:f9:4d:6a:c3:4a:5a:
                    0d:48:c4:1c:41:0d:fd:f3:d6:a9:52:51:77:e7:44:
                    bc:7f:c1:2a:2a:45:02:e1:dd:7b:b1:7d:47:ea:31:
                    e8:f8:ae:a8:2b:7b:84:f5:ee:38:7c:ab:0d:01:44:
                    f1:d7:d8:30:ee:af:fb:d5:73:5c:94:6c:c9:4d:8d:
                    a8:61:cd:9c:21:28:cb:99:5a:8a:10:64:f5:09:5f:
                    bc:2e:12:cf:2f:db:7c:80:95:8c:b8:e9:17:a3:cb:
                    27:30:29:ef:7b:c2:30:fc:e1:92:da:5a:b8:c0:bd:
                    4c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E8:AE:61:99:35:7C:22:E6:24:E8:6B:A8:5A:5F:36:63:E3:4F:76
            X509v3 Authority Key Identifier:
                keyid:D5:CF:5C:F8:B4:D8:0F:22:13:04:F3:65:88:E3:95:60:44:47:F7:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:84:06:9f:8f:19:2f:81:43:19:41:cc:3c:7c:63:db:a5:34:
         fe:bc:dc:c2:f1:71:62:f6:ed:d1:b9:c7:74:f4:6e:0f:84:54:
         00:c4:e3:22:d0:e6:13:ec:3c:d2:18:a0:f8:64:e4:e2:b2:d9:
         14:34:fa:1c:de:8a:f5:47:e4:a7:b8:1d:1c:55:6f:f2:a1:d4:
         f9:e3:b1:62:da:62:d6:23:83:40:7c:6d:1d:f4:ec:fd:63:25:
         39:c3:5f:72:cd:37:28:28:2a:ad:5d:90:de:f7:e1:4d:25:fa:
         1c:46:ea:30:14:16:df:9a:2c:52:2c:46:c7:ff:62:a0:22:34:
         d2:4b:75:59:ad:61:54:1c:15:71:02:e4:be:78:c3:f8:50:68:
         a8:dc:e0:e9:07:b5:32:cf:0f:25:8d:82:f4:78:86:40:0d:7b:
         5b:81:ff:d5:01:bb:9c:6a:67:3e:de:ac:cd:06:15:8e:00:79:
         86:0f:7d:6e:2d:82:fb:e8:a0:bc:9e:9d:68:f1:cf:1e:5b:e5:
         71:ee:0e:23:3e:8f:5b:1b:76:f0:6b:70:99:d5:ef:1f:5a:24:
         2d:d5:b0:69:90:db:b6:61:a4:c6:93:24:ec:41:dc:c3:84:7c:
         7e:c6:4d:5f:25:5b:0a:a2:e1:02:a9:4a:c1:3d:37:c5:2f:25:
         1b:b0:d8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:41:50 2026 by rpki-client