Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
File:                     4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft (raw, json)
Hash identifier:          zSf0pYywvScRpGFHTaIzLqH1nmNjN7dTmQl5ik49/kE=
Subject key identifier:   34:7F:E1:92:1D:D8:CF:7F:AE:42:DA:7D:01:DB:E4:8C:E8:24:A8:F8
Authority key identifier: E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87
Certificate issuer:       /CN=A914E600/serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087
Certificate serial:       0184
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
Manifest number:          017B
Signing time:             Mon 21 Sep 2026 04:43:04 +0000
Manifest this update:     Mon 21 Sep 2026 04:43:04 +0000
Manifest next update:     Mon 28 Sep 2026 04:43:04 +0000
Files and hashes:         1: 4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl (hash: 6LvJaF0+O20Si5VVZ6YB3incFHE3z+D0afhA9zhwzzk=)
                          2: D86268E877F111EFADAB6362C4F9AE02.roa (hash: oemFiSu7xvtYlYRUpCkXZaggbkGyG52ArxoSenXNp0o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl
                          rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 04:43:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 388 (0x184)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E600, serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087
        Validity
            Not Before: Sep 21 04:43:04 2026 GMT
            Not After : Sep 28 04:43:04 2026 GMT
        Subject: CN=6ab0b5d8-a5f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:87:1d:7d:d4:d4:54:e8:85:7e:04:29:0e:c9:
                    83:5b:f4:9f:4f:64:c7:2f:d4:35:87:45:b4:74:8c:
                    bd:b8:1b:8f:e8:8a:6f:e6:d2:d8:6d:f2:ca:d7:52:
                    19:ba:fb:39:e2:a5:4d:f8:80:cf:04:6f:1a:f2:c3:
                    3e:32:c7:62:fb:d3:28:1c:ff:8b:db:c0:a5:d2:1b:
                    c6:c8:f3:6a:54:95:f9:f6:c4:47:37:7e:10:6c:7c:
                    e5:a2:c8:c2:0c:2b:db:45:e1:41:cf:4b:35:df:ca:
                    ab:1f:77:fe:e4:97:2f:f7:30:68:83:21:5e:cd:01:
                    37:b9:a7:93:e4:de:55:e3:ef:7c:d6:67:19:b4:15:
                    97:33:22:0b:fb:13:9b:27:fc:ac:de:fb:b0:7b:57:
                    f6:a4:4a:55:a8:dd:3d:a0:ae:4c:93:ab:a5:33:e2:
                    23:69:d8:5a:9e:bf:ff:85:6a:e1:71:88:61:b9:59:
                    cd:24:73:0d:e8:49:f0:d9:62:b2:15:56:7a:06:04:
                    c3:88:6a:6a:29:fb:ef:93:41:34:f7:26:f0:73:a4:
                    f0:4f:4e:2b:85:f3:60:82:a9:a1:c1:eb:ce:02:6a:
                    d1:c2:d8:e6:33:80:b3:b4:be:2d:b6:8a:ed:eb:23:
                    27:58:48:93:c7:17:01:e8:df:12:af:92:43:88:b1:
                    fb:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:7F:E1:92:1D:D8:CF:7F:AE:42:DA:7D:01:DB:E4:8C:E8:24:A8:F8
            X509v3 Authority Key Identifier:
                keyid:E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:52:15:fa:8d:53:af:b2:87:7f:8c:5f:d4:7e:ba:a0:57:c4:
         28:21:1a:ab:f3:1c:bb:e6:03:4c:08:54:a9:bf:b1:c4:8d:f8:
         6f:d8:e2:7e:d9:6e:1a:d0:95:fb:90:5a:c5:16:92:a8:83:fb:
         50:c0:a2:54:eb:7a:ef:4b:77:47:be:cd:0f:75:cb:4a:2e:72:
         9d:29:db:c8:ed:e2:c3:96:c3:e8:33:db:5a:ce:26:25:22:e9:
         52:41:e4:c2:e3:74:1a:95:4a:d2:66:fb:73:ce:e4:f4:85:4c:
         60:57:83:6e:d6:0d:e3:bb:bf:dd:87:13:1f:e9:dc:ad:e7:f1:
         ab:eb:30:5c:96:fb:d7:8c:2b:c5:14:5b:84:11:1b:9c:e2:13:
         4e:91:7a:18:bd:dc:54:38:d3:87:9f:a0:58:06:18:47:fd:8e:
         f5:24:eb:51:f5:a6:b5:59:d3:90:a4:d5:bf:87:21:1c:08:86:
         5e:58:d1:6f:63:5c:89:75:33:ea:d3:7c:21:bc:b3:b2:8a:a2:
         38:be:a1:18:39:7c:f0:a9:9b:28:0d:25:d4:43:2e:d0:20:4f:
         78:f1:c7:7e:28:63:1a:f9:b8:23:39:7f:1c:36:91:9b:26:02:
         61:4d:27:9e:2b:58:1c:52:f8:ad:91:aa:87:c7:97:f8:0b:40:
         89:0f:96:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:20:33 2026 by rpki-client