Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.mft
File:                     llSi8IRZeiuRrAAqdgfhPBXQlJE.mft (raw, json)
Hash identifier:          Bwe34jRqjLrsexftniqBKIfrY9BZwQw2x1AeRATAnTg=
Subject key identifier:   23:AA:4F:F9:76:62:00:CF:68:C0:79:36:35:D8:2D:98:D2:FE:DB:6B
Authority key identifier: 96:54:A2:F0:84:59:7A:2B:91:AC:00:2A:76:07:E1:3C:15:D0:94:91
Certificate issuer:       /CN=A9153303/serialNumber=9654A2F084597A2B91AC002A7607E13C15D09491
Certificate serial:       01AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/llSi8IRZeiuRrAAqdgfhPBXQlJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.mft
Manifest number:          01A6
Signing time:             Fri 09 Oct 2026 04:44:33 +0000
Manifest this update:     Fri 09 Oct 2026 04:44:32 +0000
Manifest next update:     Fri 16 Oct 2026 04:44:32 +0000
Files and hashes:         1: llSi8IRZeiuRrAAqdgfhPBXQlJE.crl (hash: T53k/P49ou8ZiCJRSF81bTy1npZu/Ko1oBaHmFGaL0Y=)
                          2: 29A436623FE111EFB5A50814C4F9AE02.roa (hash: Yc/SL1Kf58vwpA4UH6rR/rtWad9y28NkDB/aIoABFQ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.crl
                          rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/llSi8IRZeiuRrAAqdgfhPBXQlJE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 04:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 431 (0x1af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153303, serialNumber=9654A2F084597A2B91AC002A7607E13C15D09491
        Validity
            Not Before: Oct  9 04:44:32 2026 GMT
            Not After : Oct 16 04:44:32 2026 GMT
        Subject: CN=6ac87131-63e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cb:64:a8:f2:66:4c:64:bd:96:12:b2:bd:84:
                    44:2c:ee:7e:c0:99:7d:f4:2c:40:29:0e:d4:95:48:
                    a3:c2:71:61:ce:86:9d:00:37:5c:63:c5:4e:b0:27:
                    21:d0:8c:71:42:e6:1f:3b:d4:0c:82:18:e5:6e:73:
                    ea:ef:d2:26:29:56:e8:0a:63:4a:3e:44:93:c1:82:
                    56:65:64:1d:0d:88:ac:97:2f:17:5d:26:0c:a6:36:
                    23:76:a8:88:a8:cf:c3:3d:74:ff:7a:1b:cc:b7:ce:
                    af:0a:79:af:19:c1:04:05:98:cc:fc:1a:a8:83:85:
                    1e:58:90:51:ec:3f:a2:f3:77:b4:ad:f2:dc:47:8f:
                    24:f6:62:4d:84:50:5c:a6:0c:84:1e:00:a8:fa:0b:
                    97:1b:ca:28:8f:96:8f:74:10:5c:4f:57:09:1c:16:
                    17:eb:70:ab:b5:bb:89:ab:55:0e:3d:02:c2:b7:17:
                    1f:4c:10:90:9f:7a:10:3d:58:f6:4e:93:36:ff:54:
                    29:8f:e3:04:62:95:55:c4:12:64:21:e5:98:85:dd:
                    b7:9e:52:f8:45:a0:33:53:6d:6d:97:45:45:e9:ef:
                    e5:94:06:86:ee:09:74:a2:73:85:8d:de:2f:20:0b:
                    f6:6b:17:32:59:d5:e3:dc:6a:a8:18:a7:92:c5:2a:
                    2e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:AA:4F:F9:76:62:00:CF:68:C0:79:36:35:D8:2D:98:D2:FE:DB:6B
            X509v3 Authority Key Identifier:
                keyid:96:54:A2:F0:84:59:7A:2B:91:AC:00:2A:76:07:E1:3C:15:D0:94:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/llSi8IRZeiuRrAAqdgfhPBXQlJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:53:37:64:37:da:9f:6b:e0:4e:4e:cd:48:82:86:7e:82:85:
         08:41:71:05:40:c7:bb:7b:f9:85:e8:47:9d:99:ed:ef:62:e6:
         2d:d9:68:08:34:2f:b9:16:83:0b:af:dd:e2:9c:0b:4b:b1:4c:
         56:d6:ed:34:b8:9b:fc:e7:96:4e:46:11:c8:a3:87:0a:d9:40:
         29:ea:cb:54:42:c1:eb:ea:ea:da:f8:d5:f4:f1:aa:69:fe:6f:
         9c:c3:d8:81:da:15:35:e7:01:f6:0a:04:1c:db:c3:81:43:cb:
         61:06:5f:59:3e:8b:f2:ff:05:33:91:23:ee:b0:cc:35:6a:7d:
         b8:58:aa:c0:c8:e7:07:e5:33:27:af:c7:66:18:21:a5:49:8b:
         a7:d9:6a:b8:f7:ce:da:a9:1f:c8:c5:5d:1e:71:07:82:c1:fe:
         f3:04:d9:f9:10:a9:9a:f0:4b:02:1a:9d:81:88:d1:a4:9d:f3:
         a9:1a:55:ab:cd:4d:18:41:0e:cd:29:6d:22:d4:81:fa:cd:5e:
         c6:cf:e0:75:27:37:ee:92:33:d3:60:da:0b:4b:87:4c:0a:34:
         1e:fc:eb:84:53:7f:63:85:bd:b0:68:3f:47:0d:96:0a:85:a0:
         a7:31:54:d5:f0:47:3f:10:bd:10:e1:ef:4c:b1:fb:de:fd:60:
         bd:41:d5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:56:45 2026 by rpki-client