Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft
File:                     lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft (raw, json)
Hash identifier:          Nxwc+48lA10Jj7K7VF0t4X9ITwiUVufsPbfqC/WHSNA=
Subject key identifier:   F4:DA:62:A1:F6:E8:89:E6:FA:A0:56:66:DE:E9:E0:7D:14:B2:B8:D0
Authority key identifier: 94:C4:1F:1A:A6:0E:D6:50:E0:FD:7A:7A:8D:23:7A:2D:46:B1:B1:F8
Certificate issuer:       /CN=A9174F24/serialNumber=94C41F1AA60ED650E0FD7A7A8D237A2D46B1B1F8
Certificate serial:       0220
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft
Manifest number:          0219
Signing time:             Fri 25 Sep 2026 02:59:57 +0000
Manifest this update:     Fri 25 Sep 2026 02:59:56 +0000
Manifest next update:     Fri 02 Oct 2026 02:59:56 +0000
Files and hashes:         1: lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl (hash: /GDYRcpNkxVpeT305rWfbiRTTd9H00b81hXJ/vsMTAA=)
                          2: F7C7803489F311EE9AD0D13CC4F9AE02.roa (hash: LSGqnHSpVE6t1VnR1CP7MXHTDo/gjQidyC59lrbruAM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl
                          rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 02:59:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 544 (0x220)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174F24, serialNumber=94C41F1AA60ED650E0FD7A7A8D237A2D46B1B1F8
        Validity
            Not Before: Sep 25 02:59:56 2026 GMT
            Not After : Oct  2 02:59:56 2026 GMT
        Subject: CN=6ab5e3ac-8517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c1:6f:74:04:15:87:2a:e7:c7:fb:cd:6b:4c:
                    7b:4a:7e:51:e6:68:ca:4b:36:df:ec:7c:2f:7c:92:
                    74:c5:11:5d:56:05:92:a8:5f:ee:d3:62:bb:20:eb:
                    7a:a8:1e:16:43:55:2b:a1:5b:df:25:76:fd:2f:9a:
                    a6:a6:ec:f2:bd:25:75:4d:4c:70:f1:e8:42:3b:d5:
                    04:4b:2f:d8:b0:78:32:ee:90:50:5a:57:b9:3d:f8:
                    a4:7f:8c:54:d6:21:48:d2:5a:92:48:27:26:40:9e:
                    9c:ca:29:86:c7:09:e5:2f:4b:a8:8b:70:74:c1:00:
                    74:ad:ed:5d:cd:20:91:54:b6:20:a7:57:77:76:ae:
                    be:31:8d:4d:62:78:f4:24:1a:23:5c:05:f0:12:25:
                    83:11:81:d7:9e:2b:a9:97:91:18:da:12:14:ba:b0:
                    ed:92:5a:cd:d1:d6:0b:ec:ee:7a:24:a4:89:38:00:
                    63:a4:f1:df:8b:58:e9:2e:64:77:37:74:3a:79:a6:
                    82:2b:7e:26:23:25:7e:4e:7c:86:23:a5:76:f4:9c:
                    c4:31:40:44:0d:f7:78:a1:27:7e:43:d9:74:78:f2:
                    bb:c2:3d:d3:16:14:32:7e:5e:37:29:a7:eb:d7:b0:
                    32:36:db:f5:1f:eb:80:ba:a5:cb:05:4d:b0:05:3e:
                    df:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:DA:62:A1:F6:E8:89:E6:FA:A0:56:66:DE:E9:E0:7D:14:B2:B8:D0
            X509v3 Authority Key Identifier:
                keyid:94:C4:1F:1A:A6:0E:D6:50:E0:FD:7A:7A:8D:23:7A:2D:46:B1:B1:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:d3:de:4e:94:e7:37:d5:1f:00:a6:4f:dc:ca:dd:16:26:c6:
         ef:ae:5f:46:da:54:4b:9d:70:01:e8:fe:2b:06:3f:34:f3:4b:
         ed:45:3c:50:ea:f4:1f:db:46:83:47:f4:d7:93:11:e8:db:b9:
         82:ab:97:df:54:86:19:90:d3:7a:72:4c:b6:25:57:d2:5b:ed:
         e3:14:1e:cc:6e:83:14:78:87:4a:46:bd:95:c0:14:11:ab:f6:
         92:fa:c9:7f:16:35:45:38:91:bb:35:26:8f:05:ab:b6:a6:42:
         48:37:ca:57:e6:e9:6b:bb:a2:50:fa:8a:77:fd:5c:aa:08:d8:
         4e:c3:35:e9:ab:ba:8b:f6:68:be:9f:fb:76:39:34:69:4d:cd:
         6d:e6:9d:eb:c5:dd:7b:c6:06:a2:8e:a5:0a:d3:07:8c:f9:c3:
         83:94:d6:bb:18:9a:a7:bf:f2:78:2c:83:80:0b:87:d5:c7:02:
         e4:2b:4e:80:fc:37:f7:9b:56:58:88:ca:e6:54:66:3d:b3:b6:
         f7:ca:c4:a9:65:be:bb:11:ab:4f:a5:3a:1d:aa:1c:60:ed:25:
         61:d7:f3:6e:5c:6e:03:1d:3f:19:66:3b:86:e2:73:80:5c:39:
         f0:4d:00:ee:10:d2:36:4a:d1:6a:5d:52:bb:c5:ee:4a:24:ff:
         f9:b2:43:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:26:25 2026 by rpki-client