Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft
File:                     LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft (raw, json)
Hash identifier:          8SrZomZAypDkCu/+RhbSd/pHlIjy2/Hd+4jg7RSybNY=
Subject key identifier:   41:CA:F7:1A:E3:A6:24:28:36:10:9B:C6:CF:AF:CA:CA:79:67:37:C8
Authority key identifier: 2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D
Certificate issuer:       /CN=A9175648/serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D
Certificate serial:       01C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft
Manifest number:          0189
Signing time:             Mon 21 Sep 2026 05:34:12 +0000
Manifest this update:     Mon 21 Sep 2026 05:34:12 +0000
Manifest next update:     Mon 28 Sep 2026 05:34:12 +0000
Files and hashes:         1: LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl (hash: 63uPDyG4lXZZehStU+MC0qRnw0XigiT/FkYClA6Rk8Y=)
                          2: 4E9801F4122311F1A005593E1F3D8C67.roa (hash: 9NUw/Vlq1cG4rvMjm7Tf+mY/SPVFiZPsiEtV3MAG4ts=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl
                          rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 05:34:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 449 (0x1c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175648, serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D
        Validity
            Not Before: Sep 21 05:34:12 2026 GMT
            Not After : Sep 28 05:34:12 2026 GMT
        Subject: CN=6ab0c1d4-762d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:36:e5:5b:67:1e:78:d0:a6:4b:d5:c4:d6:3a:
                    58:42:9e:45:6d:1a:50:21:7b:dc:13:dd:71:10:12:
                    b1:fd:8b:19:d4:1f:d9:25:24:ab:e4:d1:64:e7:fd:
                    5e:e0:18:fe:16:31:7c:13:57:57:90:98:43:14:5f:
                    b6:cd:5f:3a:8e:a4:ed:2a:4a:5d:0e:bf:9c:bc:76:
                    90:2f:a8:d1:22:a4:cd:3e:1c:98:d9:e1:22:fa:9a:
                    9c:c1:48:a2:09:a7:80:75:c1:4e:e5:b9:62:8e:a3:
                    72:54:dc:c0:bb:9f:b4:d2:52:79:b5:57:cb:89:04:
                    35:50:4b:d0:28:b7:7b:68:ce:6f:84:3f:49:4f:b3:
                    c6:41:5b:ba:62:ea:a7:67:8b:e2:57:bf:10:3c:3b:
                    45:c7:36:38:5b:33:b3:41:68:dd:63:5d:9b:e0:31:
                    11:0a:fb:cd:f5:1c:65:1c:03:72:17:a2:76:e6:44:
                    ca:77:2b:0e:9c:01:5c:02:6b:60:62:9a:71:e7:cc:
                    b7:0c:53:82:78:33:c2:1e:84:3a:06:5e:04:92:22:
                    dd:38:35:c5:17:2f:b3:fa:4f:f7:25:06:37:02:89:
                    6d:ef:2d:42:9f:68:a5:49:b3:f5:bc:47:de:5f:c1:
                    38:7b:0b:6f:53:43:75:99:1e:d9:76:ac:46:0d:84:
                    00:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:CA:F7:1A:E3:A6:24:28:36:10:9B:C6:CF:AF:CA:CA:79:67:37:C8
            X509v3 Authority Key Identifier:
                keyid:2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:b4:de:81:f1:07:fc:90:ed:df:06:cd:71:78:8d:87:ac:04:
         c4:54:ee:41:fc:af:f5:72:3e:c7:0a:25:85:a5:91:64:f2:c5:
         3a:06:8e:c1:72:11:95:2c:9c:75:33:42:fe:7d:c6:8e:e2:43:
         43:1d:a3:df:5f:ae:c1:75:fe:8a:e8:1b:8e:71:48:d2:f4:7c:
         fa:c3:86:75:30:15:5d:d3:a3:88:a3:ee:7c:6c:67:b7:7f:96:
         3f:36:7b:38:c5:cc:77:60:94:ff:dc:9e:e6:92:1d:8c:d3:bb:
         be:b1:37:c1:49:af:8c:7e:bf:c2:b8:a4:45:43:fc:99:03:b3:
         27:24:4a:bc:26:5e:a7:39:e6:e7:7b:bb:2c:73:c4:80:c1:74:
         c0:41:c5:af:4f:a0:d5:f5:38:1e:f3:ca:20:c9:22:da:1d:8b:
         d7:27:19:7e:63:3c:d6:83:ab:39:d1:bb:ef:31:e7:18:8b:cb:
         c6:32:56:6d:50:c6:ed:84:2f:68:0e:80:0e:7e:e5:4c:8d:0f:
         93:c1:8d:66:cd:ab:1c:e4:cf:c6:25:f3:81:34:e4:1b:73:1b:
         9b:66:96:9a:f6:05:1e:35:06:a5:fa:d4:18:7f:bf:b1:07:61:
         8b:b9:8f:3c:4d:5f:4e:39:19:3e:d3:e6:95:b4:bf:a4:98:13:
         d5:63:7f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:14:11 2026 by rpki-client