Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.mft
File:                     0xLuUOZR-vA5aO306gARSeWV_A4.mft (raw, json)
Hash identifier:          EP6LIhziDAk6EpfahgN48f0I3tzfh1D/FMvx9yCOq5o=
Subject key identifier:   74:0F:6C:E7:81:84:43:4D:ED:81:B3:F8:81:6B:78:B7:4F:4D:B5:58
Authority key identifier: D3:12:EE:50:E6:51:FA:F0:39:68:ED:F4:EA:00:11:49:E5:95:FC:0E
Certificate issuer:       /CN=A9187347/serialNumber=D312EE50E651FAF03968EDF4EA001149E595FC0E
Certificate serial:       7D
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0xLuUOZR-vA5aO306gARSeWV_A4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.mft
Manifest number:          77
Signing time:             Tue 29 Sep 2026 08:27:25 +0000
Manifest this update:     Tue 29 Sep 2026 08:27:24 +0000
Manifest next update:     Tue 06 Oct 2026 08:27:24 +0000
Files and hashes:         1: 0xLuUOZR-vA5aO306gARSeWV_A4.crl (hash: qebHK0PgiOdlN/z+J1DJz3Fh8URezddApvCtKLQ4S+4=)
                          2: 8C5B4E020E3F11F18FED49E9183D8C67.roa (hash: Hz/ArrYvezX4EXJ8DDY9ijBLJGuFrjsekFb24N7uhk8=)
                          3: 69E5BC382CD811F1ACDE793A9A833773.roa (hash: smF654Hi+ihZBGyEmAdAxIkMQXLLQzXqzXf/0N/B6sI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.crl
                          rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0xLuUOZR-vA5aO306gARSeWV_A4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 08:27:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125 (0x7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187347, serialNumber=D312EE50E651FAF03968EDF4EA001149E595FC0E
        Validity
            Not Before: Sep 29 08:27:24 2026 GMT
            Not After : Oct  6 08:27:24 2026 GMT
        Subject: CN=6abb766d-0e29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:79:1f:d7:b5:0b:dc:8a:79:40:47:11:f5:6c:
                    df:16:75:55:5e:4b:6c:a9:5b:8e:ce:54:a3:b3:f4:
                    98:c8:45:cf:5a:e8:cc:3d:ba:46:c0:13:0a:67:81:
                    15:aa:f0:7b:33:83:5d:d5:4c:d6:a1:59:42:ee:59:
                    e6:df:5b:d7:24:a1:8a:63:f3:e0:17:9d:ab:c9:1e:
                    6b:68:46:20:3b:37:01:cc:5a:cf:12:f9:c0:67:60:
                    f8:59:58:6a:25:35:40:0e:05:45:bf:b2:ca:22:b8:
                    46:de:29:14:e3:a7:27:d4:fd:19:19:73:35:a9:9d:
                    12:c0:6b:b2:9f:66:47:7f:40:c0:ba:a5:a0:15:de:
                    19:af:1a:fa:91:f2:84:d0:2c:9d:44:34:cc:63:d9:
                    08:82:f2:1e:33:c7:e3:0f:13:3d:da:ec:0b:a7:07:
                    c8:05:9f:0f:0e:65:72:94:17:16:c4:d9:47:6c:d8:
                    da:b3:0b:6c:33:6f:64:3c:4e:16:0b:4f:a6:07:1f:
                    34:36:9a:ff:c7:8a:da:26:a7:a0:9d:1c:2a:6a:ec:
                    57:fc:be:08:0e:8d:36:90:73:c0:5f:63:65:e8:4f:
                    c4:97:30:8f:2a:53:f9:de:97:1a:7c:db:16:12:0d:
                    3a:9e:35:33:83:cb:d7:e7:23:cc:c3:f4:fe:8c:ff:
                    3a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:0F:6C:E7:81:84:43:4D:ED:81:B3:F8:81:6B:78:B7:4F:4D:B5:58
            X509v3 Authority Key Identifier:
                keyid:D3:12:EE:50:E6:51:FA:F0:39:68:ED:F4:EA:00:11:49:E5:95:FC:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0xLuUOZR-vA5aO306gARSeWV_A4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:72:5b:17:79:97:e5:77:97:ac:a4:ad:fb:aa:80:9c:31:cf:
         0f:f4:b7:e1:54:d3:2c:57:71:21:9f:6d:fd:de:bf:1b:37:11:
         98:3d:39:fb:74:e1:39:97:70:b2:28:c1:1b:34:89:56:5b:62:
         97:08:57:51:3d:52:52:17:77:de:02:41:f3:8c:4b:ac:a5:24:
         ce:a1:69:09:30:4f:2e:a7:3e:a9:69:fc:c5:46:a3:bf:2a:82:
         41:1f:b8:ce:34:1c:98:ca:8c:c8:40:e9:ef:f4:11:54:3a:dc:
         f8:8c:56:dc:39:aa:e0:f1:2d:95:72:b0:70:31:e7:d5:d5:71:
         b2:5f:25:66:eb:a6:27:5a:99:5f:ac:ab:63:88:57:2e:8e:63:
         80:93:84:04:68:35:81:ea:71:49:6f:d8:14:de:40:e7:84:f6:
         ae:e4:43:6d:f2:72:22:d3:1f:0b:57:7f:c0:ed:ea:11:be:4d:
         7d:c2:37:19:f0:19:95:37:2d:a3:a8:9a:61:9c:f1:ba:cb:ad:
         54:ca:45:11:37:e6:dd:af:09:7a:0c:1b:ef:3a:41:63:12:90:
         67:e7:f9:0d:e8:06:83:aa:96:14:29:76:d0:95:eb:20:fa:8c:
         b1:f0:ea:d1:86:2a:af:58:06:17:86:ad:8b:0e:20:a3:37:64:
         0d:bc:64:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:55:21 2026 by rpki-client