Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/2lexkcVbszGevZGC3A1Oau8-Ddg.mft
File:                     2lexkcVbszGevZGC3A1Oau8-Ddg.mft (raw, json)
Hash identifier:          mzl69bCWCqezK2sIQlLDtNpxFreUx0A+jX2iZCdbSPo=
Subject key identifier:   A4:85:05:75:54:35:7B:0B:0A:81:1D:5F:15:1B:7B:EE:1A:0B:B5:87
Authority key identifier: DA:57:B1:91:C5:5B:B3:31:9E:BD:91:82:DC:0D:4E:6A:EF:3E:0D:D8
Certificate issuer:       /CN=A912A31E/serialNumber=DA57B191C55BB3319EBD9182DC0D4E6AEF3E0DD8
Certificate serial:       026A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lexkcVbszGevZGC3A1Oau8-Ddg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/2lexkcVbszGevZGC3A1Oau8-Ddg.mft
Manifest number:          0260
Signing time:             Thu 23 Jul 2026 03:21:17 +0000
Manifest this update:     Thu 23 Jul 2026 03:21:16 +0000
Manifest next update:     Thu 30 Jul 2026 03:21:16 +0000
Files and hashes:         1: 2lexkcVbszGevZGC3A1Oau8-Ddg.crl (hash: uILzwuos02W03PZBTnleFEOgJRc+J2KVOhrap6le/qU=)
                          2: 7DA38A8E727011F08682A20EC4F9AE02.roa (hash: X373raxuE2iLwtaK4YO98Y1yBAk9TK8MxVlU8+CTPKI=)
                          3: 5181F33CE8C011EDADA54A23C4F9AE02.roa (hash: 3weaQ4o+eQXlXxL8Agh4qybWMOK+rrtdU5IbG/vM6oo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/2lexkcVbszGevZGC3A1Oau8-Ddg.crl
                          rsync://rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/2lexkcVbszGevZGC3A1Oau8-Ddg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lexkcVbszGevZGC3A1Oau8-Ddg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:21:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 618 (0x26a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A31E, serialNumber=DA57B191C55BB3319EBD9182DC0D4E6AEF3E0DD8
        Validity
            Not Before: Jul 23 03:21:16 2026 GMT
            Not After : Jul 30 03:21:16 2026 GMT
        Subject: CN=6a6188ad-d97b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ce:5f:de:f2:aa:35:b4:9f:a9:41:a2:da:df:
                    91:4d:97:12:4f:8b:50:e1:dd:28:a8:e8:fc:dc:c7:
                    5f:5b:2e:db:fe:19:cc:3d:67:be:71:62:47:00:ac:
                    67:a7:e7:cd:db:ef:e0:59:14:c7:18:74:50:17:38:
                    ab:11:ca:57:ed:d4:89:4f:2c:ea:e7:0d:6d:cf:24:
                    c1:08:01:da:14:49:ea:f0:5b:17:08:9b:39:ca:fa:
                    74:4f:3b:7c:cc:82:76:d2:fe:54:57:2e:d8:d7:de:
                    cc:4c:eb:46:03:79:bd:09:a7:b9:5f:03:be:8d:c4:
                    5c:0b:16:d2:5b:d4:14:dc:e7:3e:10:9b:55:ca:88:
                    cc:db:39:9f:59:01:72:9f:a4:ac:21:8c:22:10:fa:
                    a5:5f:5b:2a:31:df:f3:2f:59:6f:63:6a:15:b3:70:
                    60:27:7d:9c:e1:82:8a:9d:ee:8a:e2:12:ab:92:76:
                    91:8e:e0:aa:d6:19:81:ae:61:49:15:a7:36:0b:cd:
                    bd:42:1d:a4:f6:0b:90:e5:e1:63:5c:92:dd:61:f9:
                    8e:ed:1d:27:43:11:8c:ea:80:cd:b6:6f:97:48:cc:
                    f2:b4:71:52:36:90:6d:a7:b2:a5:61:99:18:d1:a2:
                    ff:d4:df:da:3b:32:89:3a:7c:24:66:42:76:3f:83:
                    f9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:85:05:75:54:35:7B:0B:0A:81:1D:5F:15:1B:7B:EE:1A:0B:B5:87
            X509v3 Authority Key Identifier:
                keyid:DA:57:B1:91:C5:5B:B3:31:9E:BD:91:82:DC:0D:4E:6A:EF:3E:0D:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/2lexkcVbszGevZGC3A1Oau8-Ddg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lexkcVbszGevZGC3A1Oau8-Ddg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/2lexkcVbszGevZGC3A1Oau8-Ddg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:b9:e4:6d:9c:5a:32:0f:1d:37:29:be:44:e2:b3:04:1c:7c:
         ba:1c:c0:f2:c7:93:b2:ee:6d:5d:e0:e7:c8:93:fe:d9:05:0f:
         c8:2d:21:d3:54:81:7f:13:13:ec:4f:d1:06:66:cb:c6:c5:81:
         ce:2f:6f:d2:1b:44:8b:c7:35:5b:e9:73:03:56:fd:e9:d7:b5:
         42:4c:53:ad:7f:54:68:75:a6:57:ef:0c:e2:25:5d:67:50:f3:
         79:b3:48:b2:01:30:0d:31:64:b6:a4:4c:b3:d3:65:47:fc:50:
         b4:63:f9:7f:4f:ec:f0:dd:82:09:8b:dd:eb:2c:f4:1c:35:79:
         03:81:e6:bc:56:2d:92:75:d4:8d:bd:fe:56:2f:8b:8c:8d:99:
         98:d9:5c:74:5a:f3:a7:d6:ec:85:12:af:ff:a8:8f:c1:d2:34:
         53:56:2e:b0:ee:38:31:db:c3:0b:4f:5e:16:45:39:95:ea:f3:
         ca:1a:bf:47:5b:9c:81:8c:02:66:8d:65:90:5e:51:8c:55:84:
         31:88:ab:9d:46:c1:54:22:49:14:a7:4a:8a:40:af:86:b1:c0:
         4a:cb:1b:fc:4d:ea:94:4d:99:5b:91:d1:de:f2:49:c5:59:a9:
         6b:71:ba:a7:cb:b3:88:c1:f8:e9:e5:c4:c4:ab:09:dc:18:ad:
         00:51:8d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:00:26 2026 by rpki-client