Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft
File:                     LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft (raw, json)
Hash identifier:          wujlkLYZODOAI/pRM5Ja1ky/qfVRFsjWpivOBid4ydE=
Subject key identifier:   54:AA:26:43:E3:ED:FD:4C:5A:DE:A7:89:04:E5:84:03:02:CD:C5:F5
Authority key identifier: 2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70
Certificate issuer:       /CN=A912B129/serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270
Certificate serial:       01FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft
Manifest number:          01F0
Signing time:             Thu 23 Jul 2026 04:41:00 +0000
Manifest this update:     Thu 23 Jul 2026 04:41:00 +0000
Manifest next update:     Thu 30 Jul 2026 04:41:00 +0000
Files and hashes:         1: LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl (hash: 9OAPc4paQdLOBbkQ6httWSu3XjzTZUDk9KwmWFqAHvA=)
                          2: A2C289B63B0E11F1ABA6C37BA3833773.roa (hash: jmWcCNtWVugfcNe6D5Skhd/Vluv6OV5nBx2KESd91tA=)
                          3: A591C4A2933D11EEA6B4A653C4F9AE02.roa (hash: 33jY169XoCiQKnoARmSKHREnC+gvvxfcNZ2WYeIMJe4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl
                          rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:40:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 507 (0x1fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B129, serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270
        Validity
            Not Before: Jul 23 04:41:00 2026 GMT
            Not After : Jul 30 04:41:00 2026 GMT
        Subject: CN=6a619b5c-4e98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:52:03:18:7a:90:0f:c5:c5:71:f5:3f:65:40:
                    09:2d:bd:82:d7:ee:8a:20:db:1b:ae:5a:6c:93:1a:
                    9e:48:6b:a1:6d:a9:68:0c:e3:b5:fa:91:26:94:77:
                    39:8b:d1:ee:4d:d4:e2:7e:2b:4d:de:95:2d:59:c0:
                    90:68:ba:6b:9d:61:ea:52:7d:98:09:04:07:33:28:
                    b5:b6:4f:2b:39:3f:15:57:c1:7b:61:b8:7b:5b:9e:
                    a3:b3:3d:1e:3a:10:c3:e4:b4:85:06:11:4c:7c:a2:
                    bd:93:c0:2e:c7:cd:e2:60:d1:9a:4d:20:b0:1f:b0:
                    f9:ce:52:a0:42:54:37:2d:85:45:cb:df:e9:9d:d5:
                    b1:be:3c:78:cf:9c:ba:64:2e:c9:d3:ab:52:c3:9c:
                    85:80:ad:cb:d3:79:aa:74:15:7a:7c:5b:8a:1a:b3:
                    e5:a3:1d:0d:13:ec:b7:4c:d2:09:68:c9:36:ff:1b:
                    77:cb:a0:c0:b8:19:7d:c8:6c:3a:c8:5a:e4:dc:69:
                    85:d9:61:76:1c:de:43:95:c3:ec:8c:cd:22:32:3f:
                    9b:b4:63:2b:e9:f4:c9:99:5b:27:2c:c4:96:6f:58:
                    b5:1f:1b:40:c4:67:47:05:d2:ac:bd:ac:d6:f2:af:
                    3e:a8:ef:51:be:d1:f2:8f:53:e0:e8:0e:52:6c:a1:
                    94:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AA:26:43:E3:ED:FD:4C:5A:DE:A7:89:04:E5:84:03:02:CD:C5:F5
            X509v3 Authority Key Identifier:
                keyid:2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:4c:6b:f8:29:ea:af:5d:df:28:f1:55:75:94:13:d6:23:a8:
         e9:8d:7e:a1:68:32:1b:d0:09:ac:17:90:07:7e:94:3c:69:a8:
         c0:a6:bf:b3:b3:c3:af:8f:d1:9a:c4:b3:bb:3a:1d:35:dc:17:
         79:96:06:b7:72:5f:2b:57:1d:2b:c0:61:19:54:a3:37:60:89:
         7e:70:04:3c:df:b1:81:e0:43:da:f6:21:1c:33:e6:e9:e0:d5:
         23:4f:a6:15:33:61:ab:7f:2e:5e:99:c5:6d:7e:44:d0:9e:f7:
         08:b9:1d:a5:99:81:d8:9a:49:eb:3c:3e:c6:4e:fe:99:99:57:
         90:97:ca:14:2b:0b:03:9f:0b:83:9b:31:85:6f:c4:b9:5b:cf:
         ed:2d:fb:0a:27:7f:78:b0:73:29:26:d4:91:85:67:13:51:b7:
         e1:be:b9:db:8d:b8:47:40:fd:00:c1:93:eb:b3:e1:56:f4:5b:
         57:22:30:04:af:1f:f4:4b:90:d7:4c:32:f3:58:bd:e6:81:7a:
         8b:81:d6:16:2a:e9:f3:3f:49:da:ae:c5:b6:ee:9f:16:53:55:
         f1:99:b2:5d:b2:db:74:5b:92:5f:27:a3:c4:4e:2d:1e:d7:a6:
         1c:b5:46:1c:ae:b1:3b:5c:18:02:27:9b:e2:55:6f:e2:b2:3b:
         8d:2b:ec:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:40:04 2026 by rpki-client