Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft
File:                     nL4Q18HdRLflkLUHi_xPhs-Nslo.mft (raw, json)
Hash identifier:          LMQop4Pbh8UyeEGJzOoy3NacHt9Owh9dT6q1ugqhvtc=
Subject key identifier:   60:70:01:45:BB:23:71:D4:C7:13:88:B4:04:90:89:97:F0:FE:4E:21
Authority key identifier: 9C:BE:10:D7:C1:DD:44:B7:E5:90:B5:07:8B:FC:4F:86:CF:8D:B2:5A
Certificate issuer:       /CN=A912BCAC/serialNumber=9CBE10D7C1DD44B7E590B5078BFC4F86CF8DB25A
Certificate serial:       0209
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft
Manifest number:          01FE
Signing time:             Thu 23 Jul 2026 04:31:28 +0000
Manifest this update:     Thu 23 Jul 2026 04:31:27 +0000
Manifest next update:     Thu 30 Jul 2026 04:31:27 +0000
Files and hashes:         1: nL4Q18HdRLflkLUHi_xPhs-Nslo.crl (hash: ZsvjBGdqS5ho3fljmE+qDmKt0GMmbCfoLvT80e6cNZ4=)
                          2: 43C5BAA282F411EE99AAAB12C4F9AE02.roa (hash: a1wzRh8XwhAFQd8Ja2EntSNyYcs9nQlwwooXA0U/t20=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.crl
                          rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:31:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 521 (0x209)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BCAC, serialNumber=9CBE10D7C1DD44B7E590B5078BFC4F86CF8DB25A
        Validity
            Not Before: Jul 23 04:31:27 2026 GMT
            Not After : Jul 30 04:31:27 2026 GMT
        Subject: CN=6a619920-2ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1c:22:a8:48:d7:ac:be:6a:18:e0:e9:e0:ed:
                    fc:1f:ab:76:27:54:14:02:e0:26:19:b2:be:29:e1:
                    a4:23:c3:ab:8d:95:59:c1:24:27:ca:b6:ec:90:a0:
                    39:f1:ce:d7:a1:b1:d0:5b:cd:fd:55:e2:3b:3f:d2:
                    a4:77:5b:65:80:36:c5:dd:27:27:86:ed:0e:dd:83:
                    36:1c:d6:a5:43:14:9a:8c:3d:3c:23:98:80:0e:f4:
                    00:f4:c1:a2:8a:14:4c:81:b2:e3:e1:ef:1a:0b:d4:
                    77:a1:3b:95:eb:83:1f:92:08:a4:12:50:07:41:98:
                    4b:32:fc:21:7c:53:d5:7a:e2:dc:a7:0c:27:d4:0b:
                    b6:2b:af:a1:2f:c6:ae:6a:4e:a9:51:a5:b0:4f:e0:
                    a8:40:94:35:39:98:99:a3:d0:74:c3:73:9b:bf:a8:
                    e3:b3:7d:57:6b:5d:ad:90:2f:a3:58:49:7e:21:df:
                    de:aa:3d:54:83:c9:60:72:5d:c4:ac:c3:c6:a2:9c:
                    5b:ba:c7:df:e6:a2:ad:92:e8:b9:de:b4:90:e2:cf:
                    d3:ea:78:3b:74:c1:bc:a3:53:c2:f0:45:93:5d:df:
                    9e:6e:61:65:d4:55:7a:eb:12:4c:0c:a0:ae:b6:1b:
                    27:2e:36:3c:b7:88:1b:95:c0:21:4f:8e:1f:09:c1:
                    91:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:70:01:45:BB:23:71:D4:C7:13:88:B4:04:90:89:97:F0:FE:4E:21
            X509v3 Authority Key Identifier:
                keyid:9C:BE:10:D7:C1:DD:44:B7:E5:90:B5:07:8B:FC:4F:86:CF:8D:B2:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:5b:1a:c2:03:33:61:b1:f8:c9:35:1e:8a:02:12:7e:f5:5e:
         64:af:34:85:c3:39:e8:7a:52:03:10:4e:06:cc:ea:17:e7:7a:
         ac:53:7a:7e:db:5d:1e:d2:b4:cd:cf:58:38:80:06:9f:9f:e0:
         b7:aa:15:48:9c:48:7a:c2:06:44:a7:af:f9:0d:07:3c:a4:42:
         42:0f:7c:11:80:b7:dc:33:a5:89:7e:f3:5d:89:dd:1f:e9:03:
         d1:46:ba:e5:97:ed:21:4c:a4:f6:eb:06:48:0b:1d:9d:d3:a0:
         52:49:40:13:78:00:6f:a2:e6:99:f3:24:49:a4:b5:de:4f:5a:
         c5:78:bc:29:9e:bf:5f:f3:0f:0c:ff:03:bc:c5:45:ec:16:8c:
         c5:9f:91:4b:82:9e:9f:67:84:9c:ae:aa:93:77:22:01:ec:0b:
         0a:52:99:c8:8f:d8:66:73:bd:e7:85:93:8d:c0:c5:f4:bb:8e:
         e9:5e:c3:65:9f:ae:e1:dd:01:bf:ab:be:f3:47:24:05:dd:af:
         16:06:07:47:4c:06:7f:db:18:61:fe:ed:62:df:ed:ea:a5:8b:
         09:2c:10:92:58:11:ac:4c:4b:5c:b1:4b:dd:d8:2e:62:3a:b7:
         bb:38:e6:69:2e:44:11:24:e3:09:6e:d9:6d:60:18:52:a4:b4:
         5f:50:6f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:38:19 2026 by rpki-client