Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft
File:                     loNUUNMhwefEjKDF3NK6bB0tSPE.mft (raw, json)
Hash identifier:          qoy4PJV8VwufVsKFNVON2/NGPQResbXJC1TtyhIcP/c=
Subject key identifier:   C3:C8:40:92:D0:85:AE:C6:FF:1B:D2:6D:D8:4B:56:49:85:D9:E2:2B
Authority key identifier: 96:83:54:50:D3:21:C1:E7:C4:8C:A0:C5:DC:D2:BA:6C:1D:2D:48:F1
Certificate issuer:       /CN=A912DF25/serialNumber=96835450D321C1E7C48CA0C5DCD2BA6C1D2D48F1
Certificate serial:       0180
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft
Manifest number:          016D
Signing time:             Thu 23 Jul 2026 06:18:00 +0000
Manifest this update:     Thu 23 Jul 2026 06:17:59 +0000
Manifest next update:     Thu 30 Jul 2026 06:17:59 +0000
Files and hashes:         1: loNUUNMhwefEjKDF3NK6bB0tSPE.crl (hash: ITwDfKUMGxH2/aQWZk+gKDUyhu47uXTNjwEdigHG3zg=)
                          2: 047C04705AC911EF9DF4275AC4F9AE02.roa (hash: rX5GXOpzN7zlqlxxBRKlBapjNOnn5ERzfr6wi0h0HHo=)
                          3: 050079585AC911EF9DF4275AC4F9AE02.roa (hash: cOFr30T5Sd5bA+9nAjs/xIKvrhVxSk/iBKwzS2ubtBQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.crl
                          rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:17:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 384 (0x180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DF25, serialNumber=96835450D321C1E7C48CA0C5DCD2BA6C1D2D48F1
        Validity
            Not Before: Jul 23 06:17:59 2026 GMT
            Not After : Jul 30 06:17:59 2026 GMT
        Subject: CN=6a61b218-a069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:dc:9b:60:14:f5:bd:71:63:8e:0c:7b:dc:66:
                    75:f6:c2:70:50:95:40:4e:33:36:92:0e:01:7c:eb:
                    8d:27:3b:34:d8:fc:83:89:58:4c:ef:d9:27:6b:19:
                    ed:4a:0c:a0:34:f6:9b:14:37:b6:d9:fd:79:51:5d:
                    fc:fa:c0:d6:9e:74:76:3e:94:b5:d9:e4:c3:2d:0a:
                    4b:ab:79:19:d0:95:a1:ce:c2:32:e7:bb:93:0a:54:
                    a4:34:c7:97:c2:95:71:f2:f9:43:5a:d4:a6:c9:d7:
                    26:17:06:9a:93:1f:ae:54:d6:46:78:95:5f:ae:3b:
                    e3:56:71:a1:33:da:42:8b:05:40:05:de:16:df:ff:
                    9e:74:77:31:d6:9e:fe:c5:8d:10:9e:14:5f:e7:5b:
                    ff:fb:c1:02:14:97:1b:67:37:6e:53:3a:eb:f9:3e:
                    c3:99:16:fb:25:ea:44:cc:5d:e0:e6:8e:70:5d:e0:
                    bc:0d:18:d6:7c:c9:cf:26:a1:e9:07:d0:fc:21:39:
                    29:72:88:9e:91:db:a3:0c:62:ef:9e:99:8a:70:c7:
                    5c:c1:17:4d:4f:96:26:2f:4e:d0:c0:2a:6b:78:45:
                    ab:cb:9a:f2:e0:24:89:70:2a:c5:e2:ff:8b:87:48:
                    b5:23:84:5a:c2:6c:d2:04:9d:8d:b8:8c:f4:b1:45:
                    8b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C8:40:92:D0:85:AE:C6:FF:1B:D2:6D:D8:4B:56:49:85:D9:E2:2B
            X509v3 Authority Key Identifier:
                keyid:96:83:54:50:D3:21:C1:E7:C4:8C:A0:C5:DC:D2:BA:6C:1D:2D:48:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:ae:8c:72:6a:cb:aa:51:77:13:0c:05:56:ef:9d:6f:4c:22:
         06:3e:6b:07:b3:96:96:7c:be:81:7c:af:83:cb:d3:e9:a1:c7:
         b6:37:89:13:ce:50:be:89:4f:58:6f:55:10:3a:35:a5:ea:bd:
         15:b8:cb:5e:8c:53:f0:64:5a:62:29:86:95:4c:a2:e3:05:68:
         60:24:98:68:e6:22:4a:5a:4b:3e:86:54:1b:59:81:b0:ea:71:
         ce:64:76:69:41:0b:e2:ea:18:6a:34:27:d0:c1:a2:8d:3f:7e:
         4e:36:af:b7:5c:94:7e:98:b9:b2:bf:89:38:42:78:0f:fa:71:
         69:50:c6:b1:47:62:a6:39:0d:f3:ae:df:a7:6f:27:f2:1c:e5:
         f8:1f:9d:81:c4:8e:bd:31:7c:a1:58:d8:7b:56:17:15:93:6d:
         24:e8:a0:0f:0b:7a:c3:e1:64:0d:68:f2:96:18:9a:05:68:ba:
         02:20:8b:db:19:5a:e1:ac:5c:12:a2:8f:e4:ff:60:a1:19:be:
         e5:64:47:ac:c0:e0:fa:5e:b0:4f:4a:af:b5:91:75:b4:42:e6:
         40:4b:ae:c9:37:71:7c:16:67:3d:98:e6:c2:ea:e5:d6:b9:6c:
         57:74:af:c4:91:d1:00:02:6e:49:37:11:a5:3d:6b:1d:85:c3:
         d5:cf:11:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:32:30 2026 by rpki-client