Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft
File:                     Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft (raw, json)
Hash identifier:          Xlryn+d9koyh2Pumn8Dx5iLfZNg0hAq9RtksSDcvx0Q=
Subject key identifier:   B6:AA:45:E4:32:80:5A:5C:F6:8D:12:F2:97:08:2E:EB:FD:18:C4:3A
Authority key identifier: 2E:8D:AF:49:E2:7E:4F:C1:2B:E0:5E:F7:DF:1A:82:BB:28:71:26:A1
Certificate issuer:       /CN=A91325FD/serialNumber=2E8DAF49E27E4FC12BE05EF7DF1A82BB287126A1
Certificate serial:       35E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft
Manifest number:          35A5
Signing time:             Wed 22 Jul 2026 14:15:41 +0000
Manifest this update:     Wed 22 Jul 2026 14:15:40 +0000
Manifest next update:     Wed 29 Jul 2026 14:15:40 +0000
Files and hashes:         1: Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl (hash: MHLHbFHAJ7RdxugxXL7UYPta/ZkSB6Ge4ig2VyG86ig=)
                          2: 58C5CA92AF9411EE9774D74CC4F9AE02.roa (hash: aMHBQ0J7YfPV7IMIB5NQWhqNvs3O4UzTOKWMInuGuiI=)
                          3: 6A45D74E118811EE88E9FE46C4F9AE02.roa (hash: mRRQUvKxyPfmPaRjVyhQzZiLqbyD63uPoSK3GiULemA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl
                          rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13798 (0x35e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91325FD, serialNumber=2E8DAF49E27E4FC12BE05EF7DF1A82BB287126A1
        Validity
            Not Before: Jul 22 14:15:40 2026 GMT
            Not After : Jul 29 14:15:40 2026 GMT
        Subject: CN=6a60d08d-854f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9e:60:63:fd:7e:4a:1a:d5:5f:22:3d:a7:8c:
                    40:0e:cb:01:e4:a3:1a:e7:38:cd:e4:27:4c:5f:4b:
                    70:f4:b2:0d:88:7a:e4:ac:a9:60:f7:62:78:a9:b6:
                    35:c6:4e:39:26:5b:a5:33:90:45:9d:21:5d:ea:16:
                    0e:b5:6f:f7:b8:6f:cd:8a:61:7a:70:89:55:fe:1c:
                    43:50:27:c8:d6:78:43:df:d8:42:91:bc:d5:37:9d:
                    4f:83:5b:4a:65:2e:fc:40:d3:b5:91:74:80:24:e9:
                    12:1d:34:1d:63:42:55:af:2c:85:55:a2:0b:c2:64:
                    3d:af:97:3d:47:d2:4b:41:7a:d7:11:19:1a:63:fa:
                    8a:dc:58:a4:18:94:eb:12:1c:14:a9:98:d1:61:86:
                    28:03:b3:99:39:78:c1:cf:57:92:c3:51:55:43:ae:
                    13:8f:a6:35:84:91:82:e3:1e:a1:60:b8:cc:17:97:
                    6a:f8:23:34:88:8b:ba:dd:3a:19:e7:f5:f8:8a:1e:
                    0c:99:0e:49:58:bc:25:db:da:f1:9c:6c:ea:49:70:
                    07:70:2a:30:73:a3:fc:f6:8b:b8:cd:77:41:22:07:
                    c4:32:9b:5d:44:60:f9:d8:b4:57:e7:1b:48:b2:60:
                    5f:3f:65:5a:2e:03:cc:f5:75:20:b0:b4:4f:e1:3a:
                    20:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:AA:45:E4:32:80:5A:5C:F6:8D:12:F2:97:08:2E:EB:FD:18:C4:3A
            X509v3 Authority Key Identifier:
                keyid:2E:8D:AF:49:E2:7E:4F:C1:2B:E0:5E:F7:DF:1A:82:BB:28:71:26:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:7b:b3:cd:f3:01:50:b4:c3:93:56:ca:93:6f:dc:0c:5b:f7:
         07:88:e9:6d:af:f8:91:33:74:f1:8c:44:95:fd:f5:2b:2d:23:
         04:17:f2:ce:28:c8:0c:61:ae:01:7c:69:1b:91:0a:7c:d9:26:
         41:dc:9d:5b:c3:dc:2d:5d:1e:04:76:23:fc:02:3d:10:d6:61:
         23:84:1e:77:37:7d:45:d1:00:3f:94:93:13:b6:e1:73:85:5d:
         fb:18:9a:b3:3c:bb:ca:e0:b1:cb:7e:64:82:db:73:1a:72:dd:
         bb:90:f6:b3:8d:7d:ac:f5:4f:16:73:e3:9a:ed:81:8e:ad:f0:
         b0:df:b3:03:a6:0b:0c:9e:2b:3b:25:8f:05:23:04:e6:92:91:
         1e:c2:27:8a:73:ac:6b:f5:35:7b:a7:23:5e:50:35:57:3c:09:
         9f:67:6c:07:19:b4:06:d5:95:29:3a:e2:8f:4c:bf:d3:93:c6:
         13:8a:51:88:8d:68:14:4c:8a:18:02:d5:ea:de:d1:fd:8a:c4:
         53:30:bf:5b:8d:e4:ed:36:26:6b:9c:eb:d4:cf:06:52:af:49:
         58:9b:cf:33:04:d2:89:32:0c:95:91:10:0e:03:9f:75:2e:81:
         68:b9:ea:78:be:29:7e:66:c3:00:60:1e:f4:f1:6b:11:75:36:
         2d:8d:c9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:27 2026 by rpki-client