Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft
File:                     s-lBocVdFIOrV5HZSYdQ492t7cw.mft (raw, json)
Hash identifier:          kLC71KQvPMto9rcIBIX27fgtM9SiuU1ozfcSAkbUbTg=
Subject key identifier:   57:B8:C6:F4:4D:EE:80:2F:C0:7A:C7:6E:2A:F3:54:6D:D9:38:6C:85
Authority key identifier: B3:E9:41:A1:C5:5D:14:83:AB:57:91:D9:49:87:50:E3:DD:AD:ED:CC
Certificate issuer:       /CN=A913B018/serialNumber=B3E941A1C55D1483AB5791D9498750E3DDADEDCC
Certificate serial:       01D5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s-lBocVdFIOrV5HZSYdQ492t7cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft
Manifest number:          01CF
Signing time:             Thu 23 Jul 2026 05:04:54 +0000
Manifest this update:     Thu 23 Jul 2026 05:04:53 +0000
Manifest next update:     Thu 30 Jul 2026 05:04:53 +0000
Files and hashes:         1: s-lBocVdFIOrV5HZSYdQ492t7cw.crl (hash: F1M3nkOh5AXb563wU6ogJjFgGdpAkX0x8bsS+S2cusw=)
                          2: 8B097276C5F911EE8D0FDF82C4F9AE02.roa (hash: O+F2f0VhvNnWnKbzy9esY0C22BqTbjq93BfHVqmsqRo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.crl
                          rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s-lBocVdFIOrV5HZSYdQ492t7cw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:04:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 469 (0x1d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B018, serialNumber=B3E941A1C55D1483AB5791D9498750E3DDADEDCC
        Validity
            Not Before: Jul 23 05:04:53 2026 GMT
            Not After : Jul 30 05:04:53 2026 GMT
        Subject: CN=6a61a0f6-7ed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:17:56:8f:ab:11:59:d3:4a:2f:d3:dd:54:ed:
                    78:b7:85:27:e6:4f:ff:81:43:3c:17:8b:e9:31:33:
                    25:e0:cc:45:d5:82:b6:78:73:ca:eb:b1:89:23:27:
                    9a:a9:c3:ed:90:01:61:ad:be:f2:f9:bd:f7:e0:8b:
                    86:b8:a2:72:9c:64:10:d8:45:97:f9:25:d8:f1:ae:
                    81:58:88:eb:bb:cd:24:47:6b:b0:69:39:69:87:3d:
                    1b:55:6e:2a:77:ca:ae:a1:8e:f1:63:d5:60:92:29:
                    07:c2:36:b7:d0:b1:71:8d:ee:88:23:1e:4c:21:6e:
                    3d:02:cb:63:b1:db:6b:ff:c7:34:bc:f2:3a:f7:82:
                    ca:56:77:84:dc:15:eb:0f:d1:23:b5:d7:89:52:06:
                    ac:7d:7c:6c:d5:9a:81:4a:9f:8e:6e:e0:03:e3:28:
                    ab:f7:18:a6:45:09:bd:76:5e:c9:62:68:64:35:c9:
                    22:92:09:ce:89:d8:28:fe:24:6c:99:4d:eb:64:3e:
                    06:51:72:a5:02:c2:1e:1c:00:5f:47:6a:67:18:2d:
                    ed:20:8c:a0:46:97:33:f0:b0:5d:c1:58:f1:23:a2:
                    de:a1:71:ba:de:e7:ce:e8:0e:62:ee:c4:a5:3c:84:
                    49:d3:20:a2:fa:df:55:df:33:8c:66:22:b4:33:f1:
                    e9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B8:C6:F4:4D:EE:80:2F:C0:7A:C7:6E:2A:F3:54:6D:D9:38:6C:85
            X509v3 Authority Key Identifier:
                keyid:B3:E9:41:A1:C5:5D:14:83:AB:57:91:D9:49:87:50:E3:DD:AD:ED:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s-lBocVdFIOrV5HZSYdQ492t7cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:f6:01:ef:6a:80:77:e2:70:82:76:94:9d:a4:09:47:4f:80:
         7f:8f:86:34:a5:88:ba:f8:ef:07:05:7b:30:ce:8a:a0:02:99:
         5b:c4:90:95:22:51:98:fa:90:ca:f8:04:b0:fe:64:f9:45:76:
         d0:75:a9:db:75:4a:3c:75:f5:2a:e7:2d:0a:01:1e:c7:af:f0:
         72:0e:33:20:d5:81:98:b3:6a:0c:98:cc:44:e6:66:94:37:9f:
         7e:d6:31:83:4b:08:db:a7:25:90:31:1a:20:b0:8f:93:aa:20:
         ff:3a:67:6c:7c:d2:8f:e7:74:de:13:1e:90:42:bc:ff:8c:6f:
         9e:0e:0b:56:43:64:75:73:d7:a4:8e:16:ab:18:27:25:21:ed:
         17:be:7c:1c:cd:81:b0:fb:50:55:96:64:ac:ba:08:da:0d:a6:
         69:f0:e5:e8:5e:71:47:b2:bb:b5:c0:76:e7:30:05:f5:af:95:
         69:99:50:6c:d1:2f:c4:c0:95:71:cd:4b:4c:24:cc:23:9b:21:
         d7:d7:6d:a2:8c:36:b2:e9:f0:c2:a3:03:a7:fb:36:4d:2f:3c:
         7a:bf:cc:e9:f0:7e:8f:f2:c0:94:c9:bb:44:ea:ec:24:1f:12:
         2f:a1:9f:73:cd:5e:a2:0c:1d:ee:87:43:d1:e2:ac:67:bb:17:
         40:3f:77:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:44:54 2026 by rpki-client