Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft
File:                     l5f3hScG7hxCxopeRQtXL47lCBg.mft (raw, json)
Hash identifier:          nP/+/vc7Z1leZHeJKSoBe2UZgV1kokLUg6xBYoZv5jw=
Subject key identifier:   52:46:E1:21:F8:EA:60:5E:F2:E7:8A:1D:52:03:3B:35:6B:8D:B8:39
Authority key identifier: 97:97:F7:85:27:06:EE:1C:42:C6:8A:5E:45:0B:57:2F:8E:E5:08:18
Certificate issuer:       /CN=A9149063/serialNumber=9797F7852706EE1C42C68A5E450B572F8EE50818
Certificate serial:       0AEA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft
Manifest number:          0AE1
Signing time:             Wed 22 Jul 2026 19:47:03 +0000
Manifest this update:     Wed 22 Jul 2026 19:47:02 +0000
Manifest next update:     Wed 29 Jul 2026 19:47:02 +0000
Files and hashes:         1: l5f3hScG7hxCxopeRQtXL47lCBg.crl (hash: FYex99Phrm697JGIDbezPyw8l5c0a9SddKelpQbK9xU=)
                          2: 1EDD32B274BE11EA97202132C4F9AE02.roa (hash: SrQx35DtVrxCsWAmfoF73hHpqsoh3DRvVDcP3/ka8L0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.crl
                          rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2794 (0xaea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149063, serialNumber=9797F7852706EE1C42C68A5E450B572F8EE50818
        Validity
            Not Before: Jul 22 19:47:02 2026 GMT
            Not After : Jul 29 19:47:02 2026 GMT
        Subject: CN=6a611e37-74d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:40:23:80:28:98:77:85:52:c1:a7:91:b8:a9:
                    22:ea:c8:09:59:ef:d4:93:0d:3e:02:67:cb:56:64:
                    48:e5:65:c2:b7:c1:ee:af:16:a6:71:13:8b:56:66:
                    1f:04:37:05:dc:e7:d0:cd:c2:2a:58:bb:cd:be:61:
                    09:d1:1c:53:46:75:9f:d1:4a:7e:7c:2b:fa:34:77:
                    a8:a5:c4:17:db:09:58:ff:68:9a:77:70:ab:c3:70:
                    b4:4a:a9:35:39:a2:d5:d6:55:44:70:30:1d:8b:d0:
                    e5:b9:29:54:45:f6:ab:2d:89:57:7a:36:d6:12:85:
                    11:a0:cc:99:8d:9d:42:04:ee:17:09:11:ef:0c:70:
                    69:62:8a:88:ab:63:1f:fc:f1:4e:39:01:cd:58:c3:
                    1f:26:58:8b:f7:6d:24:b9:62:84:3e:d9:ac:1b:9c:
                    fc:1c:c5:8f:22:90:2c:31:4e:79:25:3a:61:f8:ab:
                    99:fd:47:f0:54:6b:40:3c:99:9a:ca:da:79:f3:f1:
                    b1:41:66:65:d0:f3:e4:60:81:78:d3:73:61:45:bd:
                    db:e5:d0:4a:41:92:39:47:7f:15:e5:cc:22:5a:4c:
                    ff:ab:fa:18:4f:71:45:40:bf:5f:a4:10:88:e4:c5:
                    5b:92:22:93:ef:78:29:ad:25:6a:b4:fa:16:9c:5a:
                    0e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:46:E1:21:F8:EA:60:5E:F2:E7:8A:1D:52:03:3B:35:6B:8D:B8:39
            X509v3 Authority Key Identifier:
                keyid:97:97:F7:85:27:06:EE:1C:42:C6:8A:5E:45:0B:57:2F:8E:E5:08:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:86:6a:6e:94:f8:1b:d9:59:1f:e6:04:23:d1:69:e8:7f:67:
         01:32:f7:ea:06:0b:a2:c6:95:df:78:2c:56:55:f5:bb:e6:43:
         16:e2:23:c4:f5:59:08:91:8b:9b:b9:ab:98:90:18:ad:00:bd:
         42:c9:dc:b1:f9:38:86:f2:30:d5:88:23:12:65:dc:1e:b1:e6:
         48:32:ba:a4:ba:fe:5e:78:28:77:b4:a1:1c:cb:5a:3e:79:9c:
         a1:c6:86:07:db:af:1a:5f:32:f7:51:a9:c9:ab:45:25:ed:0d:
         aa:c6:45:cc:36:b9:6b:1a:03:98:35:e8:ba:28:ce:a5:d6:73:
         fd:ba:65:d2:7f:a7:f4:f9:79:c4:69:a8:aa:cc:cf:54:aa:0d:
         6a:e6:b5:fa:65:3e:25:40:c4:3c:55:c7:44:7b:ed:43:3c:0f:
         70:e0:7c:15:70:69:8b:fa:6c:33:7b:37:3e:5a:e0:e9:03:90:
         d5:d8:59:67:12:b2:f8:39:1e:53:2e:81:50:a5:22:20:78:aa:
         72:dc:bd:74:b6:7a:ee:e5:91:e4:3a:32:2a:23:b7:5c:5a:c9:
         05:39:40:18:c5:61:61:ec:0b:e7:0a:9e:40:f7:7f:02:b1:cf:
         a1:c9:17:9a:47:95:3d:2b:64:30:15:46:e2:82:fe:d4:57:40:
         84:a7:cd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:08:33 2026 by rpki-client