Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft
File:                     loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft (raw, json)
Hash identifier:          VnW7K7RRga1zN9H3Hb/T8VCeUvPb3+6Op2cpGWzNCXc=
Subject key identifier:   7B:96:F2:9C:BD:89:B2:17:8D:4C:FF:C0:81:76:B9:DE:AF:29:34:4D
Authority key identifier: 96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6
Certificate issuer:       /CN=A91514B1/serialNumber=9682C2ABE25323580776B1D0E275D2FD2D697EB6
Certificate serial:       0640
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft
Manifest number:          061C
Signing time:             Wed 22 Jul 2026 23:37:04 +0000
Manifest this update:     Wed 22 Jul 2026 23:37:04 +0000
Manifest next update:     Wed 29 Jul 2026 23:37:04 +0000
Files and hashes:         1: loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl (hash: hP9PsxOw73+KZjNLcTb4ZeT3j6VsZ8Z5NehbkLs0GBw=)
                          2: AE8BB766178911EC876F5F50C4F9AE02.roa (hash: +d1MUKmmVJG/vsTFf7Frn1NwsWtESd/BW6+x47gDzSQ=)
                          3: F1C7A044D91E11EFAD3C7613C4F9AE02.roa (hash: iuk/ykP+WarrOSzWEJv6JFHYe5vwgB3sie5LRWLne0s=)
                          4: D3D36BE0271011ECA0D7D95AC4F9AE02.roa (hash: 3HHpLWwhlM54c0ygayHpZ//nfGJy4YzZlrDagN2/hEE=)
                          5: AF0A3F14178911EC876F5F50C4F9AE02.roa (hash: Ae3vnYMRPKUdXa+CO5NCrtQU86FdJMZKr59EI0hk4E8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl
                          rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:37:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1600 (0x640)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91514B1, serialNumber=9682C2ABE25323580776B1D0E275D2FD2D697EB6
        Validity
            Not Before: Jul 22 23:37:04 2026 GMT
            Not After : Jul 29 23:37:04 2026 GMT
        Subject: CN=6a615420-1f3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:92:df:c5:c9:76:e3:26:db:38:24:6f:01:2d:
                    6d:32:b5:ac:66:e6:49:82:98:c3:0f:90:e5:0f:35:
                    f6:fc:4f:ba:49:39:9e:1c:81:ad:05:8d:16:f2:0e:
                    9b:cb:ab:b4:52:66:3b:ef:2c:85:9b:25:ef:d9:8b:
                    44:79:7c:d3:43:bb:49:d6:d5:3f:8f:91:ce:6d:c1:
                    c2:04:ec:17:0c:b9:c5:c7:34:d4:04:25:68:32:36:
                    e0:6c:99:4a:c4:7e:cf:c3:2a:1a:3a:17:c6:3c:83:
                    c7:38:0f:13:f1:db:c7:0f:60:c6:e9:ad:18:a2:c7:
                    0b:21:47:46:23:55:83:5c:56:ab:2d:ec:88:ce:1d:
                    e9:4a:00:db:2a:86:43:24:5d:e5:3e:22:65:3f:e7:
                    e9:bc:39:8f:44:4b:80:86:0d:43:5f:95:a2:46:b8:
                    ee:d3:5e:a5:88:d0:7a:a7:f4:06:e7:97:ce:1c:6e:
                    14:ed:dd:03:fe:7b:1d:cf:3a:56:fe:f2:32:7c:ff:
                    4c:0c:b5:f3:b1:f3:ee:0f:9b:07:0b:49:bc:9e:df:
                    43:c4:a4:5b:78:79:49:49:e8:9c:b5:e4:73:68:9a:
                    ad:8a:7d:61:70:9a:b0:8a:cc:75:82:3c:cb:46:63:
                    e0:e6:3c:05:ef:e1:38:1b:c9:ab:d6:9c:7a:30:54:
                    12:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:96:F2:9C:BD:89:B2:17:8D:4C:FF:C0:81:76:B9:DE:AF:29:34:4D
            X509v3 Authority Key Identifier:
                keyid:96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:bb:17:68:8d:a7:88:54:4c:4f:81:ee:b9:0a:4f:67:c9:ab:
         a1:eb:09:9f:af:f1:e5:2d:76:4e:e3:aa:fc:0a:dc:3d:ea:6c:
         3f:3b:1c:1d:61:f6:60:e6:52:b4:c3:7f:5c:83:63:aa:5d:da:
         d3:2b:10:20:41:b1:ee:c3:ee:0f:40:bc:23:f9:76:9e:6c:c0:
         1b:ea:82:51:7e:2d:5e:79:71:81:ec:8a:87:35:06:e2:61:8d:
         e6:c0:fa:e5:eb:e2:05:c5:59:61:c1:89:22:18:f1:50:2f:56:
         24:1c:5a:b5:98:2b:50:d5:15:7a:1e:80:6e:78:bb:8b:99:1c:
         cd:f0:18:4f:58:21:0a:55:79:c4:5d:2b:91:f6:e1:48:24:57:
         46:c6:b4:d9:df:5f:8d:c6:5f:e8:56:ec:ab:7a:06:eb:b4:23:
         97:03:ca:68:20:8f:d0:60:fd:d1:c0:79:be:fa:20:45:f0:16:
         13:41:ea:aa:bd:56:c6:c6:23:4b:9b:c7:c4:2e:ff:da:52:82:
         42:1c:9d:60:db:30:5e:c5:5d:9c:f0:39:4f:ce:28:46:f2:e1:
         68:0a:92:36:94:da:1d:8a:23:78:ef:ad:41:88:39:b0:1f:f2:
         75:55:f1:a3:82:70:97:d1:92:09:9d:a1:f9:fa:d5:29:9a:89:
         3a:aa:a0:b1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTE0QjExMTAvBgNVBAUTKDk2ODJDMkFCRTI1MzIzNTgwNzc2QjFEMEUyNzVEMkZE
MkQ2OTdFQjYwHhcNMjYwNzIyMjMzNzA0WhcNMjYwNzI5MjMzNzA0WjAYMRYwFAYD
VQQDEw02YTYxNTQyMC0xZjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlJLfxcl24ybbOCRvAS1tMrWsZuZJgpjDD5DlDzX2/E+6STmeHIGtBY0W8g6b
y6u0UmY77yyFmyXv2YtEeXzTQ7tJ1tU/j5HObcHCBOwXDLnFxzTUBCVoMjbgbJlK
xH7PwyoaOhfGPIPHOA8T8dvHD2DG6a0YoscLIUdGI1WDXFarLeyIzh3pSgDbKoZD
JF3lPiJlP+fpvDmPREuAhg1DX5WiRrju016liNB6p/QG55fOHG4U7d0D/nsdzzpW
/vIyfP9MDLXzsfPuD5sHC0m8nt9DxKRbeHlJSeicteRzaJqtin1hcJqwisx1gjzL
RmPg5jwF7+E4G8mr1px6MFQSFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHuW8py9
ibIXjUz/wIF2ud6vKTRNMB8GA1UdIwQYMBaAFJaCwqviUyNYB3ax0OJ10v0taX62
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTRCMS83QTg4NjRBQ0ZC
RTQxMUVCODJCNjI2NEZDNEY5QUUwMi9sb0xDcS1KVEkxZ0hkckhRNG5YU19TMXBm
clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2xvTENxLUpUSTFnSGRySFE0blhTX1MxcGZyWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MTRCMS83QTg4NjRBQ0ZCRTQxMUVCODJCNjI2NEZDNEY5QUUwMi9sb0xDcS1KVEkx
Z0hkckhRNG5YU19TMXBmclkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlrsXaI2niFRMT4HuuQpPZ8mroesJn6/x5S12TuOq/ArcPepsPzscHWH2YOZS
tMN/XINjql3a0ysQIEGx7sPuD0C8I/l2nmzAG+qCUX4tXnlxgeyKhzUG4mGN5sD6
5eviBcVZYcGJIhjxUC9WJBxatZgrUNUVeh6Abni7i5kczfAYT1ghClV5xF0rkfbh
SCRXRsa02d9fjcZf6Fbsq3oG67QjlwPKaCCP0GD90cB5vvogRfAWE0Hqqr1WxsYj
S5vHxC7/2lKCQhydYNswXsVdnPA5T84oRvLhaAqSNpTaHYojeO+tQYg5sB/ydVXx
o4Jwl9GSCZ2h+frVKZqJOqqgsQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:14:20 2026 by rpki-client