Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft
File:                     4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft (raw, json)
Hash identifier:          QpD8O51zC64g6X+4jSWLEVEfM6qCgYVve2CNB6Lb0rA=
Subject key identifier:   57:87:BC:5F:79:E9:8B:9D:1A:D2:DF:99:2F:A3:40:5F:21:D1:4A:19
Authority key identifier: E0:B9:A2:E9:93:9D:55:8F:18:BE:62:17:5C:95:D7:68:D2:45:D3:1F
Certificate issuer:       /CN=A915B361/serialNumber=E0B9A2E9939D558F18BE62175C95D768D245D31F
Certificate serial:       0E60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft
Manifest number:          0E4D
Signing time:             Wed 22 Jul 2026 17:58:02 +0000
Manifest this update:     Wed 22 Jul 2026 17:58:01 +0000
Manifest next update:     Wed 29 Jul 2026 17:58:01 +0000
Files and hashes:         1: 4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl (hash: aFNZp1YkC2rldh3qy8CRnDnJs29JOc67wvkTt2grFbI=)
                          2: 3D8179B431AE11F0A7D0076FC4F9AE02.roa (hash: HnvsHqcmUKW7ahLgN9nvtNlg8GIV2Dhcq2/uEZrWjX4=)
                          3: 5E6CE2C631AE11F0A9F09E0AC4F9AE02.roa (hash: bhmnlpYZPEuWaSc0+L7rL2QZ7zRKqGCV4y6eL/DlqEg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl
                          rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:58:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3680 (0xe60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B361, serialNumber=E0B9A2E9939D558F18BE62175C95D768D245D31F
        Validity
            Not Before: Jul 22 17:58:01 2026 GMT
            Not After : Jul 29 17:58:01 2026 GMT
        Subject: CN=6a6104aa-785a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0f:6d:71:33:3c:aa:8d:52:d3:8a:67:ad:19:
                    2e:b1:a9:76:0b:dc:54:1a:fe:0a:bb:b2:8c:ed:43:
                    50:06:d7:28:ad:47:7e:12:fe:8e:c8:94:94:38:71:
                    f2:30:e8:e0:c6:00:50:1d:01:ba:d8:c9:2b:eb:f1:
                    13:d4:66:8d:09:0e:66:1d:25:eb:53:a7:2a:a2:32:
                    79:27:37:35:4f:82:34:e7:68:fd:1c:81:ff:22:e4:
                    e1:60:54:48:1a:e5:cf:d4:24:d7:cd:74:4e:33:a6:
                    9b:24:47:51:22:ab:04:04:11:d9:cd:a8:0f:a7:1d:
                    08:90:e6:7a:6a:d7:ee:08:ba:9e:81:af:f2:0c:37:
                    0e:16:e8:01:d9:f5:7c:87:12:77:fb:6e:40:f0:b9:
                    15:d8:95:5c:eb:9e:af:64:ac:81:63:96:c9:8c:48:
                    35:fd:01:ed:c6:76:1a:f4:87:72:ce:5b:48:f2:c6:
                    8e:8d:9f:ee:c7:a1:55:5d:3e:ae:ea:15:ac:1f:00:
                    14:05:d7:04:f4:26:d9:55:70:ae:ee:59:f5:26:47:
                    e4:01:94:44:0b:9f:a8:46:9e:bf:3c:41:cd:92:db:
                    db:1c:03:8e:d7:3c:79:a8:b7:7f:c0:51:d8:36:8b:
                    9a:f0:26:0c:d9:0f:99:16:0d:6e:65:9f:1f:b7:b6:
                    4c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:87:BC:5F:79:E9:8B:9D:1A:D2:DF:99:2F:A3:40:5F:21:D1:4A:19
            X509v3 Authority Key Identifier:
                keyid:E0:B9:A2:E9:93:9D:55:8F:18:BE:62:17:5C:95:D7:68:D2:45:D3:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:47:21:16:88:8d:ba:da:5e:ad:1e:f0:ee:92:c6:9f:3e:63:
         79:94:9a:22:42:5a:91:55:48:70:ea:30:2d:81:de:a0:9e:d6:
         e9:99:4d:68:12:6b:fa:cd:56:64:2c:e5:4e:3d:47:f4:ca:77:
         d7:65:ec:d1:bc:61:e3:db:0a:df:06:d0:7d:fd:37:70:24:62:
         5c:a8:49:9b:67:ee:24:6f:e8:7a:22:e9:52:cc:1c:d8:47:26:
         83:fe:91:4f:5a:91:84:80:a7:81:48:95:6f:9f:42:24:e1:e5:
         f2:b0:1d:45:a0:1d:d9:31:4b:72:55:3b:06:d0:50:5f:e4:f4:
         e5:c5:a4:b5:39:ec:db:2e:11:8d:dc:1f:8c:2d:c7:13:33:ee:
         59:55:44:81:5b:cc:76:04:17:55:36:ec:33:1c:88:c3:e5:58:
         ce:ea:5d:90:61:67:80:de:26:4b:18:a8:f7:b2:53:51:06:c3:
         3c:90:82:9a:de:fe:68:36:9f:d4:cf:11:c1:e1:76:fd:e1:23:
         ea:ae:53:a8:86:79:00:ea:2c:f8:f2:7e:1c:fe:c2:85:cc:30:
         52:ed:6f:91:9f:bc:1b:cb:3f:e3:56:97:a6:dd:ed:0b:c0:7a:
         67:04:42:28:1f:3f:a2:13:b6:75:77:14:e4:14:d8:29:28:ba:
         03:9b:f4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:04:30 2026 by rpki-client