Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/1lqglKUeKDl1O1khC2zyxUkVwB4.mft
File:                     1lqglKUeKDl1O1khC2zyxUkVwB4.mft (raw, json)
Hash identifier:          xrebI1Yyv9Nqg105bMTOWwb+9+ssCSJBlJRjxYtRujo=
Subject key identifier:   5C:E4:47:35:00:C0:10:54:66:23:5D:8D:14:AE:D1:C7:DA:A9:D8:E7
Authority key identifier: D6:5A:A0:94:A5:1E:28:39:75:3B:59:21:0B:6C:F2:C5:49:15:C0:1E
Certificate issuer:       /CN=A915C1AA/serialNumber=D65AA094A51E2839753B59210B6CF2C54915C01E
Certificate serial:       0AB5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqglKUeKDl1O1khC2zyxUkVwB4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/1lqglKUeKDl1O1khC2zyxUkVwB4.mft
Manifest number:          0AAC
Signing time:             Wed 22 Jul 2026 19:52:23 +0000
Manifest this update:     Wed 22 Jul 2026 19:52:23 +0000
Manifest next update:     Wed 29 Jul 2026 19:52:23 +0000
Files and hashes:         1: 1lqglKUeKDl1O1khC2zyxUkVwB4.crl (hash: CAiJEEnc9dGpiusb0wDIYSpEz29Gc/tSIqzaPwQbor0=)
                          2: 220853047F2211EA8E730F35C4F9AE02.roa (hash: znQul6OyL5brRd2sX66IbQ/SeaM7fHmRNN9kSf1I9Ck=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/1lqglKUeKDl1O1khC2zyxUkVwB4.crl
                          rsync://rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/1lqglKUeKDl1O1khC2zyxUkVwB4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqglKUeKDl1O1khC2zyxUkVwB4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:52:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2741 (0xab5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C1AA, serialNumber=D65AA094A51E2839753B59210B6CF2C54915C01E
        Validity
            Not Before: Jul 22 19:52:23 2026 GMT
            Not After : Jul 29 19:52:23 2026 GMT
        Subject: CN=6a611f77-a715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4b:6e:bf:f3:17:ed:35:bf:d7:48:5a:1b:e6:
                    e2:56:29:ff:56:c8:6b:4f:41:2f:83:1b:38:b2:80:
                    ac:33:ef:cd:00:81:5a:cb:3e:a7:ed:09:24:81:70:
                    da:70:5d:88:a2:db:e1:de:f8:7f:c5:9d:db:0c:f6:
                    14:f8:81:58:99:33:01:0d:fb:78:50:65:1e:42:9d:
                    c6:6e:bb:82:6a:b8:17:de:e2:5f:11:45:ac:ec:f8:
                    32:b3:2d:07:ce:c6:9f:0b:a4:9b:1b:80:8a:98:5f:
                    78:d9:ec:0a:64:26:af:74:89:f1:7f:10:a2:3a:c7:
                    3f:b6:7b:dc:91:82:bf:51:8d:d8:c1:d3:7e:c9:db:
                    fd:d5:05:27:59:a6:57:19:37:4f:4f:97:3b:e5:03:
                    02:eb:b1:6b:72:d3:24:c7:4c:a8:37:32:48:f1:fa:
                    ba:9f:74:30:ee:7f:6e:da:01:d4:7d:86:d2:3d:be:
                    a1:5e:4f:a7:53:b7:20:d3:cc:40:c7:43:21:44:ab:
                    33:08:ad:24:2f:5a:36:34:29:f5:00:7e:22:e6:14:
                    ab:2c:f7:65:03:93:97:68:fc:01:70:a6:91:32:27:
                    bc:87:44:9e:3c:ed:85:57:82:8e:3c:fa:d6:ba:39:
                    39:e2:81:b1:60:a1:6d:21:05:1d:7d:40:21:89:43:
                    6e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E4:47:35:00:C0:10:54:66:23:5D:8D:14:AE:D1:C7:DA:A9:D8:E7
            X509v3 Authority Key Identifier:
                keyid:D6:5A:A0:94:A5:1E:28:39:75:3B:59:21:0B:6C:F2:C5:49:15:C0:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/1lqglKUeKDl1O1khC2zyxUkVwB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqglKUeKDl1O1khC2zyxUkVwB4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/1lqglKUeKDl1O1khC2zyxUkVwB4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:bd:c7:54:ee:75:62:33:f8:52:49:b9:a8:32:15:10:d2:15:
         da:0b:0d:6d:53:c5:ec:eb:08:a9:56:7f:b5:0b:56:e7:fe:51:
         62:24:9b:d7:0e:2e:c0:ce:59:e7:15:ba:f1:ed:b7:53:cb:a8:
         c6:80:66:35:d3:97:0a:fd:e5:04:3e:bb:9d:a8:36:88:21:bd:
         aa:63:87:0f:03:29:4b:e4:5a:14:3a:31:58:a8:8e:74:19:ae:
         95:48:30:5a:58:ba:ba:0d:17:7a:68:9c:ff:cf:d9:93:f7:ef:
         f7:d8:c8:45:45:ca:0f:90:99:a2:3e:6c:88:a1:33:da:82:28:
         e3:54:d7:3c:15:60:f2:f5:b8:3c:3b:4b:20:b0:6f:13:c9:ad:
         65:b7:2a:1b:15:a2:a8:ee:f5:08:88:09:28:9f:59:f9:a7:01:
         c7:68:50:1a:89:13:ed:02:05:27:e5:b9:c8:7a:71:90:af:7f:
         52:75:0e:0a:83:ce:5a:5f:e5:0a:a9:22:25:10:5d:36:79:be:
         c5:ca:aa:29:93:b8:8e:8c:26:30:c5:e7:3d:a0:0d:12:7f:70:
         e5:c5:cb:8e:10:21:c9:36:35:02:ff:8f:b2:6a:d9:d2:a3:29:
         6e:35:59:59:90:8b:80:d6:70:3b:7a:14:de:e6:9d:38:2b:9a:
         76:6e:d2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:33:11 2026 by rpki-client