Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft
File:                     LzabRI0hcVlrosk82-JY6vMxdZQ.mft (raw, json)
Hash identifier:          2FUIc/g4ZjjNPjns8htgU1ngnEFsJG6OciItA4Wrexk=
Subject key identifier:   BC:91:BA:12:17:8E:FC:00:39:43:C1:61:C1:31:B7:6A:31:93:81:4B
Authority key identifier: 2F:36:9B:44:8D:21:71:59:6B:A2:C9:3C:DB:E2:58:EA:F3:31:75:94
Certificate issuer:       /CN=A9161A5A/serialNumber=2F369B448D2171596BA2C93CDBE258EAF3317594
Certificate serial:       079F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LzabRI0hcVlrosk82-JY6vMxdZQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft
Manifest number:          078C
Signing time:             Wed 22 Jul 2026 22:12:09 +0000
Manifest this update:     Wed 22 Jul 2026 22:12:09 +0000
Manifest next update:     Wed 29 Jul 2026 22:12:09 +0000
Files and hashes:         1: LzabRI0hcVlrosk82-JY6vMxdZQ.crl (hash: t0qRfYLFrmegEuJ9yLEbDZQRomCwJs6Ba1bEXn7Cmak=)
                          2: 79D611D265E711EBB6FD8A0DC4F9AE02.roa (hash: lSWEMS2uEe71aU2Bsm1/P/1Jz0cRE4RsE/WEknnL1vU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.crl
                          rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LzabRI0hcVlrosk82-JY6vMxdZQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:12:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1951 (0x79f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161A5A, serialNumber=2F369B448D2171596BA2C93CDBE258EAF3317594
        Validity
            Not Before: Jul 22 22:12:09 2026 GMT
            Not After : Jul 29 22:12:09 2026 GMT
        Subject: CN=6a614039-d656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:21:4e:f2:02:a5:a0:26:c0:fc:18:19:f4:09:
                    16:9f:e7:8c:dd:d1:d2:51:da:d2:1f:ec:68:51:ce:
                    f5:2e:35:f0:28:8c:8c:99:f1:9b:8f:25:34:82:6e:
                    c6:b3:3f:b8:b0:94:81:0e:e6:55:a2:92:64:1b:52:
                    9a:9e:59:c0:d8:e8:b4:12:b0:a3:0a:5b:42:f4:7e:
                    58:a9:12:11:52:30:ba:cf:5d:dc:b9:cc:9f:e6:ee:
                    e4:6e:54:ac:0d:84:86:9d:20:ed:7b:81:1e:51:67:
                    27:fa:bd:35:25:94:de:75:a8:e0:4f:8f:3a:74:7c:
                    eb:ec:1a:6e:6c:b2:ed:73:92:e5:76:dd:1f:b4:28:
                    d3:ce:97:00:b7:32:f0:c4:a4:35:5e:e7:fa:2e:4b:
                    5d:f0:12:98:f5:22:19:52:7f:14:8d:60:b4:4e:10:
                    60:cf:69:31:01:ab:c1:de:5e:50:4e:a5:66:1a:29:
                    83:e2:be:ce:c0:e0:67:29:92:3e:36:46:f3:66:6e:
                    02:30:9c:35:7b:f1:d4:26:35:bf:c9:91:30:f3:ac:
                    23:95:58:a2:f5:1a:48:7b:05:6e:62:60:75:d1:f7:
                    86:05:c9:db:b9:49:46:11:55:cf:de:85:81:a0:aa:
                    2b:ca:cc:f6:05:df:84:22:26:d5:55:c6:30:9e:a0:
                    fc:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:91:BA:12:17:8E:FC:00:39:43:C1:61:C1:31:B7:6A:31:93:81:4B
            X509v3 Authority Key Identifier:
                keyid:2F:36:9B:44:8D:21:71:59:6B:A2:C9:3C:DB:E2:58:EA:F3:31:75:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LzabRI0hcVlrosk82-JY6vMxdZQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:09:39:d4:7f:fd:2f:ab:e4:36:b4:98:37:c5:6d:1c:b3:63:
         35:9c:4b:8b:e4:da:86:9b:37:88:d8:cf:3d:8b:b6:44:fc:7e:
         b7:5f:15:20:17:69:d0:22:e4:70:6e:a5:ac:71:07:2b:0b:bb:
         7d:cc:32:f7:ce:4e:c8:67:8c:b7:7c:58:08:a9:1a:73:e0:30:
         ec:9f:c2:ed:77:0c:77:cb:b8:5f:55:f4:20:ba:30:5c:8d:e1:
         04:0b:21:f0:65:5a:66:d1:d9:54:a7:7e:09:db:10:2c:8f:6f:
         60:2e:be:2a:a8:da:24:2a:6f:bc:eb:89:af:07:2a:27:e7:7b:
         d5:86:d0:95:4c:77:86:60:11:a4:f2:d6:15:05:d7:02:21:27:
         09:2b:67:d7:5e:31:00:a8:94:5a:8f:78:be:db:c1:1f:f7:69:
         5e:10:0f:5d:68:b5:bb:9b:56:88:17:c2:e1:cc:15:eb:22:92:
         9f:7d:a3:9c:03:2a:66:dd:e6:bd:66:0b:57:7d:ea:2b:43:a3:
         0c:cc:44:fd:86:db:c3:7c:a6:c6:cd:c5:6b:e4:d0:13:62:3b:
         8e:16:c7:aa:8e:85:30:6b:f5:17:51:db:45:4e:de:ec:2b:51:
         52:a3:f7:ac:48:68:d1:6a:ac:9c:e7:75:20:3f:75:78:02:4f:
         1d:fb:cf:b9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjFBNUExMTAvBgNVBAUTKDJGMzY5QjQ0OEQyMTcxNTk2QkEyQzkzQ0RCRTI1OEVB
RjMzMTc1OTQwHhcNMjYwNzIyMjIxMjA5WhcNMjYwNzI5MjIxMjA5WjAYMRYwFAYD
VQQDEw02YTYxNDAzOS1kNjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwiFO8gKloCbA/BgZ9AkWn+eM3dHSUdrSH+xoUc71LjXwKIyMmfGbjyU0gm7G
sz+4sJSBDuZVopJkG1KanlnA2Oi0ErCjCltC9H5YqRIRUjC6z13cucyf5u7kblSs
DYSGnSDte4EeUWcn+r01JZTedajgT486dHzr7BpubLLtc5Lldt0ftCjTzpcAtzLw
xKQ1Xuf6Lktd8BKY9SIZUn8UjWC0ThBgz2kxAavB3l5QTqVmGimD4r7OwOBnKZI+
NkbzZm4CMJw1e/HUJjW/yZEw86wjlVii9RpIewVuYmB10feGBcnbuUlGEVXP3oWB
oKorysz2Bd+EIibVVcYwnqD8kwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLyRuhIX
jvwAOUPBYcExt2oxk4FLMB8GA1UdIwQYMBaAFC82m0SNIXFZa6LJPNviWOrzMXWU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUE1QS9COEJCNTY4RTY1
RTUxMUVCQTI1RjkyMEJDNEY5QUUwMi9MemFiUkkwaGNWbHJvc2s4Mi1KWTZ2TXhk
WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0x6YWJSSTBoY1Zscm9zazgyLUpZNnZNeGRaUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MUE1QS9COEJCNTY4RTY1RTUxMUVCQTI1RjkyMEJDNEY5QUUwMi9MemFiUkkwaGNW
bHJvc2s4Mi1KWTZ2TXhkWlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXAk51H/9L6vkNrSYN8VtHLNjNZxLi+Tahps3iNjPPYu2RPx+t18VIBdp0CLk
cG6lrHEHKwu7fcwy985OyGeMt3xYCKkac+Aw7J/C7XcMd8u4X1X0ILowXI3hBAsh
8GVaZtHZVKd+CdsQLI9vYC6+KqjaJCpvvOuJrwcqJ+d71YbQlUx3hmARpPLWFQXX
AiEnCStn114xAKiUWo94vtvBH/dpXhAPXWi1u5tWiBfC4cwV6yKSn32jnAMqZt3m
vWYLV33qK0OjDMxE/Ybbw3ymxs3Fa+TQE2I7jhbHqo6FMGv1F1HbRU7e7CtRUqP3
rEho0WqsnOd1ID91eAJPHfvPuQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:09:11 2026 by rpki-client