Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
File:                     LnG4umMF_9SMEx0IYK8sGs9tIrY.mft (raw, json)
Hash identifier:          tQtTfdjSobW+N99rGKsNmzktkbgh9JO0bryBUO7JQj8=
Subject key identifier:   4D:6D:93:68:5B:E0:C1:45:40:F7:E0:3F:01:7D:CF:C6:D7:82:FE:A5
Authority key identifier: 2E:71:B8:BA:63:05:FF:D4:8C:13:1D:08:60:AF:2C:1A:CF:6D:22:B6
Certificate issuer:       /CN=A9165D52/serialNumber=2E71B8BA6305FFD48C131D0860AF2C1ACF6D22B6
Certificate serial:       02AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
Manifest number:          029F
Signing time:             Thu 23 Jul 2026 02:43:37 +0000
Manifest this update:     Thu 23 Jul 2026 02:43:37 +0000
Manifest next update:     Thu 30 Jul 2026 02:43:37 +0000
Files and hashes:         1: LnG4umMF_9SMEx0IYK8sGs9tIrY.crl (hash: muCuE34UfCKfoblbz75jr9DCwch6ZmbmLgMf9xtFuaA=)
                          2: D08310DE94C511EDB2732947C4F9AE02.roa (hash: 2L5qZ+Uea1MHfKirYAIB35nTColOCMTSO380VpA6Q3g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.crl
                          rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:43:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 682 (0x2aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165D52, serialNumber=2E71B8BA6305FFD48C131D0860AF2C1ACF6D22B6
        Validity
            Not Before: Jul 23 02:43:37 2026 GMT
            Not After : Jul 30 02:43:37 2026 GMT
        Subject: CN=6a617fd9-c0fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ed:ed:fd:7f:83:2f:fe:f0:3b:bf:20:96:d9:
                    b5:0d:ce:e8:5f:e0:ae:50:8f:8c:ff:ef:22:6e:e5:
                    a8:06:9e:54:3f:ce:ea:79:3d:3c:f0:fb:bf:74:cc:
                    d8:fb:12:df:59:7e:0e:20:04:37:81:1d:4e:e4:f5:
                    fa:59:f1:ed:df:ac:31:ef:1d:53:53:a6:f8:4c:36:
                    d5:0a:04:88:93:bc:e3:e9:8b:b9:ec:da:42:4f:a3:
                    56:4b:2d:88:a1:97:67:2b:65:a1:33:37:2b:0b:f0:
                    d0:4d:51:cb:b4:9e:8c:f4:c4:30:54:f2:ba:85:83:
                    ee:8b:86:a5:30:e5:ec:1b:95:86:2b:7e:6a:b9:43:
                    ca:1e:d5:be:04:78:d5:1f:c8:34:f1:f4:08:31:e6:
                    fb:fe:65:5e:19:e8:9d:48:d6:36:0d:6a:8b:3a:dd:
                    09:6c:90:5c:c5:cb:c4:30:dd:5e:4e:b8:df:ea:61:
                    54:46:81:08:8d:73:f0:bb:b6:8c:f5:7a:f5:b8:55:
                    c4:28:2b:5a:99:6d:60:00:37:e3:d4:03:6a:e3:4f:
                    f1:f2:51:31:f5:36:30:a3:cc:62:10:65:78:b8:86:
                    bb:14:4e:ea:23:bb:01:f2:a2:e0:28:6a:1e:b7:dd:
                    a5:18:e0:cc:15:74:bc:52:fb:7d:40:50:d2:b9:6a:
                    19:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:6D:93:68:5B:E0:C1:45:40:F7:E0:3F:01:7D:CF:C6:D7:82:FE:A5
            X509v3 Authority Key Identifier:
                keyid:2E:71:B8:BA:63:05:FF:D4:8C:13:1D:08:60:AF:2C:1A:CF:6D:22:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:cc:db:98:43:16:36:51:a1:e9:7a:98:74:50:ef:aa:7c:bf:
         9c:df:87:69:6c:c8:e0:5e:c7:0a:7f:9f:d4:55:92:f8:52:c3:
         fc:be:ed:f0:6a:f4:7c:39:07:71:c4:c0:7a:82:bb:ae:85:0c:
         51:f7:75:c7:54:4f:11:df:11:59:e2:f6:6e:9c:01:7a:cd:aa:
         d3:96:46:86:e0:e6:bd:71:30:83:0a:03:e8:23:ce:35:d1:1b:
         7a:c3:28:9a:04:1b:18:a6:92:1b:39:26:d2:e0:70:f1:24:87:
         ff:37:7b:0a:ea:2a:7e:cb:87:af:7a:03:18:66:52:49:33:a1:
         38:c6:78:eb:35:90:b8:4c:6f:cf:fb:d3:cf:e3:b0:46:78:7b:
         aa:f3:c6:7d:b3:0f:ae:dd:ec:fd:d3:10:8e:c3:84:b5:d1:e1:
         44:30:bf:3a:9b:1f:f4:ea:13:3c:19:4e:8f:53:99:84:83:61:
         90:9f:bf:7c:85:17:e6:b1:b7:6d:4a:4d:5c:b3:2f:20:b2:b1:
         06:68:79:0c:e3:96:b5:39:ae:0b:0b:f1:bd:e0:41:c9:00:7d:
         f1:c0:b0:da:ce:36:6a:bd:5c:c9:e0:bf:75:a0:ef:89:44:98:
         76:cf:fc:45:13:81:0d:21:ab:f1:07:db:6c:5a:c4:85:ca:9c:
         b5:65:7b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:18:29 2026 by rpki-client