Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft
File:                     lRKEJmSsUb9nhVvG5PRr41UaTaM.mft (raw, json)
Hash identifier:          wp0XHR27YJ5/kOhXwdXc0aHtlEiGRk8z4lyQCfQ3SOo=
Subject key identifier:   8C:E2:37:8D:F5:56:E8:71:7D:34:D2:52:F3:3E:A6:9E:F5:52:5C:87
Authority key identifier: 95:12:84:26:64:AC:51:BF:67:85:5B:C6:E4:F4:6B:E3:55:1A:4D:A3
Certificate issuer:       /CN=A916B7B2/serialNumber=9512842664AC51BF67855BC6E4F46BE3551A4DA3
Certificate serial:       039D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft
Manifest number:          038F
Signing time:             Thu 23 Jul 2026 01:41:36 +0000
Manifest this update:     Thu 23 Jul 2026 01:41:36 +0000
Manifest next update:     Thu 30 Jul 2026 01:41:36 +0000
Files and hashes:         1: lRKEJmSsUb9nhVvG5PRr41UaTaM.crl (hash: sFDGOArdkhLNNThMnXgQn/H6F7LMpV1PUaZKYwWBhy0=)
                          2: ULsBzvtfgl1K2igC59L2mzvRxB4.asa (hash: bMTyR+adZecSbErM2lmgCv3g2pNnvAsEv7EFqtHkOqE=)
                          3: 2A4EA10EFB7F11EC8FB58E4AC4F9AE02.roa (hash: DhWrSSSIb3yMa22B1M5gCqAEgOoCIxcBBwKz1msoORA=)
                          4: MV52KExuh2QQ1cDV77_rjB-fxi8.asa (hash: hj7dzH3p5PUyIc/5PrX8QABZUwY7fGc0N+IJoH4lBa0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.crl
                          rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:41:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 925 (0x39d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B7B2, serialNumber=9512842664AC51BF67855BC6E4F46BE3551A4DA3
        Validity
            Not Before: Jul 23 01:41:36 2026 GMT
            Not After : Jul 30 01:41:36 2026 GMT
        Subject: CN=6a617150-2719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ca:b6:d9:a7:20:79:d3:7f:f7:af:be:9f:d1:
                    d3:af:d9:21:d0:bd:81:19:d3:5b:ec:1b:5e:e7:80:
                    3e:49:c0:26:a4:a5:04:43:ee:06:dc:22:69:16:85:
                    3f:06:d9:bc:18:d7:86:9f:8f:06:53:88:d5:e1:02:
                    1d:91:50:c4:a1:4a:85:8c:dc:2e:12:b8:7c:dd:f6:
                    c7:5d:72:30:62:ec:8f:62:27:de:81:4e:e3:ea:69:
                    3d:e8:99:10:f0:10:bb:74:54:e6:19:34:44:65:5f:
                    16:f2:f7:04:2f:fe:36:21:c9:c2:a1:67:de:54:49:
                    72:73:05:79:99:62:1b:a8:75:09:ad:00:a0:d5:1d:
                    33:a1:1e:05:0e:db:4a:64:87:f0:76:26:5d:a0:c6:
                    11:61:c7:36:ed:8b:c9:4e:a4:23:23:15:42:b8:65:
                    30:42:2a:29:44:16:df:2c:8d:48:d3:0d:9f:22:35:
                    84:73:f1:da:a6:7c:4c:e7:64:ef:71:98:2a:c9:8a:
                    ae:ac:ba:ed:19:b1:66:51:c2:ff:a1:ea:01:70:f4:
                    86:c8:67:e7:67:4e:d4:02:ce:db:d3:62:1d:47:68:
                    f4:79:ae:80:1b:25:fa:5b:54:3a:84:52:b0:74:c3:
                    ec:7e:91:39:02:eb:e6:c1:54:04:08:c1:55:78:94:
                    1b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E2:37:8D:F5:56:E8:71:7D:34:D2:52:F3:3E:A6:9E:F5:52:5C:87
            X509v3 Authority Key Identifier:
                keyid:95:12:84:26:64:AC:51:BF:67:85:5B:C6:E4:F4:6B:E3:55:1A:4D:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:0e:ba:f5:4e:18:e0:94:f2:b9:b0:5a:e8:78:12:72:ae:e3:
         7c:e7:35:2d:7e:13:f3:fd:70:56:ca:da:1d:06:d8:12:0f:6f:
         1f:d1:bb:d0:c2:fa:b8:33:2b:05:54:40:cd:41:38:44:2d:a6:
         e2:a4:40:13:cd:af:51:63:ca:cb:3a:92:3d:39:7b:20:78:35:
         2e:17:d4:55:19:8e:75:49:e2:56:e1:11:26:67:d3:8c:27:a7:
         a5:14:3e:a7:de:4b:da:73:f6:a3:76:cd:f8:70:71:11:11:e5:
         99:78:c1:00:b4:4c:32:bc:bb:93:31:ff:d4:de:c1:63:2e:2b:
         cd:a6:88:93:51:d4:2e:03:ed:9b:7e:fd:6a:4b:71:89:d2:71:
         26:72:26:2f:9b:70:55:5b:8f:5a:34:dc:69:e8:2a:e1:2d:cf:
         35:df:c1:a6:d1:03:83:69:66:4c:3a:3c:fa:85:19:00:b2:fc:
         f3:43:19:7e:a2:de:35:c1:3e:f9:d7:cc:ec:c3:0a:b8:80:0e:
         6d:05:97:78:87:dd:f4:10:e5:4a:a5:41:0d:7c:1b:a1:4f:bd:
         d3:64:9b:af:e4:1e:78:19:7e:4c:96:67:8b:80:a2:9f:ef:58:
         4b:d9:87:5f:cb:58:65:af:44:5c:35:c7:cc:2a:d0:46:7a:fd:
         60:dc:15:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:53:11 2026 by rpki-client