Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
File:                     0LR5KL_bnbNR4dQlatArZyj5XPU.mft (raw, json)
Hash identifier:          K0YLHn8c256N3npApBgilKIQaht4FWQJM4luAdukSfk=
Subject key identifier:   EA:E8:6B:51:33:FE:96:67:D8:4F:93:43:32:30:56:3D:32:17:69:1E
Authority key identifier: D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5
Certificate issuer:       /CN=A9174306/serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5
Certificate serial:       01F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
Manifest number:          01E8
Signing time:             Thu 23 Jul 2026 04:47:35 +0000
Manifest this update:     Thu 23 Jul 2026 04:47:34 +0000
Manifest next update:     Thu 30 Jul 2026 04:47:34 +0000
Files and hashes:         1: 0LR5KL_bnbNR4dQlatArZyj5XPU.crl (hash: 8sxA5yIpbhu77m0kfHFS3Npl+RWCjnOHdcePIMQ8oE0=)
                          2: BF9A82FE1C3D11F188759CE93A3D8C67.roa (hash: ZuwsvyCFnlRH97lSSpze4by6vXPNWBp8bBdjxC9A6Vs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl
                          rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:47:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 498 (0x1f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174306, serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5
        Validity
            Not Before: Jul 23 04:47:34 2026 GMT
            Not After : Jul 30 04:47:34 2026 GMT
        Subject: CN=6a619ce7-f4ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3a:cf:f3:77:55:8c:90:32:77:a2:b6:94:34:
                    b2:49:ce:95:eb:9e:6b:20:52:50:51:4b:83:20:46:
                    c4:ae:37:1e:eb:aa:73:76:4f:7c:bd:6c:44:19:df:
                    f2:20:80:04:1d:3a:a4:ab:c3:90:9f:f6:8f:6d:5d:
                    87:1f:ad:50:b5:ea:59:6f:c5:3d:be:f2:65:cd:b5:
                    45:2c:e7:eb:21:87:26:9f:44:6e:c5:7a:0e:7e:cd:
                    fb:2c:ab:97:d4:da:63:c5:79:28:c8:fb:ea:fa:9c:
                    75:26:6f:5a:17:04:4d:36:76:9f:ca:db:6d:55:fb:
                    d2:aa:f9:e6:3d:fb:c8:6e:c5:78:9e:9e:56:e8:26:
                    fe:14:3c:31:c5:40:e4:20:9a:28:a8:f9:23:e1:d7:
                    ed:32:17:ab:89:09:bc:b2:7f:ea:34:79:72:94:c2:
                    4c:5f:ed:5b:7f:9d:47:24:37:8a:e5:7d:62:18:f5:
                    67:fb:30:26:2c:77:cb:76:d8:22:19:35:d4:f6:23:
                    69:df:bf:18:89:4e:ac:6c:50:3a:d5:75:d3:ea:b7:
                    60:db:cc:77:59:0a:8b:32:41:34:2d:29:30:c3:2c:
                    33:1e:19:74:b3:58:8a:81:50:07:cd:ef:e8:7b:f6:
                    44:73:ea:30:89:91:ab:7c:cc:92:df:03:b2:6a:d8:
                    bc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E8:6B:51:33:FE:96:67:D8:4F:93:43:32:30:56:3D:32:17:69:1E
            X509v3 Authority Key Identifier:
                keyid:D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:be:2d:94:f9:2f:09:d1:e6:b4:32:8f:e8:00:e6:78:4f:e5:
         f1:5a:0a:2b:84:34:24:40:26:c2:a5:d7:5c:31:e4:30:d1:8f:
         c8:a1:5f:80:e2:eb:0e:80:ce:42:28:cf:47:ec:04:ac:0e:d0:
         50:dc:a1:54:0c:24:d1:82:e9:63:88:7c:25:df:c3:e4:20:4a:
         b2:b2:e6:90:e6:51:06:d2:43:1e:85:76:41:5b:cc:35:e3:6b:
         56:06:af:20:b1:1f:a0:0b:e7:a9:e8:9c:20:00:02:16:ac:c6:
         e9:b8:3f:75:dc:0d:e1:ab:56:90:01:15:5a:6f:7f:9e:35:84:
         22:5e:2a:1d:8b:a0:c6:d2:94:f3:3f:95:3b:b9:45:7d:76:83:
         29:86:b9:ef:24:55:1c:a2:fd:50:d4:a7:d5:ac:61:ae:dd:bb:
         49:8e:b2:de:b9:d2:de:53:cd:48:8a:44:72:7a:e7:66:e8:ce:
         48:15:31:be:d8:52:c4:91:c4:6e:52:af:db:08:fe:ac:82:6b:
         93:2c:ad:f5:53:71:bb:cc:73:72:ef:6c:36:43:45:1b:d6:88:
         39:8b:73:50:e4:40:8a:3e:8d:e6:1c:c7:09:95:d2:f8:85:4c:
         13:05:91:f0:c3:a9:62:f3:9d:8f:29:34:c4:13:ab:a5:28:c3:
         e0:16:97:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:50:17 2026 by rpki-client