Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177B33/E29F4C7C450911F1A0D15FD891833773/LrPOth_x-_e3OloLELd2pMHmKeQ.mft
File:                     LrPOth_x-_e3OloLELd2pMHmKeQ.mft (raw, json)
Hash identifier:          2Cb9jqjB8CzduwuqYCosPtsT/atcHxZ4QvmYtYszA8w=
Subject key identifier:   63:AD:E4:95:30:D4:31:89:4B:00:E5:F4:0B:5C:27:77:BC:AD:DF:19
Authority key identifier: 2E:B3:CE:B6:1F:F1:FB:F7:B7:3A:5A:0B:10:B7:76:A4:C1:E6:29:E4
Certificate issuer:       /CN=A9177B33/serialNumber=2EB3CEB61FF1FBF7B73A5A0B10B776A4C1E629E4
Certificate serial:       2D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LrPOth_x-_e3OloLELd2pMHmKeQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177B33/E29F4C7C450911F1A0D15FD891833773/LrPOth_x-_e3OloLELd2pMHmKeQ.mft
Manifest number:          2B
Signing time:             Thu 23 Jul 2026 10:48:37 +0000
Manifest this update:     Thu 23 Jul 2026 10:48:37 +0000
Manifest next update:     Thu 30 Jul 2026 10:48:37 +0000
Files and hashes:         1: LrPOth_x-_e3OloLELd2pMHmKeQ.crl (hash: 8ZXsa+BQVNM28SCMDLG4EwJ0RAtGWmsdVMJppH724Eg=)
                          2: 18D4C40A450C11F1AC1D8E2393833773.roa (hash: FETq8YrUH6niu8dXdo9vFk0pXHnE52qLRKRFdwwzc0k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177B33/E29F4C7C450911F1A0D15FD891833773/LrPOth_x-_e3OloLELd2pMHmKeQ.crl
                          rsync://rpki.apnic.net/member_repository/A9177B33/E29F4C7C450911F1A0D15FD891833773/LrPOth_x-_e3OloLELd2pMHmKeQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LrPOth_x-_e3OloLELd2pMHmKeQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177B33, serialNumber=2EB3CEB61FF1FBF7B73A5A0B10B776A4C1E629E4
        Validity
            Not Before: Jul 23 10:48:37 2026 GMT
            Not After : Jul 30 10:48:37 2026 GMT
        Subject: CN=6a61f185-1812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c5:75:2a:98:3c:ae:98:72:4c:49:e9:7f:4d:
                    34:27:ff:0f:d2:52:b2:43:1d:bf:e7:3b:00:fb:f8:
                    98:99:9c:7b:16:31:fc:b1:6c:83:c5:67:ce:e3:d0:
                    62:50:fc:9a:cf:84:8a:bf:36:d3:65:8b:70:8e:0f:
                    a5:79:9e:3b:44:7d:17:ef:28:66:00:b9:cb:7c:f9:
                    c1:fa:69:b4:ce:35:b6:6f:2d:3a:6c:89:12:01:37:
                    fa:32:52:2b:61:17:68:6d:63:59:39:e4:9e:fe:87:
                    af:9f:c7:38:dc:ef:0c:84:3f:e3:e2:40:e3:7b:d1:
                    fc:e4:59:3e:4f:a9:1b:a5:dc:19:bf:df:51:5e:03:
                    b6:f9:fb:0c:4a:8a:5b:89:ac:8a:f9:17:55:70:a3:
                    f2:5f:d6:6f:0b:92:50:25:71:be:6a:e3:f7:51:e8:
                    4a:d2:87:a1:85:8f:bf:af:0a:d9:da:17:6a:90:31:
                    cc:47:06:3a:bb:99:16:95:aa:a8:54:ff:0a:e0:4b:
                    82:4b:75:86:2b:e7:3b:f1:39:0d:17:48:f0:db:ed:
                    36:0b:a7:30:c3:d5:2c:9c:ab:8e:61:6c:57:97:0f:
                    5d:b0:e3:02:74:fe:fe:26:56:f6:77:f4:20:f0:2b:
                    33:e5:3e:52:4b:c1:dc:ba:dd:df:75:d7:32:4f:3c:
                    f7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:AD:E4:95:30:D4:31:89:4B:00:E5:F4:0B:5C:27:77:BC:AD:DF:19
            X509v3 Authority Key Identifier:
                keyid:2E:B3:CE:B6:1F:F1:FB:F7:B7:3A:5A:0B:10:B7:76:A4:C1:E6:29:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177B33/E29F4C7C450911F1A0D15FD891833773/LrPOth_x-_e3OloLELd2pMHmKeQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LrPOth_x-_e3OloLELd2pMHmKeQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177B33/E29F4C7C450911F1A0D15FD891833773/LrPOth_x-_e3OloLELd2pMHmKeQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:c6:07:9f:39:e4:4b:6c:2b:66:5a:68:3a:c9:fe:b6:58:0d:
         23:5b:93:04:0d:87:16:88:e6:c0:a7:c3:8e:55:7a:87:fa:b4:
         06:ba:b1:c0:fc:d5:ac:34:f8:49:c7:4c:b0:05:77:77:1e:9d:
         70:c1:25:74:67:21:75:b6:65:4c:f2:90:98:d4:06:66:45:6a:
         b4:8f:00:09:c2:13:3a:9e:3e:01:f8:f3:4c:ef:d5:ac:26:a3:
         cc:df:2f:28:91:c1:11:e2:14:b5:97:fa:ae:ee:5d:ab:62:3c:
         42:1f:8f:da:b3:da:ef:25:a6:41:95:3e:cf:28:25:f4:2c:f4:
         5d:7b:00:7e:fd:a4:35:a0:0f:65:0a:93:33:cc:e9:10:d0:51:
         08:41:cd:75:2b:db:4f:f6:f9:7d:c8:94:67:be:79:41:25:f8:
         65:b2:5e:b7:06:68:12:5a:eb:42:5a:05:db:9d:54:bc:d1:b6:
         9c:88:65:e9:31:2c:8e:4e:78:d2:26:dc:85:db:bc:05:26:51:
         2c:c8:27:3b:8e:17:df:29:3a:9f:34:71:f5:95:45:5d:03:1c:
         48:0a:93:32:df:e3:c1:76:8b:7d:91:e4:7b:a0:39:95:bc:f4:
         b4:33:dd:18:93:54:73:1a:c7:4c:c4:8d:2e:5a:91:68:1d:d2:
         26:e4:db:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:07:16 2026 by rpki-client