Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft
File:                     LgUrNwETMSqpiD2X7a0jDKFmIWI.mft (raw, json)
Hash identifier:          x4FYmcwDeOIaD5ZsWmfn1PEoDDsidINry8ve4zUXEy0=
Subject key identifier:   52:ED:35:DF:17:AD:4E:E1:50:D8:89:52:54:B0:3E:FB:3B:07:69:C7
Authority key identifier: 2E:05:2B:37:01:13:31:2A:A9:88:3D:97:ED:AD:23:0C:A1:66:21:62
Certificate issuer:       /CN=A917E968/serialNumber=2E052B370113312AA9883D97EDAD230CA1662162
Certificate serial:       01A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft
Manifest number:          019B
Signing time:             Thu 23 Jul 2026 05:41:32 +0000
Manifest this update:     Thu 23 Jul 2026 05:41:31 +0000
Manifest next update:     Thu 30 Jul 2026 05:41:31 +0000
Files and hashes:         1: LgUrNwETMSqpiD2X7a0jDKFmIWI.crl (hash: V06FYUr2OLZFzNy8bJkicLkvKq0kdT1QbmtXSBBaI3c=)
                          2: 919148B2169911EF9DA1992BC4F9AE02.roa (hash: cLf+c87E2+WnHqsOyedNZ3lOPcCUbIIP13xWOWAjY2w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.crl
                          rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:41:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 421 (0x1a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E968, serialNumber=2E052B370113312AA9883D97EDAD230CA1662162
        Validity
            Not Before: Jul 23 05:41:31 2026 GMT
            Not After : Jul 30 05:41:31 2026 GMT
        Subject: CN=6a61a98b-5c91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b0:4a:35:8a:38:c0:02:0c:fb:6d:cc:56:81:
                    13:2a:70:52:2e:06:16:9a:91:c4:a6:55:69:3c:c8:
                    7a:97:df:ac:7f:24:4a:fa:45:5f:aa:19:6f:8e:0e:
                    8f:1d:36:44:e7:b6:df:9f:04:ba:b7:01:52:81:ac:
                    dd:21:20:92:c1:81:4a:39:4d:61:d2:e2:49:08:5e:
                    9e:54:1a:28:a1:2b:5b:0c:c7:df:00:f8:82:f7:2d:
                    c1:a8:47:cc:84:25:30:7a:94:4f:7b:04:fc:39:cf:
                    b9:a7:07:62:48:81:14:93:4e:7d:5f:b1:38:0c:5d:
                    86:fe:e7:47:70:a2:60:83:f4:a6:af:61:16:2b:0a:
                    b1:f2:10:46:b8:48:f1:ac:83:37:0a:63:59:93:b4:
                    de:2f:30:85:a3:05:4d:46:eb:c5:e6:8c:3e:ac:f8:
                    1c:95:71:09:65:67:c2:a9:fa:7a:24:87:55:e2:c3:
                    8f:32:6e:5b:f5:42:86:89:dd:4a:35:4c:1f:77:e7:
                    3f:6d:30:63:dc:70:45:f0:4a:c2:96:12:28:eb:76:
                    c9:40:32:33:ef:3d:18:bd:c0:3d:81:f3:7c:24:24:
                    75:31:0d:5d:6b:85:fb:f5:a3:ba:72:58:1b:70:b8:
                    f8:14:44:93:03:c0:9f:58:55:3a:4d:13:18:8f:aa:
                    dc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:ED:35:DF:17:AD:4E:E1:50:D8:89:52:54:B0:3E:FB:3B:07:69:C7
            X509v3 Authority Key Identifier:
                keyid:2E:05:2B:37:01:13:31:2A:A9:88:3D:97:ED:AD:23:0C:A1:66:21:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:b2:f1:f2:1c:94:19:49:b0:37:4c:ef:e5:d0:35:71:a3:31:
         f0:67:67:f7:3a:44:75:c1:a4:be:4f:94:e3:7a:d6:70:af:7b:
         c3:ec:10:0e:b7:43:8a:7f:73:0c:0e:1e:6b:3d:5e:9d:a6:00:
         51:37:24:69:72:80:4b:d6:25:58:72:b6:b7:12:b8:d5:d6:7e:
         4a:5d:97:a1:24:b5:fe:47:b5:8f:b9:db:7c:f0:fe:a1:9e:20:
         15:a1:c4:f4:d4:05:86:cd:b8:74:55:5c:14:0c:ed:10:b9:cf:
         6e:1b:59:27:51:76:7e:cb:42:ee:b9:33:37:df:b9:9a:d3:07:
         c0:24:47:d4:96:4c:e8:0c:82:73:a8:01:ef:39:20:4e:8f:97:
         dd:e7:37:e6:7b:70:c3:38:0d:79:2b:8c:af:c6:bd:11:6b:82:
         49:75:cf:c9:08:97:aa:da:ee:83:4c:25:de:0a:b6:fd:61:36:
         e7:f5:86:9b:f7:10:5b:72:e0:12:d8:01:7e:5a:38:d6:c2:53:
         f7:46:25:1a:8d:44:b4:3c:96:a3:17:09:8e:b7:f2:c1:41:2d:
         82:9a:09:f2:3a:75:65:df:18:fb:08:ac:cd:44:67:1e:91:8e:
         fb:97:2b:19:ea:72:09:fa:91:5b:f6:ce:bc:2a:c2:76:81:0b:
         0f:d3:61:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:45:06 2026 by rpki-client