Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft
File:                     L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft (raw, json)
Hash identifier:          A+sl1fckmv5F/DU9qWTdlvlFYe7Sc7Ef4gZmFMTq+jc=
Subject key identifier:   24:2D:46:99:8C:2E:B9:A0:1E:1D:A1:D6:FE:67:3C:4A:A5:23:29:B5
Authority key identifier: 2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34
Certificate issuer:       /CN=A9183496/serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734
Certificate serial:       0CEE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft
Manifest number:          0CE4
Signing time:             Wed 22 Jul 2026 18:40:26 +0000
Manifest this update:     Wed 22 Jul 2026 18:40:25 +0000
Manifest next update:     Wed 29 Jul 2026 18:40:25 +0000
Files and hashes:         1: L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl (hash: e3gtMCWX9URPkI8MB+fcsK6iXiW41/1yGXN8WWdtvu0=)
                          2: 68A35F78831411EC90E07C19C4F9AE02.roa (hash: xD5ELxyj4bWF9z+q/0VL9OifUcgzca/SexnDM+WQXMA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl
                          rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:40:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3310 (0xcee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183496, serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734
        Validity
            Not Before: Jul 22 18:40:25 2026 GMT
            Not After : Jul 29 18:40:25 2026 GMT
        Subject: CN=6a610e9a-ffef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:02:33:de:fe:c9:3c:d8:71:a9:22:6c:a8:0f:
                    aa:69:5c:eb:bb:40:8f:9c:12:7d:54:df:1b:8f:e7:
                    22:83:36:cb:eb:a0:91:f5:9c:3d:a0:eb:ef:7b:f1:
                    ed:13:40:d6:32:28:b2:77:2f:e7:09:a4:dd:92:12:
                    ef:57:e2:64:45:20:01:3b:e7:c1:ca:5a:da:ff:0a:
                    bb:35:db:aa:f3:ca:96:36:9e:11:c8:88:14:47:94:
                    06:eb:78:a0:3d:1d:d3:14:e4:71:1b:e9:2e:ee:9c:
                    f1:4f:90:97:4c:77:29:8f:87:ab:7d:7f:10:74:6a:
                    e5:f2:e8:4b:1d:71:b7:63:8c:22:c7:6d:d2:9c:c5:
                    b5:3d:8b:c8:9f:7c:4c:60:43:4b:14:94:d6:29:01:
                    a7:19:66:c0:20:1f:79:79:cf:fa:47:cc:6a:f7:06:
                    5b:17:d7:30:aa:d4:1e:ee:89:47:98:99:ef:d1:db:
                    9f:b6:a0:e0:af:95:0e:9d:22:ed:da:54:d1:eb:f7:
                    9e:c2:16:a6:53:1a:74:b6:fd:fb:28:f9:3e:36:7b:
                    4e:79:c1:88:c1:49:d3:70:6b:dc:f7:43:e7:cb:23:
                    f1:ca:49:67:ae:ee:4c:35:4b:1f:7c:ed:f9:f6:df:
                    9f:eb:c5:2a:57:dd:35:77:e8:fa:ae:67:7a:e0:6c:
                    85:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:2D:46:99:8C:2E:B9:A0:1E:1D:A1:D6:FE:67:3C:4A:A5:23:29:B5
            X509v3 Authority Key Identifier:
                keyid:2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:15:e2:c0:72:bc:de:a7:37:72:aa:c4:5a:b5:db:4f:91:db:
         60:09:2d:2d:ad:1a:25:f8:a6:4a:14:5a:87:38:16:e2:6f:b7:
         9a:a3:e6:47:e5:ec:58:1b:ec:aa:b5:a3:f5:e9:2d:ec:4b:33:
         74:98:12:40:70:74:52:b8:07:f0:27:4d:51:07:a9:ef:37:eb:
         42:7d:a3:21:1b:0e:54:2e:72:64:9a:f5:3a:dc:c9:77:c9:5c:
         09:84:fc:86:fd:a6:59:7f:ec:92:47:79:dd:87:c4:49:a2:53:
         23:73:0b:10:5f:0e:4a:41:f4:c4:ff:f7:11:70:f7:85:72:06:
         7d:1f:45:b6:01:f6:db:dc:ca:83:0b:a1:8a:c9:eb:08:14:17:
         63:dd:bd:73:6d:28:0d:81:0a:85:52:a8:a5:d2:56:8e:63:76:
         8e:22:40:f8:a9:32:ea:cb:3d:e5:2f:00:cd:e2:42:03:ba:20:
         ed:6f:23:f7:9d:19:da:60:3f:db:f3:bf:68:64:be:04:71:3a:
         83:a9:18:f7:c0:62:5d:51:4d:87:0d:df:9b:80:ed:97:a9:06:
         22:43:be:20:8e:c3:9c:b7:0e:75:2b:1c:d8:ef:87:9f:8a:04:
         b7:64:1c:f5:c0:ef:e5:75:eb:02:ba:07:ad:60:4b:d6:f9:84:
         4d:7b:ba:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:37:10 2026 by rpki-client