Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B58/C1A8F5F8780911F1A1C8C27D58A30FBC/LpFcOykbTBhp166WMYTR_Ql4e24.mft
File:                     LpFcOykbTBhp166WMYTR_Ql4e24.mft (raw, json)
Hash identifier:          e0bZo3tb1uaWmFI3sOfJVtrAJFcBEbo8xyhLWXWYK5o=
Subject key identifier:   9F:6E:30:2B:95:67:BB:D0:3E:7D:FA:B4:7C:48:F1:50:53:19:E0:B5
Authority key identifier: 2E:91:5C:3B:29:1B:4C:18:69:D7:AE:96:31:84:D1:FD:09:78:7B:6E
Certificate issuer:       /CN=A9183B58/serialNumber=2E915C3B291B4C1869D7AE963184D1FD09787B6E
Certificate serial:       0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpFcOykbTBhp166WMYTR_Ql4e24.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183B58/C1A8F5F8780911F1A1C8C27D58A30FBC/LpFcOykbTBhp166WMYTR_Ql4e24.mft
Manifest number:          0A
Signing time:             Thu 23 Jul 2026 11:14:00 +0000
Manifest this update:     Thu 23 Jul 2026 11:13:59 +0000
Manifest next update:     Thu 30 Jul 2026 11:13:59 +0000
Files and hashes:         1: LpFcOykbTBhp166WMYTR_Ql4e24.crl (hash: o+irjxmL/YedukGE54OIPOJ7MqLAwvHdBiuBbzfhxQU=)
                          2: E75BE0F0780C11F19D39A95459A30FBC.roa (hash: mfPn/tiTCBYiMY19wKcdtVlq4pxeYPFcwC935dAmnus=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183B58/C1A8F5F8780911F1A1C8C27D58A30FBC/LpFcOykbTBhp166WMYTR_Ql4e24.crl
                          rsync://rpki.apnic.net/member_repository/A9183B58/C1A8F5F8780911F1A1C8C27D58A30FBC/LpFcOykbTBhp166WMYTR_Ql4e24.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpFcOykbTBhp166WMYTR_Ql4e24.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:13:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183B58, serialNumber=2E915C3B291B4C1869D7AE963184D1FD09787B6E
        Validity
            Not Before: Jul 23 11:13:59 2026 GMT
            Not After : Jul 30 11:13:59 2026 GMT
        Subject: CN=6a61f778-3488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c7:71:88:b8:23:0d:35:03:13:26:9c:4d:b4:
                    b6:69:87:0e:c9:3d:72:40:70:b9:1f:2d:77:ba:46:
                    7d:8d:74:a8:71:33:a4:f6:69:4e:05:85:5a:22:3b:
                    6e:2d:fe:5f:9a:19:77:a3:3a:4d:ea:ce:bc:d3:89:
                    5f:26:f5:e2:97:09:97:b4:74:8b:3b:d4:df:db:0c:
                    62:ca:09:ad:f4:05:71:1c:ea:cd:90:c2:32:3a:27:
                    27:a4:31:90:e6:d2:8d:e3:c7:82:dd:27:79:1d:32:
                    24:e0:ba:2f:3c:10:69:87:c5:88:fe:38:a1:78:6c:
                    f4:5d:57:88:29:34:8e:2d:c3:5d:49:ad:63:27:1a:
                    a9:27:d0:7c:90:15:c7:14:2c:31:94:f5:ad:26:ef:
                    d8:91:5b:fa:cd:4c:4c:fb:06:0f:e9:ac:b9:78:5f:
                    55:ed:1c:9f:d3:03:45:fe:bd:98:24:58:6c:72:ee:
                    f7:25:f1:1c:08:0f:7f:d2:c9:81:06:db:4c:9a:68:
                    0a:84:70:ee:a3:93:7c:87:26:c5:32:50:ad:29:5a:
                    94:9b:a8:b0:27:a6:43:14:0c:15:6c:0a:6f:bb:5c:
                    29:6e:88:c0:0b:1f:af:07:7b:57:9b:e1:d8:2b:c8:
                    cd:32:3b:7e:c8:2e:26:89:35:9b:c6:3f:87:87:5b:
                    0f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:6E:30:2B:95:67:BB:D0:3E:7D:FA:B4:7C:48:F1:50:53:19:E0:B5
            X509v3 Authority Key Identifier:
                keyid:2E:91:5C:3B:29:1B:4C:18:69:D7:AE:96:31:84:D1:FD:09:78:7B:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183B58/C1A8F5F8780911F1A1C8C27D58A30FBC/LpFcOykbTBhp166WMYTR_Ql4e24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpFcOykbTBhp166WMYTR_Ql4e24.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B58/C1A8F5F8780911F1A1C8C27D58A30FBC/LpFcOykbTBhp166WMYTR_Ql4e24.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:6e:56:b7:e5:e0:46:2c:fb:4b:08:20:33:4e:da:5f:00:bc:
         cc:1a:68:7d:54:26:ff:86:73:5a:25:df:e0:00:81:ee:90:49:
         fd:20:93:fb:95:de:c0:75:77:07:e1:b0:d7:37:7c:46:f0:7c:
         12:07:60:31:c9:b3:96:08:90:a9:bc:e9:66:7b:a3:2c:1b:cd:
         02:01:4b:51:ae:50:80:9e:79:12:4c:f0:9e:c4:e7:4a:01:52:
         1d:14:4a:64:56:1b:78:ef:fd:11:96:23:61:6f:cd:8f:90:4c:
         a9:e5:de:23:8b:b8:9b:dd:ce:93:00:8f:91:cd:f0:34:88:d7:
         5b:4e:75:c3:aa:2b:88:25:05:91:9c:c3:be:3a:2b:61:9f:89:
         ba:46:e2:85:33:7e:e5:fe:ed:7a:3a:0b:17:44:e7:5b:2e:f4:
         a5:70:12:60:0d:c9:93:61:ed:cc:f1:cc:d9:0f:90:09:91:36:
         e2:39:50:54:51:e7:81:30:b3:c6:df:e5:9b:23:fa:04:e6:90:
         c1:65:6e:e7:94:e5:db:10:2f:62:52:9c:c1:f5:ce:b4:ef:0d:
         da:d9:be:66:ea:62:0d:e8:0d:30:1d:4b:63:ce:8f:75:a8:3c:
         18:fe:94:9c:93:96:8f:b3:cd:1d:45:68:fe:d1:80:45:2a:09:
         c9:e8:29:31
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
M0I1ODExMC8GA1UEBRMoMkU5MTVDM0IyOTFCNEMxODY5RDdBRTk2MzE4NEQxRkQw
OTc4N0I2RTAeFw0yNjA3MjMxMTEzNTlaFw0yNjA3MzAxMTEzNTlaMBgxFjAUBgNV
BAMTDTZhNjFmNzc4LTM0ODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCUx3GIuCMNNQMTJpxNtLZphw7JPXJAcLkfLXe6Rn2NdKhxM6T2aU4FhVoiO24t
/l+aGXejOk3qzrzTiV8m9eKXCZe0dIs71N/bDGLKCa30BXEc6s2QwjI6JyekMZDm
0o3jx4LdJ3kdMiTgui88EGmHxYj+OKF4bPRdV4gpNI4tw11JrWMnGqkn0HyQFccU
LDGU9a0m79iRW/rNTEz7Bg/prLl4X1XtHJ/TA0X+vZgkWGxy7vcl8RwID3/SyYEG
20yaaAqEcO6jk3yHJsUyUK0pWpSbqLAnpkMUDBVsCm+7XCluiMALH68He1eb4dgr
yM0yO37ILiaJNZvGP4eHWw+DAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUn24wK5Vn
u9A+ffq0fEjxUFMZ4LUwHwYDVR0jBBgwFoAULpFcOykbTBhp166WMYTR/Ql4e24w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgzQjU4L0MxQThGNUY4Nzgw
OTExRjFBMUM4QzI3RDU4QTMwRkJDL0xwRmNPeWtiVEJocDE2NldNWVRSX1FsNGUy
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTHBGY095a2JUQmhwMTY2V01ZVFJfUWw0ZTI0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgz
QjU4L0MxQThGNUY4NzgwOTExRjFBMUM4QzI3RDU4QTMwRkJDL0xwRmNPeWtiVEJo
cDE2NldNWVRSX1FsNGUyNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBlbla35eBGLPtLCCAzTtpfALzMGmh9VCb/hnNaJd/gAIHukEn9IJP7ld7AdXcH
4bDXN3xG8HwSB2AxybOWCJCpvOlme6MsG80CAUtRrlCAnnkSTPCexOdKAVIdFEpk
Vht47/0RliNhb82PkEyp5d4ji7ib3c6TAI+RzfA0iNdbTnXDqiuIJQWRnMO+Oith
n4m6RuKFM37l/u16OgsXROdbLvSlcBJgDcmTYe3M8czZD5AJkTbiOVBUUeeBMLPG
3+WbI/oE5pDBZW7nlOXbEC9iUpzB9c607w3a2b5m6mIN6A0wHUtjzo91qDwY/pSc
k5aPs80dRWj+0YBFKgnJ6Ckx
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:24:51 2026 by rpki-client