Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft
File:                     lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft (raw, json)
Hash identifier:          UZd0Hws4cZ5WmJxymP4e4poPB2mt6ja8Egs36Zof+kw=
Subject key identifier:   D0:A3:FB:58:65:A4:4B:27:E8:B7:A1:EE:F7:92:51:35:7E:A2:39:1D
Authority key identifier: 96:A4:31:ED:06:7C:3E:B1:E4:73:C1:30:4A:C6:DF:9B:76:22:55:A3
Certificate issuer:       /CN=A918779B/serialNumber=96A431ED067C3EB1E473C1304AC6DF9B762255A3
Certificate serial:       10D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft
Manifest number:          187C
Signing time:             Wed 22 Jul 2026 17:27:00 +0000
Manifest this update:     Wed 22 Jul 2026 17:27:00 +0000
Manifest next update:     Wed 29 Jul 2026 17:27:00 +0000
Files and hashes:         1: lqQx7QZ8PrHkc8EwSsbfm3YiVaM.crl (hash: VGxFYWXnPWXqetFyG+TF565eg/IMz5EF3LsTdpD5n9A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.crl
                          rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:26:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4309 (0x10d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918779B, serialNumber=96A431ED067C3EB1E473C1304AC6DF9B762255A3
        Validity
            Not Before: Jul 22 17:27:00 2026 GMT
            Not After : Jul 29 17:27:00 2026 GMT
        Subject: CN=6a60fd64-66fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ac:63:65:bd:15:66:a0:40:93:20:58:dc:06:
                    57:d0:e4:09:e9:bf:16:fe:90:af:1f:b2:d9:a3:a7:
                    d0:65:81:c0:47:f0:27:de:51:53:c3:59:d4:55:ce:
                    8e:c4:61:cb:c6:bd:06:56:10:2a:fb:c0:7d:06:99:
                    ec:28:26:89:1a:c0:9d:5f:dc:8b:68:95:38:e6:c1:
                    41:c3:59:57:94:eb:4e:cd:1a:ca:d2:d5:f8:5a:dd:
                    cd:33:f8:82:12:2e:9d:30:aa:89:19:57:3c:c0:97:
                    98:56:09:b4:6d:f7:5f:5d:9b:b2:94:15:e9:ea:85:
                    82:20:13:31:85:b7:bf:f1:cd:5d:81:d9:c6:6c:24:
                    55:38:4d:13:52:d0:70:b0:25:9f:46:ca:c6:9c:c2:
                    ea:47:34:41:f6:55:c9:25:09:3e:3d:d6:df:dc:cb:
                    ee:41:eb:de:41:73:6c:b5:0c:fc:f5:26:90:91:51:
                    31:5e:d9:d7:1c:10:5e:98:51:01:e1:5b:cf:3a:8b:
                    f0:a8:c5:b9:7a:aa:29:59:ce:3a:8d:79:be:bd:ef:
                    fa:ce:14:43:36:9c:1a:ed:7d:a0:e3:84:0e:75:15:
                    bc:b0:7d:34:78:9e:fc:c9:9a:4f:39:aa:80:9f:5d:
                    ad:27:9b:ee:3f:ee:c3:f4:09:91:b4:81:7f:36:fa:
                    c9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A3:FB:58:65:A4:4B:27:E8:B7:A1:EE:F7:92:51:35:7E:A2:39:1D
            X509v3 Authority Key Identifier:
                keyid:96:A4:31:ED:06:7C:3E:B1:E4:73:C1:30:4A:C6:DF:9B:76:22:55:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:03:0a:92:30:27:f6:c4:e4:ee:c6:43:9e:13:2b:6c:f3:38:
         ab:af:e7:e2:dd:fa:73:19:f1:2f:b2:b2:ed:99:a8:02:44:05:
         c2:aa:95:8f:c4:93:d4:e3:81:d1:d3:5c:10:1c:2c:49:02:61:
         3e:db:9e:79:d4:6b:61:78:67:ff:a7:58:8b:b1:b8:cd:d1:c3:
         3c:6e:72:f8:2e:16:68:23:f7:11:32:1a:1e:2b:c0:b6:49:ec:
         d9:dd:dd:e0:8a:f7:b0:d5:d7:d1:fe:28:67:3c:ad:ba:e5:4e:
         71:c3:82:7e:88:34:09:4a:28:76:e7:71:dd:b4:42:71:13:6c:
         40:be:ce:49:a1:b5:a0:47:2c:d4:48:ff:14:e5:af:c0:0c:f6:
         10:d2:c9:38:e2:dc:8e:27:48:5b:db:a8:9d:18:13:55:b9:f1:
         64:00:11:be:05:15:cd:d6:f8:95:aa:99:93:9d:c8:ad:ad:3a:
         a5:54:a7:ad:d6:2e:31:95:e2:8a:ca:fa:c5:29:b7:33:ee:74:
         5a:8b:9e:c8:a9:2e:1b:c4:2a:36:8c:4e:db:d4:14:8a:50:e8:
         95:b0:5b:d7:3a:18:34:36:bc:89:fa:d8:51:c2:1e:d5:b1:b0:
         6d:1d:be:9e:27:43:82:16:a3:4e:f5:27:f5:d2:ac:61:98:f1:
         d4:4e:db:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:33:01 2026 by rpki-client