Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft
File:                     0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft (raw, json)
Hash identifier:          fS5lEsUIVnc7X5b9VTTk6k7SgloMmV61I5nP9e0f9hw=
Subject key identifier:   37:98:9C:EB:EB:5D:B0:56:DB:F7:31:EE:C0:21:05:AE:CB:EF:57:77
Authority key identifier: D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31
Certificate issuer:       /CN=A918E308/serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531
Certificate serial:       0D49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft
Manifest number:          0D2B
Signing time:             Wed 22 Jul 2026 18:30:03 +0000
Manifest this update:     Wed 22 Jul 2026 18:30:02 +0000
Manifest next update:     Wed 29 Jul 2026 18:30:02 +0000
Files and hashes:         1: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl (hash: wJ3xu3R0RxjuxvqeR0z4m77s3zJGYGBW22oLkNscO7g=)
                          2: B430443A324211EFB14FB614C4F9AE02.roa (hash: AzFqYClBcneb2uXCI+dnrAdcY2giqvGMeQmemVnunHc=)
                          3: FB170730324211EFA9B5F949C4F9AE02.roa (hash: HVckhDYyXfabBBTw5QKnMftqCm/CyMEWw6vhsSVFD98=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl
                          rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3401 (0xd49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E308, serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531
        Validity
            Not Before: Jul 22 18:30:02 2026 GMT
            Not After : Jul 29 18:30:02 2026 GMT
        Subject: CN=6a610c2a-7b42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:65:d1:e5:79:d1:a1:49:b9:ec:14:fb:76:8f:
                    e7:44:f0:83:d9:12:91:a5:df:04:9e:d5:de:28:85:
                    0b:21:d8:8b:db:a0:5c:b3:07:97:26:70:62:f4:f7:
                    ac:fb:6b:46:0b:f6:4d:7b:d7:ce:dd:b7:14:c8:36:
                    43:3d:ca:56:cc:2f:47:23:e8:e4:40:0a:bf:92:6f:
                    ef:f6:2e:70:a0:7f:e8:e8:73:e9:8a:9b:a2:16:7b:
                    30:f0:10:7f:9a:59:b1:82:8f:9c:d3:c2:2c:5d:da:
                    cd:2b:89:c4:40:ad:66:e4:76:44:49:aa:85:21:1b:
                    6e:9a:0f:ab:5e:ba:4f:c5:50:e1:71:bc:91:de:8b:
                    cf:ee:f4:3c:49:11:19:91:4e:9a:00:c1:6a:82:7f:
                    4f:bb:91:68:42:e1:bc:16:da:ae:f4:b0:94:13:f5:
                    e8:73:be:01:e6:d7:10:55:a4:c0:db:7b:75:6d:2c:
                    90:68:0e:67:6f:62:5f:80:12:a4:b6:e2:17:b2:cf:
                    31:4d:6d:8f:38:cd:73:ab:31:f0:84:d3:03:fe:d6:
                    e0:5d:87:8f:37:b0:b2:a9:4c:9f:ef:5e:3e:24:18:
                    59:ce:c8:87:96:7a:57:2c:a2:46:5f:67:f4:98:65:
                    c7:5a:83:12:7c:c3:44:52:5a:e9:f6:2d:1f:98:c2:
                    be:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:98:9C:EB:EB:5D:B0:56:DB:F7:31:EE:C0:21:05:AE:CB:EF:57:77
            X509v3 Authority Key Identifier:
                keyid:D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:95:10:0e:47:8a:6c:db:92:59:72:80:a8:05:cd:36:f3:42:
         ab:5e:1a:47:55:59:18:92:ab:ac:4b:e7:c2:50:7c:4a:19:2e:
         ca:c8:17:06:3c:ea:4b:16:1a:8d:22:8c:0e:58:3f:a7:43:93:
         54:d2:2b:2c:66:5c:c4:17:c9:59:a9:53:8b:cf:13:fe:72:36:
         54:7a:d8:11:5d:c4:44:62:fc:78:69:c2:24:de:0e:20:3f:e4:
         59:1a:6e:4c:7b:53:12:77:65:f6:ef:ec:6e:af:e3:2d:c0:08:
         ab:08:65:54:df:1a:69:e0:a5:a6:cf:9f:c9:71:92:6e:ef:47:
         0d:54:5b:c9:47:99:e5:23:49:5a:aa:ec:3d:c9:87:c5:7f:f0:
         1a:48:71:3d:6f:4b:01:be:12:16:43:db:91:a5:4a:9e:5c:cc:
         d5:49:ce:a6:5f:3a:ce:b4:7f:69:b6:09:48:1c:7f:4b:09:eb:
         bc:a6:b0:9d:15:e0:16:ab:be:10:a3:4a:e2:77:6b:a0:dc:5e:
         8d:fe:d0:0b:d9:f7:0a:b1:ec:23:21:7e:95:9a:4a:5f:9e:11:
         c9:46:27:6c:0f:5d:7c:7b:9b:2a:46:6d:ed:b6:54:8c:1e:40:
         03:f8:60:a0:6f:ad:7f:1e:7c:41:1b:46:91:73:36:12:fb:90:
         94:86:e4:b8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEUzMDgxMTAvBgNVBAUTKEQyNTM2OTE4QzE4QjZCQzJEOTEwNDI4MDhCQ0FERkNE
QjczNDc1MzEwHhcNMjYwNzIyMTgzMDAyWhcNMjYwNzI5MTgzMDAyWjAYMRYwFAYD
VQQDEw02YTYxMGMyYS03YjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvWXR5XnRoUm57BT7do/nRPCD2RKRpd8EntXeKIULIdiL26BcsweXJnBi9Pes
+2tGC/ZNe9fO3bcUyDZDPcpWzC9HI+jkQAq/km/v9i5woH/o6HPpipuiFnsw8BB/
mlmxgo+c08IsXdrNK4nEQK1m5HZESaqFIRtumg+rXrpPxVDhcbyR3ovP7vQ8SREZ
kU6aAMFqgn9Pu5FoQuG8Ftqu9LCUE/Xoc74B5tcQVaTA23t1bSyQaA5nb2JfgBKk
tuIXss8xTW2POM1zqzHwhNMD/tbgXYePN7CyqUyf714+JBhZzsiHlnpXLKJGX2f0
mGXHWoMSfMNEUlrp9i0fmMK+FwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDeYnOvr
XbBW2/cx7sAhBa7L71d3MB8GA1UdIwQYMBaAFNJTaRjBi2vC2RBCgIvK3823NHUx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTMwOC9DNzdGN0ExMjA2
RDUxMUVBOEE4OTdGNEZDNEY5QUUwMi8wbE5wR01HTGE4TFpFRUtBaThyZnpiYzBk
VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBsTnBHTUdMYThMWkVFS0FpOHJmemJjMGRURS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RTMwOC9DNzdGN0ExMjA2RDUxMUVBOEE4OTdGNEZDNEY5QUUwMi8wbE5wR01HTGE4
TFpFRUtBaThyZnpiYzBkVEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJ5UQDkeKbNuSWXKAqAXNNvNCq14aR1VZGJKrrEvnwlB8ShkuysgXBjzqSxYa
jSKMDlg/p0OTVNIrLGZcxBfJWalTi88T/nI2VHrYEV3ERGL8eGnCJN4OID/kWRpu
THtTEndl9u/sbq/jLcAIqwhlVN8aaeClps+fyXGSbu9HDVRbyUeZ5SNJWqrsPcmH
xX/wGkhxPW9LAb4SFkPbkaVKnlzM1UnOpl86zrR/abYJSBx/SwnrvKawnRXgFqu+
EKNK4ndroNxejf7QC9n3CrHsIyF+lZpKX54RyUYnbA9dfHubKkZt7bZUjB5AA/hg
oG+tfx58QRtGkXM2EvuQlIbkuA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:42:47 2026 by rpki-client